Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/YKzf3gg8L4uwM1i4QZ2YQ1YtM4k.roa
File: YKzf3gg8L4uwM1i4QZ2YQ1YtM4k.roa (raw, json)
Hash identifier: szf9aAr2kuVIANWGu8KOhDDcUKqmCoreDTrwhONW1vs=
Subject key identifier: 60:AC:DF:DE:08:3C:2F:8B:B0:33:58:B8:41:9D:98:43:56:2D:33:89
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 09672AB8
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/YKzf3gg8L4uwM1i4QZ2YQ1YtM4k.roa
Signing time: Fri 04 Mar 2022 10:01:55 +0000
ROA not before: Fri 04 Mar 2022 10:01:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208223
IP address blocks: 2a0e:8f02:f03d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157756088 (0x9672ab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Mar 4 10:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60acdfde083c2f8bb03358b8419d9843562d3389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:89:de:92:65:93:34:33:4e:2d:c3:d2:67:
f6:0b:32:48:c1:31:96:da:84:d1:f4:21:c7:2b:c7:
32:69:40:c2:fb:a8:85:5e:6c:7d:a4:49:21:ec:0d:
e8:1a:bc:24:a1:c7:9b:06:cc:5d:9b:ab:13:0f:22:
23:3f:b6:ea:e8:e0:d3:27:f1:34:d7:e3:cf:aa:63:
9e:b3:f5:eb:88:5e:5a:4e:32:c4:1e:eb:a0:47:8b:
70:88:88:e1:8c:01:a8:51:82:bf:c1:02:e1:3e:50:
30:21:b2:00:74:82:6c:bb:56:c4:9a:10:81:05:0f:
34:7a:47:f8:32:bd:ff:34:7c:8f:a6:2d:a1:88:0b:
28:73:91:4f:77:93:7b:7e:ff:01:e8:20:a7:a1:e8:
8e:43:b1:aa:0d:3a:34:57:f7:34:f1:c3:c1:77:54:
ae:61:62:86:c5:f5:52:0a:fd:e1:60:3d:84:09:0d:
5d:73:1f:21:2b:ad:85:dd:0b:01:0f:cd:74:10:11:
07:f3:3f:da:5f:a0:f7:89:44:f4:9b:bf:41:5e:e4:
aa:ce:44:6a:aa:cf:90:cb:b8:80:e3:4e:f6:98:0f:
2d:7e:3c:18:6e:7d:ba:45:94:a9:69:b8:41:13:95:
cd:d3:dd:77:a5:7f:f9:35:ca:9e:fe:3d:5a:e8:05:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AC:DF:DE:08:3C:2F:8B:B0:33:58:B8:41:9D:98:43:56:2D:33:89
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/YKzf3gg8L4uwM1i4QZ2YQ1YtM4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f03d::/48
Signature Algorithm: sha256WithRSAEncryption
0d:e8:f2:42:11:a1:83:e7:77:70:97:f6:89:af:a6:e7:c8:9e:
a4:38:e6:c5:93:3e:8f:1c:24:2b:7e:2d:3e:40:4e:d6:07:3e:
9f:1e:79:25:35:af:75:f8:17:6d:da:34:29:6d:c8:79:78:b1:
6b:fb:d4:3b:2f:1e:ee:90:a1:10:33:af:67:29:fd:d9:1d:79:
d2:b5:2a:4f:93:d8:45:5d:a8:ac:a2:a1:2c:44:14:ab:9a:35:
32:df:f2:5c:de:80:2f:0a:8c:12:64:82:84:9b:59:a1:05:30:
da:ad:17:61:09:47:d1:b2:26:71:95:a5:b5:b9:e6:91:63:47:
c0:ec:bc:fb:e5:a4:b6:5e:6a:e6:b3:45:10:38:c5:6c:a1:1c:
01:0e:c1:06:93:f3:b8:78:d2:a7:a9:91:37:1c:5b:0d:d5:2d:
97:5c:47:40:2a:d0:66:85:f6:81:7d:fd:92:f7:dc:c1:74:76:
ab:5a:81:f4:a4:f7:07:c0:b1:46:29:f2:1b:39:a2:70:0f:1c:
ca:83:e6:de:7b:f4:0d:b8:99:b3:86:e1:f4:77:08:f4:19:47:
0a:a4:fd:ad:d9:dd:9a:05:3f:8f:e8:07:73:66:18:45:3f:ca:
b4:fd:71:d9:2c:9f:21:c4:05:13:5a:92:c6:19:9e:4e:43:de:
23:af:fa:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:41 2024 by rpki-client on console-fra.rpki-client.org