Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/zBHDqUhSQ5AobzTT2HIP8_-qRj0.roa
File: zBHDqUhSQ5AobzTT2HIP8_-qRj0.roa (raw, json)
Hash identifier: 0y1RoIbQMOUObQXli+YAlWyzXK+XwjYNsPybcSCWks8=
Subject key identifier: CC:11:C3:A9:48:52:43:90:28:6F:34:D3:D8:72:0F:F3:FF:AA:46:3D
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 018458B1E33CB357AB99F70C3D6F59E6A2AA
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/zBHDqUhSQ5AobzTT2HIP8_-qRj0.roa
Signing time: Tue 08 Nov 2022 19:22:43 +0000
ROA not before: Tue 08 Nov 2022 19:22:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203363
IP address blocks: 2a05:4140:700::/40 maxlen: 40
2a05:4140:800::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:58:b1:e3:3c:b3:57:ab:99:f7:0c:3d:6f:59:e6:a2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Nov 8 19:22:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc11c3a948524390286f34d3d8720ff3ffaa463d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:4b:41:ce:ad:04:e9:1d:db:30:34:1d:48:
24:eb:17:0c:95:06:ab:b9:2f:a1:5a:18:fb:a1:aa:
d9:14:ba:fc:84:1a:cf:d7:73:a7:83:12:b9:2e:50:
b7:e6:35:d1:81:e7:05:00:2a:89:c1:e9:d9:20:6e:
ca:02:b5:5c:d5:b7:0f:fc:91:10:a8:9f:d1:ad:81:
32:d3:54:be:5e:4d:5e:74:71:82:74:bc:b6:90:50:
65:a3:e6:3e:4f:26:af:45:7d:08:12:29:0b:44:c0:
14:a9:8c:41:2b:b3:43:ac:49:f3:aa:ad:b5:27:ec:
ea:2e:3b:ff:20:8d:bf:37:f8:73:80:10:e2:27:8f:
31:53:bf:49:7d:f2:85:13:bc:6a:00:41:79:d5:54:
11:dc:1a:4e:48:e6:1e:38:f2:a6:9e:82:a0:53:69:
27:a1:d2:f9:04:18:e5:61:eb:99:91:7e:67:81:c8:
cc:88:5f:b2:23:fc:40:67:fc:ed:9f:c0:3a:0c:29:
e9:76:ba:00:e9:bb:b4:66:c4:f3:48:12:fd:88:f2:
58:70:65:d0:48:1e:85:2a:0a:9f:f4:38:52:1f:e2:
19:88:11:fc:76:5c:65:40:06:65:1d:0d:91:f4:52:
97:86:c2:f2:a3:b9:7d:40:47:e0:80:6f:3f:4a:fc:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:11:C3:A9:48:52:43:90:28:6F:34:D3:D8:72:0F:F3:FF:AA:46:3D
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/zBHDqUhSQ5AobzTT2HIP8_-qRj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:700::-2a05:4140:8ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:72:34:a6:96:f0:e4:00:9d:ee:fa:ec:a8:f8:61:6c:f3:ff:
bf:ce:b4:c6:6e:68:1a:88:eb:83:45:a5:2d:1b:e5:64:24:34:
29:92:4c:8e:af:ce:11:90:94:82:9f:3b:55:e2:e5:e7:a0:df:
fc:d6:78:a1:95:01:27:0e:5b:6e:8e:04:d9:31:e4:e7:6c:7b:
47:1e:62:d0:df:a1:38:80:10:f1:e5:01:80:49:c4:45:f1:a2:
9d:a8:7d:7b:35:e2:2c:2f:a9:c7:e6:52:78:b0:40:b0:f2:96:
0b:b1:5a:36:f2:03:06:73:bc:c5:80:26:dc:dd:31:46:1d:c7:
dd:26:48:e3:f8:21:04:32:45:b7:9d:31:de:b6:53:42:41:b4:
58:f6:6f:0b:fe:60:2d:56:82:39:0e:71:8e:bb:24:96:66:5d:
a0:4e:f9:96:f3:13:b8:78:dc:37:db:2a:92:bb:79:55:05:a7:
c8:ca:67:ed:e9:47:58:33:d6:4c:d4:9e:35:92:f2:0c:3c:a3:
fc:c4:41:fa:42:09:4d:7a:0e:da:e4:6f:19:72:ac:b7:ee:16:
ba:c5:cc:73:e4:59:99:3e:56:eb:10:df:8c:8e:61:6b:98:af:
a7:8c:1a:1e:58:ef:ef:0f:7d:d7:70:48:8c:f0:e5:e8:e1:a7:
7f:34:35:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:30 2024 by rpki-client on console-ams.rpki-client.org