Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KMfgCJ-a_ic05jDnfkDBm-B_CCs.roa
File: KMfgCJ-a_ic05jDnfkDBm-B_CCs.roa (raw, json)
Hash identifier: ACSCULex99fh1jnGKV6AnakUMpVujuXbVWf7xu8lvvQ=
Subject key identifier: 28:C7:E0:08:9F:9A:FE:27:34:E6:30:E7:7E:40:C1:9B:E0:7F:08:2B
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0136D994
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KMfgCJ-a_ic05jDnfkDBm-B_CCs.roa
Signing time: Sat 01 Jan 2022 00:59:55 +0000
ROA not before: Sat 01 Jan 2022 00:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210339
IP address blocks: 2a0c:b641:630::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20371860 (0x136d994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28c7e0089f9afe2734e630e77e40c19be07f082b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:e3:73:34:ab:f8:fc:fe:cc:0c:a3:a6:02:
cb:e1:e8:ad:de:14:fa:e0:fc:44:01:de:fe:9e:ee:
1a:e1:51:1d:08:f8:d7:3f:e8:4d:b4:51:de:f9:7b:
7e:6e:ec:91:bb:86:d2:55:f3:f4:78:1c:76:73:9b:
d9:fd:9c:e0:5b:30:e4:e1:89:b6:01:26:6b:18:01:
4c:86:4f:af:db:5c:f4:a1:9e:41:e6:21:18:32:0b:
e2:be:a2:51:eb:80:22:27:48:d5:5d:84:bc:3b:be:
b1:c7:ea:72:07:d9:b9:35:3f:b7:38:f0:ac:15:8d:
34:5c:0b:7c:1b:24:d1:a5:5d:c8:a1:b2:67:6c:79:
eb:37:05:78:20:05:4a:6a:ae:10:41:0a:80:71:c8:
b0:f6:45:40:ba:1b:6a:8e:c4:c2:83:aa:0f:bb:db:
da:b3:c8:b4:26:23:31:47:b4:6c:99:92:89:83:b3:
14:4b:1e:9e:3a:bc:d5:fc:76:fe:d9:a0:30:d0:2b:
9f:4e:21:e4:40:8e:8a:69:d1:ae:9d:6c:46:bb:5e:
64:e4:bf:84:fe:df:ac:b7:33:f1:dd:53:12:b0:76:
08:25:0f:05:fd:90:20:82:30:3d:93:2d:58:0a:cd:
8d:64:a6:15:1d:1a:ab:d5:65:21:1d:94:a8:81:1d:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C7:E0:08:9F:9A:FE:27:34:E6:30:E7:7E:40:C1:9B:E0:7F:08:2B
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/KMfgCJ-a_ic05jDnfkDBm-B_CCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:630::/44
Signature Algorithm: sha256WithRSAEncryption
50:f6:c5:99:64:f0:d6:29:c0:4e:31:c9:81:cf:f7:d1:b9:a9:
cb:78:10:dc:71:84:0b:ab:41:db:b8:09:4d:d4:e8:55:20:e6:
27:e4:0b:9c:8e:7e:18:1b:5c:e6:58:94:59:d0:83:f6:91:7b:
01:4e:fe:6e:c1:b9:e5:f6:e2:ba:48:3f:75:e9:02:08:14:e1:
7d:96:d8:2d:3c:74:8d:49:e3:4f:4d:de:e5:62:25:b0:89:9a:
f9:93:99:d1:b2:50:fa:aa:8f:de:41:fe:64:bc:26:c1:7b:19:
c6:98:e4:1e:57:42:d8:18:77:bd:83:a5:38:ba:eb:f1:fe:37:
b9:3c:a2:00:03:73:d6:0f:f7:63:ab:94:bf:db:ab:d9:98:4c:
4f:d8:a8:0c:20:8d:af:d9:22:a6:12:71:09:ba:58:c5:c0:74:
7d:40:ea:5a:d5:c4:7c:87:af:7c:03:b5:53:ba:09:2c:d3:66:
3e:ea:5d:7b:85:bf:3f:41:c4:70:05:25:45:65:0d:7e:6d:34:
ab:44:4b:e8:e1:5d:91:f2:ca:dc:24:95:09:45:47:8c:65:25:
d4:d1:ae:59:da:73:05:c1:a5:3e:16:7c:75:e4:de:a7:27:08:
b2:2c:27:7d:8d:7c:3b:5e:a3:36:ba:ca:aa:ff:28:59:2c:8e:
53:91:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:15 2024 by rpki-client on console-fra.rpki-client.org