Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/n8DsOOnwcDC7o-_Rt1CuwwpPPSM.roa
File: n8DsOOnwcDC7o-_Rt1CuwwpPPSM.roa (raw, json)
Hash identifier: aM+KnjWhncBztQvcbbK+2iEQmLa2zvcpMgUt0YOpVlY=
Subject key identifier: 9F:C0:EC:38:E9:F0:70:30:BB:A3:EF:D1:B7:50:AE:C3:0A:4F:3D:23
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 027C6BB5
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/n8DsOOnwcDC7o-_Rt1CuwwpPPSM.roa
Signing time: Tue 19 Apr 2022 10:07:29 +0000
ROA not before: Tue 19 Apr 2022 10:07:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213382
IP address blocks: 2a0c:b641:830::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41708469 (0x27c6bb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Apr 19 10:07:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fc0ec38e9f07030bba3efd1b750aec30a4f3d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:1a:bd:d1:23:6f:53:9c:b2:7f:2a:fb:32:
6a:42:d0:ec:5c:ae:ce:27:70:7d:11:76:60:fb:69:
2c:94:00:da:f8:7f:a1:5d:41:7a:54:4b:89:26:04:
6b:58:d7:f1:b9:24:2a:c7:28:3f:e2:bc:42:be:d8:
d9:15:a0:8d:ee:24:71:5a:94:a8:f4:48:2d:97:11:
7f:23:ca:c2:a4:a7:9e:fe:f5:b8:62:45:69:08:cf:
10:96:6b:d9:5c:fe:68:9b:9c:3f:f4:6a:bc:89:d4:
4d:e2:dc:e8:83:f3:23:35:79:7b:64:58:98:b3:ab:
ed:56:9d:03:a4:d6:99:16:74:5a:f0:0b:26:fa:34:
ba:17:99:80:08:b5:b8:28:42:99:bb:a5:50:1f:9e:
d9:5e:7d:f6:b1:ce:49:3e:47:c8:d5:5c:68:80:71:
e7:7d:a1:5c:c9:84:b6:8b:81:92:44:40:03:ef:bc:
00:20:48:1a:8d:47:9e:1e:de:aa:fa:40:32:12:9f:
f9:e5:5d:a5:f8:01:cb:6a:56:4e:b8:51:5e:70:13:
1f:9f:b2:f5:d1:67:b5:1c:17:6b:14:57:f2:13:e3:
6e:47:4c:aa:6b:ae:dc:2a:57:d3:51:3f:ec:8f:49:
29:09:03:e5:4c:15:21:63:41:1c:a1:46:6c:d2:46:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C0:EC:38:E9:F0:70:30:BB:A3:EF:D1:B7:50:AE:C3:0A:4F:3D:23
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/n8DsOOnwcDC7o-_Rt1CuwwpPPSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:830::/44
Signature Algorithm: sha256WithRSAEncryption
86:d0:e4:5d:54:fc:3e:39:a4:46:6b:65:ca:ed:fe:98:6b:a0:
1f:31:5e:5f:06:69:00:1f:f2:20:58:b2:21:e5:30:0d:fb:50:
3a:50:5c:d9:8f:9a:f6:6d:10:75:e8:46:09:a5:e3:de:32:11:
bd:aa:68:5e:b6:a2:97:7b:3e:c0:ae:cd:f4:4d:76:97:9b:99:
7c:67:db:30:32:0d:08:a0:21:a2:a2:28:08:44:bf:fa:5b:91:
94:57:a3:be:d5:2c:60:73:c2:b3:72:4e:66:b7:23:6f:3d:6e:
25:01:eb:38:1e:3b:83:6d:bf:89:d3:59:81:06:3e:c1:08:06:
dd:d9:f6:ec:20:43:cd:d5:65:7f:ba:fc:07:34:0c:46:b9:62:
6b:c0:bb:c8:1f:d6:a5:78:22:08:77:6a:54:87:0e:d3:03:88:
86:ee:47:be:e7:44:55:0f:04:7f:13:ee:0c:3c:07:87:b4:19:
d8:79:a3:a4:23:75:ce:dd:77:40:89:23:e9:36:bf:b3:f6:e1:
fb:c9:5f:b4:b2:0b:bc:c2:95:06:e3:d1:3b:c4:4f:d5:5a:d4:
a4:54:03:2e:1f:25:14:bc:4a:4b:41:d6:37:4e:d3:fc:9e:76:
f9:e4:bb:a1:8a:2f:2b:62:b1:30:65:be:6e:bc:b7:0f:36:3b:
da:33:81:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:16 2024 by rpki-client on console-fra.rpki-client.org