Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/pgk8icRxdzdj3VgRR03T7GVsPuA.roa
File: pgk8icRxdzdj3VgRR03T7GVsPuA.roa (raw, json)
Hash identifier: 7aPw+5joeTv2HPkZULmZPCH8lNKYx1uv/u30w4S8wD0=
Subject key identifier: A6:09:3C:89:C4:71:77:37:63:DD:58:11:47:4D:D3:EC:65:6C:3E:E0
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 01838928FD007E235589D6B2C0C547DB698E
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/pgk8icRxdzdj3VgRR03T7GVsPuA.roa
Signing time: Thu 29 Sep 2022 12:11:48 +0000
ROA not before: Thu 29 Sep 2022 12:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 2a04:76c7:200::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:28:fd:00:7e:23:55:89:d6:b2:c0:c5:47:db:69:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Sep 29 12:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6093c89c471773763dd5811474dd3ec656c3ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:25:64:1a:0c:ec:4b:90:f4:06:2d:cd:3a:3a:
33:87:0f:4e:31:a2:da:44:3e:8b:01:97:64:a7:0f:
f0:e8:1d:79:92:eb:36:5b:d7:77:8d:16:3b:0c:df:
de:be:7d:b3:cf:12:d1:dc:eb:bd:ae:b8:8f:6f:9a:
61:f9:6d:52:fe:09:68:f9:11:0d:27:64:53:7d:2a:
05:11:19:88:cb:67:a3:8b:ce:09:c8:3e:dc:7d:d6:
8c:8a:16:99:96:ef:ad:00:38:a3:82:e6:71:46:59:
ec:d1:50:45:21:b3:7f:6c:ce:96:7c:06:22:3f:37:
c3:81:d3:fb:98:c8:ba:66:91:d7:83:af:af:80:a2:
98:ee:70:8b:27:c2:48:99:96:8e:16:1e:46:b1:7f:
5f:1f:46:db:2e:9a:07:ca:8b:98:3f:bc:87:b0:8c:
46:2b:22:e8:cf:6e:8a:c0:25:7b:a2:7e:43:5a:97:
f3:60:4d:62:9c:f0:2f:25:35:c6:d8:03:57:64:6d:
80:bb:d8:bf:e7:49:ba:14:53:88:33:41:3c:2b:da:
0f:e2:f1:5d:21:58:8e:90:b0:c4:00:51:3c:1e:a8:
27:81:da:69:42:40:3d:86:26:d5:13:50:45:46:31:
b9:7a:33:41:46:7a:4b:21:f2:b3:69:8f:6d:06:1b:
c6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:09:3C:89:C4:71:77:37:63:DD:58:11:47:4D:D3:EC:65:6C:3E:E0
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/pgk8icRxdzdj3VgRR03T7GVsPuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:76c7:200::/48
Signature Algorithm: sha256WithRSAEncryption
01:c3:60:d5:15:be:3b:fe:37:03:6d:ee:bf:c0:0f:35:75:28:
c1:a0:4a:6f:d7:e5:6f:24:36:7a:c6:2f:3d:49:b6:42:43:cb:
86:3f:87:c2:d0:2c:82:48:9d:60:20:af:3c:16:c9:ba:7b:91:
d2:2d:d1:97:af:8d:d1:8b:4a:c4:41:8a:b3:81:6f:a6:5a:4a:
d8:cf:b8:fc:24:45:5a:d5:a1:58:56:0e:dd:9d:04:a1:33:3f:
43:2e:c9:12:6d:ac:fc:23:a0:51:f4:57:3e:8d:d8:24:f7:ac:
a8:cc:c8:ce:9f:be:0a:30:a5:45:65:ba:ad:70:69:8a:80:f2:
f0:40:a1:a1:87:14:37:4e:68:5d:65:8c:c3:ef:51:bc:90:ea:
bd:1d:82:82:d8:ab:23:cc:80:c1:e6:1d:f9:74:c5:b7:51:fa:
50:61:c0:2b:91:f3:33:32:6a:39:14:46:4a:55:d4:b0:a0:4a:
28:7d:df:15:33:e7:19:74:fa:e7:4f:8e:ee:a2:b5:dc:09:cb:
06:98:ee:c6:59:fc:bc:db:ff:69:80:85:cf:ff:21:6f:3b:5a:
29:71:9b:4d:65:61:aa:a5:d3:b3:9f:ec:25:28:00:0a:51:cc:
ef:99:26:c8:6b:0b:1a:55:c4:46:c4:5f:5d:10:46:e9:50:60:
23:20:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:11 2024 by rpki-client on console-ams.rpki-client.org