Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/g08dMpOzLNwM2xKzWleKhsliBrs.roa
File: g08dMpOzLNwM2xKzWleKhsliBrs.roa (raw, json)
Hash identifier: MV3mfzV+UwjWvveYKywRnluc1Z9gsgZEKEGCFnoLJ8I=
Subject key identifier: 83:4F:1D:32:93:B3:2C:DC:0C:DB:12:B3:5A:57:8A:86:C9:62:06:BB
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: F91A83
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/g08dMpOzLNwM2xKzWleKhsliBrs.roa
Signing time: Sat 01 Jan 2022 00:59:21 +0000
ROA not before: Sat 01 Jan 2022 00:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2a0c:b641:160::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16325251 (0xf91a83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=834f1d3293b32cdc0cdb12b35a578a86c96206bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:bf:53:f5:ff:44:cf:11:dc:11:84:27:7a:
e0:65:23:ae:b5:a3:d7:9f:05:ab:67:99:62:a8:6e:
00:be:2f:b1:69:c1:34:69:e7:d1:27:00:9b:94:02:
74:97:84:3e:e8:5c:e0:ed:2e:c8:a5:69:ee:f5:55:
ef:aa:29:d5:c8:4b:0f:7a:13:de:2b:f8:14:89:98:
a4:32:63:48:79:d0:21:e5:79:59:17:29:e7:a5:65:
9c:6d:a3:90:57:b4:75:0e:c4:58:b8:f5:81:7e:b7:
57:5c:42:b9:6f:d7:5a:28:54:f5:32:84:8b:78:f9:
84:cc:94:fa:77:fc:4c:1b:07:83:15:df:28:a7:86:
2e:18:be:56:83:69:1a:c0:d0:5e:54:2d:ae:5c:86:
15:9d:de:3b:a9:e5:fc:08:dd:f1:ef:3d:5b:1a:24:
3e:d7:45:c7:ca:fd:00:c7:78:16:38:22:65:f8:07:
53:0d:3d:a9:3b:2a:d6:4d:de:87:8f:90:9a:63:9b:
4c:53:f3:99:3b:4d:1e:f2:f5:0a:7e:d1:e8:d4:78:
ba:4c:c4:30:03:53:2e:8a:de:08:b9:3f:fd:27:74:
2c:91:c5:fb:72:d0:75:ff:9d:2e:6f:b4:fa:be:b5:
f7:84:8e:23:a6:d9:8a:c8:9b:fb:71:ad:c1:bb:6d:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4F:1D:32:93:B3:2C:DC:0C:DB:12:B3:5A:57:8A:86:C9:62:06:BB
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/g08dMpOzLNwM2xKzWleKhsliBrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:160::/44
Signature Algorithm: sha256WithRSAEncryption
71:4f:7a:ce:91:b0:01:95:95:21:f6:f5:49:24:56:60:dd:5c:
2c:b9:fe:c4:5d:1e:92:9b:1e:1a:18:16:86:c3:9b:5b:f2:54:
06:5f:14:b8:1c:f6:b4:4d:9a:6e:98:1e:70:f6:e7:c4:56:01:
aa:bd:96:cd:2f:c5:69:7a:8b:1c:62:ca:13:b5:00:95:ba:f9:
56:2a:51:10:97:2e:b1:ed:c7:9a:5d:7b:37:46:bf:75:4b:a3:
96:8f:3b:34:02:6d:af:5f:b4:f0:72:ac:79:b2:94:44:fe:d3:
70:f1:54:de:ea:3b:c3:6e:e9:2d:39:61:be:97:f7:88:95:42:
b7:62:c1:dd:33:72:33:be:53:c3:7c:26:83:c6:a0:18:8f:13:
5a:0c:e1:c8:5f:55:99:5b:d0:f1:57:65:b7:e4:13:42:d4:44:
71:27:b6:47:e8:52:0a:56:4c:72:9b:e4:8d:e9:2a:59:7a:45:
fc:ae:48:de:20:d4:9f:0f:a8:56:81:94:1d:31:0b:57:7c:ca:
23:17:5a:d4:d9:b0:2b:af:42:09:30:8d:f4:0b:e9:6f:9d:23:
dd:48:ac:88:3f:26:72:a0:58:b0:81:ba:85:45:32:ad:83:e1:
98:92:95:39:6a:e8:66:ca:3f:0e:33:56:02:b7:61:7e:3c:54:
90:01:6c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:16 2024 by rpki-client on console-fra.rpki-client.org