Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/d-XnkUkBYHX_JVm05UWJTL5AE5k.roa
File: d-XnkUkBYHX_JVm05UWJTL5AE5k.roa (raw, json)
Hash identifier: lrhLOTkq2q1inYPbGKy8IFHqTijUOyW2YByhraA28Sg=
Subject key identifier: 77:E5:E7:91:49:01:60:75:FF:25:59:B4:E5:45:89:4C:BE:40:13:99
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 012BA887
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/d-XnkUkBYHX_JVm05UWJTL5AE5k.roa
Signing time: Sat 01 Jan 2022 00:59:48 +0000
ROA not before: Sat 01 Jan 2022 00:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209297
IP address blocks: 2a0c:b641:690::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19638407 (0x12ba887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77e5e79149016075ff2559b4e545894cbe401399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e5:e4:05:e4:f9:2c:c8:5b:d5:fb:cd:f9:55:
d9:5f:62:4a:b6:52:5f:4e:4c:a0:62:c3:5f:4b:7d:
11:03:10:2a:65:7b:7b:89:69:c8:5b:c0:d7:c1:74:
64:84:bb:43:6a:01:79:3a:b5:a3:3c:72:d2:62:96:
f9:e9:be:62:73:b5:ca:a0:6a:96:04:2d:78:19:b1:
bb:fe:1a:da:9a:13:a4:81:c0:60:1d:94:50:0c:75:
fd:06:4b:31:47:79:0b:95:3a:b0:fb:e8:2c:75:de:
bb:80:20:a7:94:9f:dc:68:03:67:bb:d5:50:0b:e7:
34:6f:69:80:73:10:6c:0e:ca:ab:39:b9:cb:9a:e5:
7a:e6:fd:cb:d5:f6:2d:98:a0:a2:c7:98:16:56:6f:
65:62:53:6f:16:32:6b:1b:14:d2:9e:1e:55:bc:0a:
bb:48:e9:d8:ef:12:3c:70:16:93:b9:89:4a:5f:7a:
85:17:ce:3b:72:00:39:ea:e3:e8:85:e6:61:06:13:
f6:62:b5:29:f3:f2:fb:69:45:7d:73:8f:dd:0b:88:
63:a5:75:2d:b3:76:37:fb:92:3e:9d:5a:ec:f6:50:
2d:b3:61:7c:55:e4:57:bb:93:64:e6:d0:b7:b2:06:
77:fe:78:03:b0:4d:89:e0:e5:51:d1:e9:79:af:e4:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E5:E7:91:49:01:60:75:FF:25:59:B4:E5:45:89:4C:BE:40:13:99
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/d-XnkUkBYHX_JVm05UWJTL5AE5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:690::/44
Signature Algorithm: sha256WithRSAEncryption
6a:ba:0f:42:52:1b:03:14:6a:ad:a5:2b:3c:14:47:54:37:b7:
25:1f:f3:84:e4:77:c4:0f:b6:ac:8d:a1:2b:88:b9:55:6d:3d:
97:da:35:ac:d6:2c:c5:54:80:17:03:c9:75:bd:f4:16:4c:9d:
1f:91:65:db:27:33:7e:91:88:f3:53:43:17:ad:fc:39:90:76:
d4:4a:81:75:83:c1:73:16:82:17:92:e6:e9:21:62:1a:2c:f2:
58:35:8b:4f:0e:40:e7:18:6c:3a:19:78:85:8f:10:b1:63:21:
9d:60:39:9e:23:27:63:0a:81:cd:bd:84:56:8c:6e:53:ff:45:
5f:c1:06:51:e5:5a:f9:57:fe:b7:d2:1c:98:a2:aa:f8:e0:f2:
a0:50:ae:2c:37:ab:fe:4f:b2:fb:36:ab:99:cb:5c:3e:fe:5e:
dc:be:53:6a:26:8f:63:a6:3c:21:cc:a8:1a:58:2f:37:0a:a1:
1f:c3:b0:52:af:5a:11:e7:81:84:2d:42:14:ef:cb:4b:a2:35:
c5:90:f2:f8:94:86:b5:f5:8b:6b:c0:d9:40:b4:e2:66:7e:10:
a2:e5:12:2e:0d:94:cd:33:cd:fd:cb:39:7d:4d:95:a3:06:1a:
6b:99:6c:29:47:34:1a:bc:62:62:ac:59:cf:16:cc:52:0f:0d:
5c:18:d2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org