Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/S7b0gA3efcBbTcHRWSaPLORyyLg.roa
File: S7b0gA3efcBbTcHRWSaPLORyyLg.roa (raw, json)
Hash identifier: H4BJXQM7GgUs4qaYdZuC75ED/QMb66xNNtLjSY5FRnY=
Subject key identifier: 4B:B6:F4:80:0D:DE:7D:C0:5B:4D:C1:D1:59:26:8F:2C:E4:72:C8:B8
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 092CC1DF
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/S7b0gA3efcBbTcHRWSaPLORyyLg.roa
Signing time: Tue 08 Feb 2022 16:57:26 +0000
ROA not before: Tue 08 Feb 2022 16:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211747
IP address blocks: 2a0e:8f02:f01d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153928159 (0x92cc1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Feb 8 16:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bb6f4800dde7dc05b4dc1d159268f2ce472c8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5f:09:e7:4c:57:20:75:63:7d:3f:e9:a9:aa:
34:33:bf:fb:18:c8:94:32:20:eb:57:c4:f7:6d:ea:
cf:d1:9a:91:ec:48:ef:29:3b:b4:38:40:91:cc:b2:
8c:21:16:3b:bb:c7:90:d5:3f:f3:ca:03:41:74:28:
05:06:68:b3:49:02:ce:95:d6:f4:fc:70:8a:e8:22:
cb:85:d4:4f:57:fd:c7:ae:50:41:65:bc:66:7d:08:
d3:be:77:b4:3e:43:1d:6d:00:85:d2:58:c3:43:5a:
4e:d6:e1:ec:9c:3a:c5:f1:55:b6:7a:b3:ef:21:04:
bf:59:bc:ee:01:75:2d:1e:90:30:a9:fe:dc:fc:94:
f0:4d:5d:09:c9:e0:33:3f:8a:73:08:0d:9f:fb:53:
8e:ba:73:f6:d7:05:0e:37:33:0d:bc:f4:88:00:ba:
a2:41:56:13:86:12:6e:5f:e7:12:46:8f:75:86:f6:
d7:bf:9a:fe:97:09:60:21:f1:6d:ef:3f:d8:e3:6e:
01:26:e9:38:e4:a0:61:2b:be:8e:25:78:df:56:61:
51:b0:75:81:5a:27:ef:60:f2:bb:77:dc:a7:fd:91:
6b:6b:08:15:dc:e3:4b:78:3d:60:40:a0:6d:12:3b:
ed:1d:15:d7:d1:da:70:4e:e5:68:5f:25:55:cb:f6:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:F4:80:0D:DE:7D:C0:5B:4D:C1:D1:59:26:8F:2C:E4:72:C8:B8
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/S7b0gA3efcBbTcHRWSaPLORyyLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f01d::/48
Signature Algorithm: sha256WithRSAEncryption
92:ae:29:4a:60:1b:27:c8:99:8d:8c:6e:69:10:80:93:f1:ab:
c5:2d:85:b1:93:fd:ae:eb:9e:09:7f:4b:6c:e3:f5:43:49:ee:
0d:96:4d:54:ac:66:de:7b:6e:22:e2:ec:c3:0c:75:e0:f3:9a:
5c:4f:74:0d:e9:ac:23:1a:b8:7c:88:29:25:09:75:79:1a:e3:
0c:16:2b:2e:28:84:b0:5c:b7:3f:3d:87:55:5d:2e:07:84:86:
e0:f7:b8:c5:b7:d8:3e:7b:e2:af:49:04:da:4a:9a:7f:ea:dd:
4c:58:7a:74:a9:57:94:c3:7d:51:28:33:7e:86:f8:d3:23:aa:
14:ca:47:1a:15:bb:8c:d0:11:c8:f8:88:4a:09:5d:f5:af:fc:
0d:c1:67:6f:a9:e0:0a:46:16:9e:5f:b4:bc:42:1d:72:37:ae:
5c:26:89:08:94:0a:bc:ad:a9:f5:43:9a:ec:1a:46:99:1d:3f:
be:75:bc:e4:41:8f:ce:4e:d4:57:b6:c6:d3:34:d1:d0:61:69:
d1:56:68:09:8a:02:15:a5:86:07:cd:da:aa:8c:94:19:ff:27:
cb:35:bf:51:a4:2c:65:66:c1:51:61:09:98:9f:e3:52:82:6f:
ed:10:48:f4:1b:70:d5:2d:e3:8b:c0:c7:b4:2e:82:7e:b0:24:
f9:c5:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:41 2024 by rpki-client on console-fra.rpki-client.org