Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/PKTaXLZ0F3JitkDUKE65LC9KaOQ.roa
File: PKTaXLZ0F3JitkDUKE65LC9KaOQ.roa (raw, json)
Hash identifier: eLqZ1+OTgKcdBxOEUiLesxFpmBaqplTtzX3HBZ7o2XA=
Subject key identifier: 3C:A4:DA:5C:B6:74:17:72:62:B6:40:D4:28:4E:B9:2C:2F:4A:68:E4
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 015AB199
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/PKTaXLZ0F3JitkDUKE65LC9KaOQ.roa
Signing time: Sat 01 Jan 2022 14:56:10 +0000
ROA not before: Sat 01 Jan 2022 14:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56951
IP address blocks: 2001:678:fd4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22720921 (0x15ab199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Jan 1 14:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ca4da5cb674177262b640d4284eb92c2f4a68e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:8f:22:1d:9d:b6:a8:04:28:91:a5:e6:64:
ee:df:7d:59:f2:bc:6f:fe:c2:0a:ca:1f:d2:0e:15:
dd:8b:10:ce:14:0d:e2:6a:4d:30:aa:22:5b:5a:7c:
12:8a:e2:11:14:b1:3c:a6:3b:18:a7:e1:cf:6d:0b:
e5:97:78:2c:b9:d3:46:02:93:03:19:54:9b:2c:67:
e0:31:b6:3b:ad:56:42:bd:03:5e:54:67:37:4f:24:
95:39:8a:10:fb:b5:7d:89:65:55:68:89:5b:2b:bb:
dd:7f:de:f5:1d:c1:3c:9e:35:fd:5f:59:c4:8f:ac:
ab:04:a2:a5:2f:db:75:4d:98:dd:4d:ed:a4:1f:ca:
b7:4d:d2:2b:bd:cb:2a:11:fd:18:14:8d:9a:48:32:
29:18:85:e3:09:1a:f8:bc:cb:7a:a0:a2:94:b7:42:
21:f2:2e:e9:0c:ca:8e:fa:90:1e:cc:e9:d6:0a:fe:
23:98:d5:2f:99:2c:30:64:80:5e:b2:d7:b3:9a:05:
dc:24:28:3b:4a:b5:a9:49:ef:49:26:d4:2b:bc:2a:
b5:2c:9f:70:da:dc:c0:21:36:13:cd:33:18:bd:e6:
7f:df:e4:2d:dc:8f:ed:19:80:11:29:ce:8c:8b:b0:
91:62:2f:9a:6e:d7:ad:a3:ff:fe:cd:2c:c8:39:e0:
c7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A4:DA:5C:B6:74:17:72:62:B6:40:D4:28:4E:B9:2C:2F:4A:68:E4
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/PKTaXLZ0F3JitkDUKE65LC9KaOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:fd4::/48
Signature Algorithm: sha256WithRSAEncryption
74:05:cc:3f:2c:34:58:bc:e1:8f:2b:98:17:5d:60:72:07:09:
cb:2d:c4:00:9f:ff:5b:78:cf:89:5a:0c:82:f4:74:df:20:55:
cf:25:a5:16:c6:60:13:2e:f2:4d:58:cd:dc:5c:01:5b:07:ab:
3a:79:a0:f8:1d:0d:4d:0f:6b:98:f4:69:e1:7f:d0:e3:f4:3b:
6b:5c:ab:21:d7:a8:e8:01:04:a5:aa:d0:5b:b8:38:a9:89:bf:
ff:7b:d8:75:27:c2:8b:0f:88:4c:8d:80:11:0a:4f:46:c4:3f:
88:0c:cc:52:60:86:7b:b0:98:06:f1:f7:9d:05:da:79:3d:49:
de:76:a6:c0:21:24:4b:b1:94:b4:57:0a:08:cd:48:e6:2d:95:
d1:59:7a:76:63:41:f0:30:7e:01:ff:f2:fb:9f:45:47:b5:d3:
8e:65:19:f2:33:fc:47:a9:7b:99:9d:84:be:37:92:8a:c6:af:
cb:47:e0:0d:ee:3d:d0:ea:f9:9d:0b:6d:b6:46:55:84:90:39:
57:66:a6:d7:af:26:af:7e:e8:d0:b5:35:2e:3f:b5:01:f6:21:
a0:2e:47:44:6f:13:c3:57:8f:4b:72:de:e5:19:07:8f:ff:09:
25:de:2d:e8:54:01:ca:29:e7:65:22:ba:5d:98:ab:69:6e:26:
ca:aa:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org