Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ka11mAeK8x508Cnj2wcTUxVSKa0.roa
File: ka11mAeK8x508Cnj2wcTUxVSKa0.roa (raw, json)
Hash identifier: lJA6m7CqVB8tXmRx4tyI93jHHn3K1Ql+tcoK2FgIJIA=
Subject key identifier: 91:AD:75:98:07:8A:F3:1E:74:F0:29:E3:DB:07:13:53:15:52:29:AD
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 02590C53
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ka11mAeK8x508Cnj2wcTUxVSKa0.roa
Signing time: Sat 01 Jan 2022 11:01:40 +0000
ROA not before: Sat 01 Jan 2022 11:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210770
IP address blocks: 2a05:4140:105::/48 maxlen: 48
2a05:4140:103::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39390291 (0x2590c53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 11:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91ad7598078af31e74f029e3db071353155229ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:40:e8:f9:37:3f:b1:ed:87:62:e6:03:83:40:
64:8f:b8:ac:3d:c5:43:62:50:4d:65:7f:7e:b1:e2:
72:93:ab:04:1d:89:1d:51:f2:8a:e5:83:c8:1b:e0:
53:0e:8c:41:93:b6:35:88:a9:35:82:fc:7a:f4:f4:
39:a4:b2:0a:90:56:00:a9:c3:0d:a3:b7:ba:ce:92:
21:fb:1b:65:ac:4e:3a:61:9e:28:3a:38:15:38:74:
fd:79:7f:39:43:bb:1e:66:35:e4:21:78:3a:1f:77:
5b:46:48:7b:1d:16:d0:ba:68:31:8e:93:98:16:28:
b7:0e:0e:98:91:53:33:75:45:31:05:70:03:d6:07:
53:57:17:a0:4d:a3:59:3d:c1:b8:18:bf:52:ea:8b:
ae:31:c2:dd:44:a2:1d:d4:80:52:6c:25:35:f2:c4:
f6:f6:79:78:b0:bc:37:a7:85:27:fe:7d:05:ac:dc:
4d:e8:c2:9e:41:b1:1e:84:7b:f7:75:89:f3:07:89:
33:9c:ea:ca:f3:ca:16:3f:3b:76:0b:1d:5b:0f:a6:
69:cf:14:f0:0f:68:7b:20:2e:8c:ae:d9:a1:9e:33:
a0:48:09:c3:c1:29:20:dc:1f:7f:68:47:ef:ff:a1:
8e:a3:5a:26:ce:49:80:d0:95:48:01:bf:74:e1:12:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AD:75:98:07:8A:F3:1E:74:F0:29:E3:DB:07:13:53:15:52:29:AD
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/ka11mAeK8x508Cnj2wcTUxVSKa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:103::/48
2a05:4140:105::/48
Signature Algorithm: sha256WithRSAEncryption
75:0f:52:51:ff:8f:d8:70:67:42:86:17:4e:32:e8:25:a7:de:
57:77:0f:5c:79:d5:44:7d:e6:09:7a:d4:10:64:a4:ca:2a:fa:
b9:8a:82:c0:b8:cd:21:31:9f:b6:8b:66:fb:a9:ca:f4:23:7c:
04:34:a4:74:5f:f7:8a:f8:ab:fd:11:fa:67:d9:31:64:5b:c5:
61:9f:86:14:7e:9a:14:5e:86:5f:f1:ce:6e:af:4c:0d:3a:08:
3b:28:bf:2d:d5:5e:62:2d:22:d2:1b:0e:fc:d2:08:72:ff:7c:
5b:88:8d:eb:09:2f:9a:ac:31:77:59:d1:a1:af:b3:de:f6:45:
c1:bf:7c:f8:56:61:f2:9f:c3:b3:f3:22:0e:8b:32:91:e2:e7:
11:f1:02:e0:a5:52:a8:82:9b:19:fd:2f:36:d9:d6:9d:2e:2a:
37:fb:cd:b2:c8:86:78:bc:f2:c7:0a:a4:85:b4:22:81:80:6c:
c2:49:ed:a0:af:82:7a:b6:a7:4d:22:b8:1e:d2:5a:50:42:59:
3d:3a:c9:37:e9:d2:fa:a7:fe:df:eb:79:e5:fe:c7:61:71:d2:
7d:5c:8f:62:8f:cf:eb:ba:b7:48:92:1d:f4:25:e6:75:23:47:
92:dc:1e:ff:27:88:c7:4f:53:4d:74:95:0b:68:86:9e:d9:8f:
1c:f9:a7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org