Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EoTzAt0jOBypFcM7V6jb649R6kw.roa
File: EoTzAt0jOBypFcM7V6jb649R6kw.roa (raw, json)
Hash identifier: 19h+qt9vo5cCm6f5WEU8z5sg9AUwvfQjqX1TuX2N8i8=
Subject key identifier: 12:84:F3:02:DD:23:38:1C:A9:15:C3:3B:57:A8:DB:EB:8F:51:EA:4C
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0184C5BFF237297FA5358E1D561F45B05A50
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EoTzAt0jOBypFcM7V6jb649R6kw.roa
Signing time: Tue 29 Nov 2022 23:36:41 +0000
ROA not before: Tue 29 Nov 2022 23:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49519
IP address blocks: 2a0c:b641:8a0::/44 maxlen: 48
2a0c:b641:470::/44 maxlen: 48
2a0c:b642:5000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c5:bf:f2:37:29:7f:a5:35:8e:1d:56:1f:45:b0:5a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Nov 29 23:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1284f302dd23381ca915c33b57a8dbeb8f51ea4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:2b:21:c7:3a:f6:b1:cc:95:a4:ad:ac:89:
33:e0:cb:7e:87:4a:ac:bb:c0:9d:f5:c1:f5:fd:5a:
7a:2d:3b:fc:1a:41:5e:90:a7:ee:ea:0a:55:dc:e3:
ea:f6:6f:9d:cf:f3:28:c2:21:63:e7:0c:8c:1d:d4:
1a:5a:6b:26:c3:42:83:29:52:83:4a:cf:4b:79:84:
e9:bc:f5:1f:5a:80:2a:18:24:b1:cd:31:51:be:99:
13:a6:ac:5c:6b:54:ec:21:ab:e2:bb:42:53:28:44:
9b:32:a8:5e:81:fa:9b:3d:b5:05:d2:d7:f0:50:71:
a3:dc:2a:bf:38:87:5a:74:77:18:f2:14:c4:66:7c:
39:2f:0b:92:02:4b:84:2e:ac:87:73:02:b2:d4:4d:
6e:6f:6b:08:f8:e7:4c:7b:1b:f2:58:ac:59:81:cd:
87:c3:9f:89:f5:4d:d3:35:c3:b4:76:53:23:33:b5:
ac:20:5b:94:fb:64:5c:a2:0f:91:71:0a:02:16:91:
b3:8d:a8:af:2b:50:aa:18:2e:1b:6a:22:d7:a1:75:
1e:3f:2e:61:91:f9:fc:b2:0b:73:61:d6:3f:34:29:
0f:ff:bc:e7:c8:40:ae:26:99:b9:00:c0:87:82:bf:
d0:c7:b4:93:19:42:4f:55:65:ca:02:e1:dc:71:64:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:84:F3:02:DD:23:38:1C:A9:15:C3:3B:57:A8:DB:EB:8F:51:EA:4C
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EoTzAt0jOBypFcM7V6jb649R6kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:470::/44
2a0c:b641:8a0::/44
2a0c:b642:5000::/36
Signature Algorithm: sha256WithRSAEncryption
06:68:64:48:10:40:72:a9:b7:d1:fa:82:45:46:ae:c6:72:09:
01:5c:b8:c7:9f:00:2f:10:8c:4b:e7:37:b3:47:be:d6:b4:31:
bc:36:ad:bb:3e:12:1c:10:9b:1e:00:52:1e:5b:f2:35:7d:f1:
02:34:a7:e9:21:c5:49:8a:25:5f:fb:9e:0b:b6:86:b8:d8:68:
ba:56:b3:bd:65:8a:85:96:ec:0b:92:27:78:23:d0:cb:ff:44:
32:35:3f:b4:b0:6b:af:b6:a2:61:45:a7:5f:b5:18:c9:f3:88:
8b:d1:7e:37:94:05:59:d2:26:68:26:17:2c:62:8a:b7:57:0a:
ea:de:f8:4e:02:cb:c5:77:a7:18:06:c5:06:89:6a:8d:10:86:
8e:f5:48:b1:2a:6b:77:ae:d1:21:7a:92:5f:f3:e8:8e:a9:bb:
27:0b:c2:dd:71:44:af:50:65:76:89:c1:ed:07:d7:9c:bb:83:
b9:6a:9b:c9:d8:ae:17:38:33:48:6b:be:55:9e:ac:50:b2:b3:
24:0a:91:1f:5c:c4:04:36:07:38:a4:08:2e:02:e2:98:4b:3c:
fc:b5:a1:76:80:da:bb:d0:61:b7:e5:29:a5:c6:16:84:65:48:
7d:33:8e:ee:c7:2e:b0:46:7d:e2:c6:61:51:46:d7:8c:3c:d2:
eb:62:38:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:37 2023 by rpki-client on console-fra.rpki-client.org