Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/2wtJym160xcOcwcRemLBxdn7vXQ.roa
File: 2wtJym160xcOcwcRemLBxdn7vXQ.roa (raw, json)
Hash identifier: RuS/7IYFE5Z9RKWwjrVIgUNdaPctUX179IhJpsGpxgE=
Subject key identifier: DB:0B:49:CA:6D:7A:D3:17:0E:73:07:11:7A:62:C1:C5:D9:FB:BD:74
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 0181FBE4E1073C0AC7F3D2C8C13A72AE1B47
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/2wtJym160xcOcwcRemLBxdn7vXQ.roa
Signing time: Thu 14 Jul 2022 08:48:09 +0000
ROA not before: Thu 14 Jul 2022 08:48:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42306
IP address blocks: 2a07:4c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fb:e4:e1:07:3c:0a:c7:f3:d2:c8:c1:3a:72:ae:1b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Jul 14 08:48:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db0b49ca6d7ad3170e7307117a62c1c5d9fbbd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:ad:80:4b:92:e2:ee:ee:45:b2:5f:54:73:
93:05:2d:46:53:27:69:8e:8b:8c:df:d4:91:1e:a9:
ab:5c:1a:2b:ce:76:37:18:78:66:73:d3:5d:15:8c:
c8:5d:df:89:00:29:b9:19:35:a4:a7:dd:db:3b:b4:
ba:c9:a4:75:79:10:c7:69:1c:fc:5a:a8:9f:df:24:
76:9a:45:b1:b1:15:1c:74:8a:3d:3a:4b:9e:59:c8:
77:18:22:ff:cc:ed:7a:9a:0d:b9:43:19:71:ce:4e:
45:c8:e1:30:7b:ef:e7:06:9e:20:84:5e:fe:1d:19:
43:46:08:70:3b:41:95:b7:f3:53:20:44:2a:13:44:
2e:4c:6f:37:54:7b:3f:9c:7c:12:08:75:d6:c4:7c:
b9:be:07:1a:ce:ab:12:bd:78:73:53:ad:c9:a8:32:
23:fc:04:a1:43:d1:7e:42:3b:5a:cd:69:7c:8b:77:
65:ab:6a:4d:b3:80:9b:0d:3c:0a:a0:d1:ec:dd:31:
78:e5:06:71:30:ba:0f:37:26:9f:22:d9:0b:2b:26:
c7:a8:0d:c2:ae:63:8d:e2:b0:d8:60:02:db:3c:d8:
80:38:d2:a9:91:53:15:80:c3:f1:d4:cc:0a:f5:ce:
5a:9f:29:64:86:5f:ce:b5:f9:37:e0:44:14:65:52:
4f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0B:49:CA:6D:7A:D3:17:0E:73:07:11:7A:62:C1:C5:D9:FB:BD:74
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/2wtJym160xcOcwcRemLBxdn7vXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:4c0::/29
Signature Algorithm: sha256WithRSAEncryption
b0:79:3f:a6:e4:fe:a8:3d:f1:0e:ef:f2:8c:e0:c5:da:7b:a2:
4d:b7:bd:3c:f5:35:3d:d1:07:85:ff:c5:ed:ce:5b:7f:b2:68:
65:68:2a:42:7c:62:85:9c:29:e4:1a:5d:2f:05:6d:75:ad:e4:
07:73:8c:a6:8a:59:88:0d:38:a5:69:82:c5:8d:b5:cb:4d:6f:
6f:73:a3:b1:f0:1c:09:e3:98:76:df:0a:d3:05:fa:00:71:02:
4f:8e:a5:37:54:fd:ba:6c:3f:50:e3:8b:84:33:3b:61:43:4e:
e7:98:98:55:9e:a3:d7:2e:dc:de:e0:7c:cb:b6:9c:7c:94:d6:
bd:57:ba:40:e0:ae:e8:e9:66:ad:f0:dd:82:22:34:fe:f6:f5:
f7:33:45:10:d5:ef:f0:94:e1:17:21:a4:48:d9:98:59:d3:2a:
1f:4b:d6:f8:f9:a1:c4:ed:05:72:47:7e:c1:04:05:c9:7d:55:
f3:c5:6b:85:87:de:b4:91:dd:e5:2b:df:64:d5:26:6d:67:2a:
28:17:3c:5b:6e:65:ca:d4:7b:07:e3:6d:a5:3a:cb:21:d7:d2:
1e:6a:b0:54:52:9a:f7:9f:71:67:9f:87:ad:4f:d5:e5:ae:80:
fa:60:d0:75:3f:ee:64:d0:5b:14:16:9b:7e:cb:9e:e1:28:3a:
96:31:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:13 2024 by rpki-client on console-fra.rpki-client.org