Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/R8cNEzXFkx82OabutywsfEiXcvg.roa
File: R8cNEzXFkx82OabutywsfEiXcvg.roa (raw, json)
Hash identifier: XqTYyVMgroMbvIOE0M7ixfUijhaRChfxW08KnCsg4jA=
Subject key identifier: 47:C7:0D:13:35:C5:93:1F:36:39:A6:EE:B7:2C:2C:7C:48:97:72:F8
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 02B9382C
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/R8cNEzXFkx82OabutywsfEiXcvg.roa
Signing time: Wed 22 Jun 2022 12:00:32 +0000
ROA not before: Wed 22 Jun 2022 12:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 2a0a:a201:21c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45692972 (0x2b9382c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jun 22 12:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47c70d1335c5931f3639a6eeb72c2c7c489772f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:04:14:2b:d0:54:e6:78:44:18:13:7d:7e:47:
fb:b8:6e:05:2e:a4:c4:8d:f5:56:7a:0d:6f:28:de:
9c:fd:c8:7b:d9:f2:e4:84:84:57:a9:79:a5:b8:14:
06:46:13:e9:a9:a8:a7:8d:43:c1:fe:ff:bd:e5:0d:
ef:c4:6c:1a:56:32:4e:93:9a:89:54:ff:8e:81:18:
95:9f:0e:b8:a4:27:d4:fa:dd:6a:05:49:21:c7:6c:
32:6a:cd:18:ff:df:23:77:d0:87:6f:20:9b:f8:3c:
19:fd:25:df:74:2b:a3:65:31:17:08:a5:08:6a:13:
f5:31:d3:76:79:2c:0b:de:af:dc:4c:57:e6:d0:09:
ba:d9:01:1e:50:67:c6:30:ad:a3:9d:e7:e9:82:8d:
19:ed:57:46:b9:23:63:b5:22:bb:44:85:d7:b2:d6:
06:98:d9:81:3a:27:ea:43:fb:4b:c0:23:3e:d4:23:
03:f8:c1:92:5c:9c:47:c2:a6:64:af:82:be:00:fb:
03:9d:13:cc:0d:86:9f:eb:7d:ea:df:3d:e4:6a:e9:
75:8b:19:5b:87:99:e3:89:80:5b:b0:9a:88:de:59:
75:32:70:70:56:e7:f8:09:c4:9c:f2:b9:fb:a0:3a:
cc:cd:6b:1f:e1:72:2a:a5:a5:c9:c6:2f:77:d9:5b:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C7:0D:13:35:C5:93:1F:36:39:A6:EE:B7:2C:2C:7C:48:97:72:F8
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/R8cNEzXFkx82OabutywsfEiXcvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:a201:21c::/48
Signature Algorithm: sha256WithRSAEncryption
9c:97:91:5f:bf:7e:3e:b4:a8:a8:30:db:f1:30:06:e6:e7:f2:
8d:c1:96:73:cf:59:4c:01:d0:e2:b2:9f:2d:90:37:bd:e2:42:
10:fe:30:7e:fa:59:5f:90:b0:06:6f:ff:1a:50:7b:20:a1:26:
7e:1d:39:4d:08:4e:08:b4:5d:b2:a0:f8:59:f0:60:b1:06:c1:
02:07:71:2f:1a:ab:cd:d9:af:6b:80:92:b0:7d:56:03:a2:1b:
04:a5:f9:af:b8:b8:d9:94:63:24:71:11:1e:97:37:2a:f2:2e:
2b:72:f3:46:1b:56:f9:40:fe:0c:7d:a6:ff:b5:98:59:4a:fe:
f1:aa:07:4f:fe:07:df:a9:55:3d:31:86:75:95:b3:93:03:90:
df:60:40:e2:d7:6f:09:19:b4:e9:9e:63:9c:86:25:41:d4:6d:
ef:04:31:d3:5d:bf:9f:ec:99:b2:eb:b2:b3:63:9e:cb:1b:d1:
44:28:f4:5e:e2:d2:c3:59:24:da:e2:a3:84:b5:2a:9e:e6:6e:
86:ff:00:f8:1e:52:88:e3:67:b0:f6:77:ca:34:60:f7:e7:81:
76:38:9c:83:80:57:f1:6f:c1:b5:a6:a1:d7:a1:78:14:e0:42:
ff:ab:40:d2:c8:c3:e2:7a:3e:99:a2:8a:79:81:8c:0e:cb:d4:
d9:74:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:48 2024 by rpki-client on console-ams.rpki-client.org