Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/eB7yZPQNamuFFDWsy_ZLVXJhj4o.roa
File: eB7yZPQNamuFFDWsy_ZLVXJhj4o.roa (raw, json)
Hash identifier: hK9g3MB1FF5KiwocIA/0pt1UL4+JXvcUzHkxz/S4n/Q=
Subject key identifier: 78:1E:F2:64:F4:0D:6A:6B:85:14:35:AC:CB:F6:4B:55:72:61:8F:8A
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 09CF915D
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/eB7yZPQNamuFFDWsy_ZLVXJhj4o.roa
Signing time: Sun 17 Apr 2022 15:51:22 +0000
ROA not before: Sun 17 Apr 2022 15:51:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211521
IP address blocks: 2a0e:8f02:f024::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164598109 (0x9cf915d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Apr 17 15:51:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=781ef264f40d6a6b851435accbf64b5572618f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:5a:8f:c8:dd:54:9a:a4:70:b8:dc:da:f4:
86:32:1f:86:f6:9a:a0:2d:1e:61:16:ed:6c:c4:c8:
bd:58:49:a9:9b:0a:30:40:5e:3c:7a:90:28:3c:46:
98:23:fc:88:30:d4:fc:9d:62:ec:ad:35:91:bf:19:
bc:e4:0a:00:29:49:04:28:d0:98:0d:89:e4:bb:7f:
b7:5e:32:b8:69:7f:ee:da:d7:c1:a1:a2:ce:cf:d8:
c0:59:d5:05:e7:53:34:b1:cd:c3:44:c4:a7:a0:f5:
78:0c:a0:1d:ba:59:77:00:7a:f4:56:4e:76:6a:db:
ff:b0:c3:6a:10:ac:c1:d6:21:a0:07:71:17:6f:9a:
c5:e1:a1:3e:72:79:70:47:4c:b5:c6:94:79:e2:54:
c6:fd:bf:de:9c:b7:ef:15:3f:18:31:ff:26:9b:83:
aa:b9:69:59:33:55:3f:8d:36:52:11:95:5d:be:ad:
02:08:28:a2:ba:f3:e1:81:a7:87:a4:12:7d:65:bf:
6e:93:ea:54:ff:09:2e:1d:af:0d:f9:0c:69:46:75:
bf:12:51:87:51:dd:48:d9:d0:a6:ca:09:f9:74:31:
2e:01:92:1a:c1:af:14:d5:fc:70:3b:22:62:29:3e:
7d:be:5b:3e:e1:4f:df:3c:26:ee:81:e9:69:65:77:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1E:F2:64:F4:0D:6A:6B:85:14:35:AC:CB:F6:4B:55:72:61:8F:8A
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/eB7yZPQNamuFFDWsy_ZLVXJhj4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f024::/48
Signature Algorithm: sha256WithRSAEncryption
14:a3:ea:6c:20:8f:1b:a4:98:25:9c:66:a2:86:e7:c5:12:7a:
03:6d:01:51:84:a6:ee:75:bb:7e:b0:5b:89:97:87:ca:bc:1b:
c7:87:75:03:96:37:0c:12:39:92:ce:ab:95:72:ad:34:ee:1e:
b3:b0:04:65:b8:2a:9a:55:ee:f8:e9:ec:8f:e1:b5:f2:6d:11:
9d:73:e9:95:52:6a:2f:97:ac:c6:50:0f:53:99:d8:ef:44:e0:
54:99:f3:4e:f9:db:b8:33:ff:df:e2:61:a6:87:0b:cd:3e:c9:
7a:01:83:a6:f8:6c:71:77:98:88:bd:c9:42:ab:a8:81:f0:c8:
67:85:b2:3f:e5:69:18:79:26:48:9a:a9:ba:be:ea:06:0c:3c:
c8:d3:78:af:90:68:f1:99:21:42:6f:9f:42:b1:f6:0c:45:b2:
1a:db:f6:e3:be:68:87:9c:c7:77:36:69:31:2f:06:5e:c2:9c:
8d:30:8d:24:36:06:e3:a5:1c:b6:44:cd:8a:27:ba:20:6b:7d:
bf:1e:31:d8:bf:b3:35:ab:77:61:d6:ca:48:bd:f3:15:12:da:
a1:83:2a:c5:9e:02:5c:b1:35:f5:2b:af:4b:2d:2c:e8:34:12:
5c:c3:26:28:b8:33:99:3d:66:9f:80:6a:c6:08:59:55:15:50:
6b:e6:08:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:36 2024 by rpki-client on console-ams.rpki-client.org