Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/4vwcuycj6HoLwWf6g7V3SodIdsA.roa
File: 4vwcuycj6HoLwWf6g7V3SodIdsA.roa (raw, json)
Hash identifier: FseRnRYNMqhEZIAN9e9NfpAp97MR6+fLtOjP7S/t5+M=
Subject key identifier: E2:FC:1C:BB:27:23:E8:7A:0B:C1:67:FA:83:B5:77:4A:87:48:76:C0
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 018235547312DD93DCAAB3AA0E3FF214B457
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/4vwcuycj6HoLwWf6g7V3SodIdsA.roa
Signing time: Mon 25 Jul 2022 12:28:23 +0000
ROA not before: Mon 25 Jul 2022 12:28:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 2a0a:a200:3cf::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:35:54:73:12:dd:93:dc:aa:b3:aa:0e:3f:f2:14:b4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jul 25 12:28:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2fc1cbb2723e87a0bc167fa83b5774a874876c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:05:23:7e:bc:ff:8a:00:86:e9:dd:8a:2e:
a7:4e:b0:fd:6f:8d:06:24:b5:0b:86:b1:a0:81:e2:
61:fb:08:cc:de:c7:a6:7b:f2:be:56:b8:e2:fb:8e:
7d:75:ab:e4:15:7e:81:5f:53:e6:d0:ac:65:a8:95:
49:98:9e:e6:7f:ab:59:46:21:7a:c7:df:bb:9c:f6:
71:d9:5a:68:d9:09:c3:94:7a:28:ce:e8:9d:71:b0:
91:2a:20:4d:62:49:bd:0a:cf:20:a8:f7:93:65:56:
5f:5d:d0:ee:7a:1f:75:17:56:0f:01:f8:b4:eb:53:
61:6f:5e:6f:86:da:68:b9:55:85:94:b5:93:c8:d0:
71:a9:30:8b:97:34:3e:50:27:da:5a:2e:6b:6b:04:
ec:ca:c6:ca:0f:01:da:d1:50:93:a9:a1:6a:4c:10:
48:a3:9f:72:a1:90:26:04:73:69:53:69:da:ab:8d:
7e:3f:16:ba:c1:53:8d:bc:db:e8:37:c5:87:e4:ce:
19:b5:f8:c1:6b:5b:46:a2:12:08:da:05:20:22:a4:
3c:37:26:fa:e5:ec:69:3e:fc:f6:a6:f5:4e:83:49:
d9:46:11:53:7a:57:b1:3f:46:e2:9b:33:da:15:0d:
a8:1b:9f:e3:b1:74:91:a9:4e:75:46:e9:1b:1b:fe:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FC:1C:BB:27:23:E8:7A:0B:C1:67:FA:83:B5:77:4A:87:48:76:C0
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/4vwcuycj6HoLwWf6g7V3SodIdsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:a200:3cf::/48
Signature Algorithm: sha256WithRSAEncryption
54:02:9c:95:c8:be:8c:a1:45:e6:9b:76:18:f5:d0:91:17:aa:
41:a7:06:af:6d:93:0e:95:57:a7:df:e9:b0:4b:73:49:2d:e1:
4c:69:41:45:de:e2:19:8d:aa:5e:d6:7a:6c:8f:ca:7e:4b:62:
15:fb:79:0e:89:e2:76:ca:d6:7c:87:1e:13:61:8a:2e:e9:18:
f9:5f:a0:aa:c2:13:f4:08:46:4d:2b:eb:2c:dd:b2:72:08:5a:
22:e7:c0:65:42:22:2b:8a:6d:97:85:00:49:d7:e1:8f:de:3c:
90:a9:f9:bb:65:60:0b:9b:37:db:dd:06:cd:53:b9:1c:aa:1b:
11:f2:b2:bd:9b:14:6a:2f:59:44:be:d4:69:0f:03:a7:70:3d:
0b:2c:3e:8e:74:7e:5b:af:5b:82:f0:ae:d0:01:cd:32:d3:8c:
45:71:0c:c9:e3:58:ad:73:51:21:5c:5b:f3:d6:0c:a0:ef:e5:
df:03:75:b3:11:db:02:43:70:cd:e9:62:fb:c3:43:16:36:9d:
dd:dd:d2:72:e8:d3:5c:55:69:26:46:64:a2:ed:88:88:11:3f:
25:2a:d6:a4:68:70:92:26:02:17:67:b7:25:f0:2c:02:3b:b6:
91:14:51:1f:f1:9a:8a:66:80:10:8f:85:c7:2e:3d:c0:e5:61:
c3:47:1e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:49 2024 by rpki-client on console-fra.rpki-client.org