Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/fEFbdxneV_HqyiDFGrPCJZV4Mrw.roa
File: fEFbdxneV_HqyiDFGrPCJZV4Mrw.roa (raw, json)
Hash identifier: lJnjCL9OX92cAplh11FCh/5JJhCIe0MDrr2pxdQqznk=
Subject key identifier: 7C:41:5B:77:19:DE:57:F1:EA:CA:20:C5:1A:B3:C2:25:95:78:32:BC
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 02587EA5
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/fEFbdxneV_HqyiDFGrPCJZV4Mrw.roa
Signing time: Wed 06 Apr 2022 10:44:31 +0000
ROA not before: Wed 06 Apr 2022 10:44:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206368
IP address blocks: 2a0c:b641:710::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39354021 (0x2587ea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Apr 6 10:44:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c415b7719de57f1eaca20c51ab3c225957832bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:f5:e7:4b:44:bf:2d:fd:9f:92:47:03:f9:
cb:c4:25:56:d2:10:ea:31:e4:88:63:3f:16:4e:3a:
64:fb:c6:cc:52:06:71:f2:84:be:72:e7:f3:9a:21:
90:aa:e0:c8:ad:5f:27:13:e4:ac:78:00:c9:24:74:
76:8d:d4:2c:5d:6e:95:b5:31:fa:82:4e:3d:71:ed:
f0:9a:48:8b:0a:ef:0a:ad:6b:fa:97:3b:c4:b7:38:
ad:75:79:97:be:75:51:89:eb:98:5c:0c:dc:f5:18:
cd:13:10:a9:08:26:45:d7:9d:de:43:bc:f7:f9:9a:
05:13:66:85:d9:d7:62:5a:0e:27:ed:23:5f:2d:f0:
a1:7b:73:e3:c6:a8:dc:83:27:87:6c:c4:da:5f:fe:
90:9b:0b:11:9c:62:ba:20:3c:70:42:a0:7c:1f:58:
cf:14:d2:a7:d2:e0:f5:1b:c0:f3:17:19:0d:c5:45:
18:a6:9e:bd:bb:b7:d2:f4:7f:8f:20:13:83:48:62:
73:4d:57:9d:c8:b9:e5:df:53:48:fd:dd:c5:ff:b5:
8b:c8:66:81:6f:37:e7:1b:8c:9d:27:26:02:44:61:
3c:54:32:3d:d6:e2:49:b7:79:d5:01:e9:d8:8d:0a:
b5:4d:5d:ca:bc:5e:1e:13:1f:7b:48:0a:ae:c4:a1:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:41:5B:77:19:DE:57:F1:EA:CA:20:C5:1A:B3:C2:25:95:78:32:BC
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/fEFbdxneV_HqyiDFGrPCJZV4Mrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:710::/44
Signature Algorithm: sha256WithRSAEncryption
38:22:f8:11:6b:8f:fe:9c:35:0a:bd:3e:45:57:95:a8:37:6b:
a0:85:e3:94:ff:3c:d7:47:97:0a:ec:1c:a2:e1:a0:3c:24:4a:
5f:f5:99:40:3d:49:9b:13:da:8f:20:40:bd:ab:f2:a3:9e:73:
b1:49:2f:63:8e:f1:4e:55:40:37:dd:58:3c:37:d3:0a:a3:30:
e1:51:aa:b2:d5:db:58:58:20:39:a1:fb:c5:e0:89:8f:64:a5:
9c:a8:dc:c5:64:68:7e:b7:17:54:23:d5:29:d2:de:4a:a0:83:
0f:0c:49:e5:7d:53:02:5c:89:41:72:c8:b7:69:73:f9:02:0c:
20:2c:24:c1:77:e3:31:d5:de:a9:ac:01:ba:24:03:1f:50:ac:
67:65:81:b5:bd:9f:19:3c:df:72:66:ac:d2:1f:78:0a:00:69:
9b:c6:a0:43:8d:ce:82:41:65:23:b6:bb:04:c4:58:8a:82:14:
a8:dd:41:b0:ff:52:0f:4e:57:0b:a6:41:58:c2:ff:cc:e2:27:
b2:3a:c6:d3:c1:6d:23:a6:35:e1:f5:53:c7:d1:bc:9f:35:73:
19:f3:df:67:4a:e9:c3:b4:d4:f0:c2:c9:df:c3:c0:69:48:cd:
df:3e:b5:76:71:20:b2:36:f1:85:8b:a9:46:87:ed:04:7f:0d:
59:02:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org