Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/C3Bj1e61-Amwrq9lON_u6Bwo2bU.roa
File: C3Bj1e61-Amwrq9lON_u6Bwo2bU.roa (raw, json)
Hash identifier: HRV/AQQnk5fK+EFkUpPrXvFGvZtOOOw08P+5YOF13SE=
Subject key identifier: 0B:70:63:D5:EE:B5:F8:09:B0:AE:AF:65:38:DF:EE:E8:1C:28:D9:B5
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 012F2CCB
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/C3Bj1e61-Amwrq9lON_u6Bwo2bU.roa
Signing time: Sat 01 Jan 2022 00:59:49 +0000
ROA not before: Sat 01 Jan 2022 00:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209606
IP address blocks: 2a0c:b641:200::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19868875 (0x12f2ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b7063d5eeb5f809b0aeaf6538dfeee81c28d9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:80:63:6a:37:0b:fd:25:1a:d6:f2:03:9b:
ee:41:3e:86:2a:f0:82:b8:74:bb:6f:19:8b:af:bb:
62:d2:86:f9:1c:53:eb:e8:4e:2e:60:07:00:62:6f:
f2:41:f1:8b:d8:8b:33:42:49:f0:1f:75:02:3b:ae:
fb:73:0d:67:a8:48:be:8c:bb:42:29:8a:8c:a6:ef:
6b:d7:4a:2a:ee:d8:f5:ad:11:6a:7a:8d:9a:78:f6:
17:26:8a:87:58:cd:aa:36:11:50:68:96:b6:8d:37:
9e:f2:bf:24:a2:a4:20:2a:e2:3f:b4:ca:f3:e2:fc:
3f:65:4a:dd:ab:a3:b3:3d:91:f9:57:d5:2f:7b:04:
26:8f:bd:05:cc:1c:cb:d0:a4:5c:9d:4d:fd:c7:54:
ab:39:5a:33:d8:23:81:d2:0a:7e:02:23:5b:de:c9:
13:3f:7f:e3:b8:96:2e:54:f9:5c:08:9c:3a:4d:6d:
f7:a6:da:81:a3:79:56:17:51:29:01:63:ed:b1:41:
f7:d4:1f:6f:3d:6e:64:8f:4a:3a:f9:1a:bf:54:2e:
b7:c9:7f:ad:75:16:50:37:fe:5a:c6:11:89:96:ab:
89:bc:54:f3:af:ba:bb:d8:64:bf:71:89:d9:84:dd:
47:7d:42:c1:c8:2d:91:cd:6f:76:05:95:f9:c9:88:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:70:63:D5:EE:B5:F8:09:B0:AE:AF:65:38:DF:EE:E8:1C:28:D9:B5
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/C3Bj1e61-Amwrq9lON_u6Bwo2bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:200::/44
Signature Algorithm: sha256WithRSAEncryption
98:52:e5:3c:1c:15:7c:40:86:51:28:c1:96:c0:a8:2d:e6:5d:
ff:d6:3d:90:a4:1d:aa:8d:9a:e4:31:e3:0a:46:b3:10:34:ee:
28:2b:c0:ed:69:f0:71:ac:07:a5:0d:4e:66:1e:05:75:5d:5c:
d6:eb:cc:58:e8:0d:78:26:76:a4:39:07:08:55:87:46:a9:ea:
d2:bc:f7:52:8c:04:7b:c0:dc:c8:bf:1e:84:e3:8e:03:62:d7:
0e:4a:9f:76:ea:6b:ac:43:66:c7:cb:86:9d:1e:9a:d1:fd:b7:
11:66:ec:8f:e0:5b:79:f3:c9:b5:f1:1d:76:51:c2:e0:5c:97:
4f:f2:8c:b4:71:2e:03:88:00:62:47:21:d8:6a:99:d5:17:78:
f4:98:7b:c1:6f:91:7d:0d:97:34:1f:9d:e8:28:5f:f4:1e:fa:
18:41:db:c3:e6:30:34:b3:1f:da:f2:65:ec:1e:89:26:3d:2a:
1a:d4:d1:22:a5:cc:b7:30:4b:45:d0:9e:f0:e2:0d:1f:9d:8a:
b0:39:b8:0e:25:50:4d:47:5c:21:3c:56:75:cf:9b:db:6e:b8:
4a:12:09:be:2e:bf:bf:de:c6:7a:c4:56:6f:ee:ed:12:c2:c8:
fc:eb:5e:e3:58:52:db:28:47:22:c7:81:e3:b4:5d:85:8a:51:
5f:58:a2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:37 2024 by rpki-client on console-ams.rpki-client.org