Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/5FGxPWW_3gMOzNEPFDN0vrVWGYY.roa
File: 5FGxPWW_3gMOzNEPFDN0vrVWGYY.roa (raw, json)
Hash identifier: 1pxcOKTP07PzfQy9BxwWIyIgLCdGrGgubVXq1hLcCHI=
Subject key identifier: E4:51:B1:3D:65:BF:DE:03:0E:CC:D1:0F:14:33:74:BE:B5:56:19:86
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 03422B6A
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/5FGxPWW_3gMOzNEPFDN0vrVWGYY.roa
Signing time: Sat 01 Jan 2022 00:57:59 +0000
ROA not before: Sat 01 Jan 2022 00:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208861
IP address blocks: 2a10:2ec0::/29 maxlen: 48
2a0c:ab06::/32 maxlen: 32
2a0c:ab05::/32 maxlen: 32
2a0c:ab03::/32 maxlen: 32
2a0c:ab07:2000::/36 maxlen: 36
2a0c:ab07:3000::/36 maxlen: 36
2a0c:ab07:c000::/36 maxlen: 36
2a0c:ab07:5000::/36 maxlen: 36
2a0c:ab07:f000::/36 maxlen: 36
2a0c:ab07:e000::/36 maxlen: 36
2a0c:ab07:d000::/36 maxlen: 36
2a10:2ec1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54668138 (0x3422b6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 00:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e451b13d65bfde030eccd10f143374beb5561986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:04:39:32:4b:9b:85:b7:b9:d0:5b:2a:fe:
4a:15:6b:ad:41:f4:bd:ac:e9:b1:f7:07:86:03:d8:
b5:38:b7:17:2e:62:ef:3e:a9:44:d7:55:5d:f6:26:
0d:2e:fe:8a:8c:0e:09:26:c2:2e:82:f7:a3:c2:41:
a0:a8:a8:ce:09:e0:33:c4:6c:36:67:51:d9:82:5e:
9d:de:9e:c5:13:16:64:bd:45:2f:f9:6e:e3:87:09:
9f:13:09:13:74:61:e1:a4:55:31:fb:2f:2d:7e:a8:
80:7c:9f:9a:a3:25:9a:9c:9b:af:d9:e9:c5:34:e2:
7c:d9:d9:0b:23:5d:dc:a6:0f:c5:05:c8:ac:68:08:
29:0a:33:fd:93:9f:fa:e0:00:0a:e7:da:e2:e8:48:
99:62:4f:d9:20:80:af:17:53:a9:67:19:23:92:a5:
1c:dc:fe:94:85:1f:5c:81:e1:da:c3:de:59:cf:74:
9f:77:60:60:22:5d:95:b4:97:77:f6:e2:28:a9:c1:
78:0b:e7:32:90:19:55:c0:44:b6:78:b2:e0:11:42:
1f:c9:ca:91:2b:3b:6c:53:b1:e2:35:80:fa:96:ef:
ae:ca:3f:2c:ee:f6:bd:4e:e9:0d:b7:a1:eb:32:a3:
4c:de:7c:fb:ee:e3:1f:6f:38:75:5a:fb:5e:41:22:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:51:B1:3D:65:BF:DE:03:0E:CC:D1:0F:14:33:74:BE:B5:56:19:86
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/5FGxPWW_3gMOzNEPFDN0vrVWGYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ab03::/32
2a0c:ab05::-2a0c:ab06:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:ab07:2000::/35
2a0c:ab07:5000::/36
2a0c:ab07:c000::/34
2a10:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:b5:39:81:8f:68:c9:cf:82:be:2a:29:3c:a8:98:28:8b:31:
a1:4d:87:35:f8:74:9e:ee:59:50:c5:ff:ec:8b:3c:33:59:91:
b5:a6:66:9f:59:df:72:a6:c5:cd:bf:94:4e:c1:ac:30:8e:25:
e3:8e:fd:a9:10:16:b4:eb:14:6d:1f:38:40:89:d5:5b:ab:8a:
69:29:bf:7d:87:6a:6e:b5:07:c5:f6:99:98:c6:75:b4:a8:3f:
db:bf:21:2d:83:fe:be:a1:49:69:a5:f7:43:2b:b8:96:70:7e:
35:c9:ef:34:2d:c0:f3:16:bc:d8:a1:d3:df:1e:d6:19:27:f6:
ed:d9:55:d1:4d:01:82:8a:d8:25:da:8e:d1:33:dc:c1:1e:da:
0b:e9:fd:3a:09:b9:b9:48:bd:ee:e5:e4:1e:bf:a8:84:86:99:
84:c5:4a:6f:0a:e6:60:5a:35:1c:9b:8a:6b:c4:14:10:23:53:
77:a7:d6:eb:e4:a0:d5:8a:9d:79:ef:c2:c6:bc:b9:c3:09:16:
61:b7:91:c7:22:07:26:05:74:82:ed:2b:48:84:db:17:70:86:
36:72:bd:d1:11:8e:9b:75:e7:74:12:ba:45:1e:bf:5a:c2:8e:
9a:74:d0:5c:5a:ff:b9:0a:ae:ac:33:bc:7c:06:78:77:59:fe:
84:fe:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:31 2024 by rpki-client on console-ams.rpki-client.org