Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/WJh68QdOBXfAXRfSjVSpL283qtc.roa
File: WJh68QdOBXfAXRfSjVSpL283qtc.roa (raw, json)
Hash identifier: DpKgdA4/mSSa3X6ooRTODfp4UDlQfvTj791q3HXlZKc=
Subject key identifier: 58:98:7A:F1:07:4E:05:77:C0:5D:17:D2:8D:54:A9:2F:6F:37:AA:D7
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 01855D3F0F55D51A21CCC815D6D1C21F95DD
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/WJh68QdOBXfAXRfSjVSpL283qtc.roa
Signing time: Thu 29 Dec 2022 09:38:11 +0000
ROA not before: Thu 29 Dec 2022 09:38:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52073
IP address blocks: 2a10:4646:120::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:3f:0f:55:d5:1a:21:cc:c8:15:d6:d1:c2:1f:95:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Dec 29 09:38:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58987af1074e0577c05d17d28d54a92f6f37aad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:e1:dc:f1:a0:8c:18:38:65:d4:99:e2:f4:
fd:c5:1c:25:63:84:91:a6:b7:42:33:da:e6:12:33:
f4:37:49:e3:f1:0a:38:f9:bd:53:8d:ba:af:3a:07:
3f:b2:4b:b5:74:ca:13:12:76:30:36:0b:c6:9f:f2:
ff:f2:f4:ca:7c:34:76:5e:a4:b8:93:a2:51:66:2e:
ab:0d:68:30:bd:89:ac:8e:f4:cc:cd:ff:95:bd:28:
c8:f5:6f:4c:21:ed:8a:43:9e:16:f4:08:28:50:4d:
83:ac:f4:5d:8b:c2:4a:38:51:e1:13:85:22:97:72:
37:7d:42:7c:10:44:92:63:b7:89:a2:60:48:56:12:
7d:dc:f3:49:75:e7:1d:ef:de:1f:b9:b7:29:a3:da:
a2:90:5d:df:ac:a1:c6:56:8f:b5:23:1d:8b:1f:81:
b2:65:f2:76:5f:82:df:57:fe:35:84:6b:73:84:f4:
24:ff:7f:b4:2d:d6:5d:a3:26:eb:e2:27:3b:58:ee:
05:d3:ab:bb:cd:f8:5f:2c:49:12:0e:c2:72:60:8c:
b2:4b:43:07:d8:7a:8f:ee:3c:06:87:c5:b2:aa:21:
3f:65:b7:fd:8f:a1:36:56:01:85:ea:80:d8:c5:54:
63:73:19:be:f1:0c:88:df:63:cc:d4:2d:5a:c9:17:
e5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:98:7A:F1:07:4E:05:77:C0:5D:17:D2:8D:54:A9:2F:6F:37:AA:D7
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/WJh68QdOBXfAXRfSjVSpL283qtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:120::/44
Signature Algorithm: sha256WithRSAEncryption
ba:42:6b:51:84:1f:6b:99:94:a5:5f:45:93:db:49:ae:93:81:
ee:17:fd:80:11:a6:44:52:cf:c1:47:69:32:51:dd:c6:90:3d:
e4:3d:7b:75:e3:d8:2b:fd:88:77:a2:3c:a8:89:be:60:28:bd:
9a:fc:7a:ce:85:35:be:45:8a:fb:07:76:7e:f0:84:59:99:b6:
c0:b5:b6:29:e6:f1:27:83:05:f1:6e:6f:6f:7c:55:1f:68:82:
79:20:cb:ff:47:ad:bb:3c:8e:70:87:f7:53:af:96:f8:77:d5:
99:1e:4b:98:f5:b7:6d:1b:14:b7:01:a5:f7:7f:a2:97:83:00:
d5:46:4d:f6:55:53:65:bf:7b:47:fd:23:89:a4:69:3b:31:84:
d7:20:cd:ad:72:12:84:ee:91:b5:42:00:7e:a8:5f:9b:35:f6:
dc:ea:45:1c:4a:5e:cb:5a:99:07:6a:57:2f:98:f4:17:88:c5:
bc:18:da:63:70:b7:b6:08:7b:ea:69:e7:32:8b:d9:79:c4:30:
0c:3e:4a:5d:6d:da:b3:4c:5a:1e:cf:9d:29:5b:34:49:5f:91:
b0:6c:e7:fb:36:a1:4c:1c:29:ec:69:1c:f3:61:41:68:40:94:
fd:59:e1:45:23:27:59:fd:d0:cd:76:ab:d7:b6:13:73:7c:8d:
44:b7:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:05 2024 by rpki-client on console-fra.rpki-client.org