Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/286PC5PNqLTVJgcCMtsh-ppsGR4.roa
File: 286PC5PNqLTVJgcCMtsh-ppsGR4.roa (raw, json)
Hash identifier: 7QPh0K3BotFXCs83d//JHUmqhTOxaWj3gc6H2hg039I=
Subject key identifier: DB:CE:8F:0B:93:CD:A8:B4:D5:26:07:02:32:DB:21:FA:9A:6C:19:1E
Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial: 0182EA463545BCCC18DEA8A20067C540C5AD
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/286PC5PNqLTVJgcCMtsh-ppsGR4.roa
Signing time: Mon 29 Aug 2022 15:44:05 +0000
ROA not before: Mon 29 Aug 2022 15:44:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56837
IP address blocks: 2001:67c:1808::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:46:35:45:bc:cc:18:de:a8:a2:00:67:c5:40:c5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Validity
Not Before: Aug 29 15:44:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbce8f0b93cda8b4d526070232db21fa9a6c191e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:80:fb:2b:36:b6:f8:1c:a0:27:57:20:0e:
4e:16:a5:85:ae:5d:7e:eb:0c:6f:fd:fc:61:dc:63:
d9:1f:3f:4c:5f:64:93:98:81:d8:52:52:b4:17:2a:
9c:28:65:34:4f:0d:05:e5:06:3a:6c:0b:d4:4c:b2:
03:61:85:f7:d6:e9:f2:00:bf:b1:62:ab:1b:3c:ac:
51:e9:9a:3e:17:52:20:2a:c6:45:81:be:39:a4:92:
76:53:64:82:3f:18:c4:54:a8:d4:c2:26:a2:6e:e4:
35:37:38:2c:cd:a6:38:15:fe:8c:60:72:14:00:a9:
f9:31:dd:5a:4b:ad:ec:a5:2d:7a:ee:4d:d3:24:cb:
62:11:6c:ff:37:9a:50:a8:7e:73:a8:30:82:24:3f:
a7:06:e4:d8:5f:90:9e:11:25:c6:ac:a4:82:ad:84:
35:57:3e:41:1e:d8:f5:1f:e0:46:c5:eb:e8:6b:ab:
f1:6d:ca:a2:81:d5:6c:1d:45:dd:a1:ea:bd:2b:0a:
3c:05:c1:64:f3:b1:3f:d5:c7:2d:39:0a:ba:37:82:
db:fe:75:a2:aa:33:64:4b:6a:90:5b:94:b8:db:97:
ab:cd:d5:15:b3:83:7a:8d:e5:fe:ca:47:3a:b6:70:
be:5b:a2:20:4b:f1:de:b4:61:a3:d9:70:e0:10:2f:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CE:8F:0B:93:CD:A8:B4:D5:26:07:02:32:DB:21:FA:9A:6C:19:1E
X509v3 Authority Key Identifier:
keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/286PC5PNqLTVJgcCMtsh-ppsGR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1808::/48
Signature Algorithm: sha256WithRSAEncryption
59:76:51:07:0d:cb:05:f7:ad:85:5f:66:e3:17:8c:3b:aa:75:
7b:16:bd:0e:be:c9:fb:3d:8c:4a:57:7e:03:8d:2f:f8:ec:27:
0b:96:38:d0:8b:e7:67:17:b6:32:3c:2d:5b:4a:54:a7:7c:c7:
ea:91:dd:d3:21:e0:d9:a1:6e:87:27:54:a4:7b:25:b6:a5:55:
b0:ea:5c:bb:9c:4b:80:fd:eb:09:e8:f1:23:16:db:3b:2d:12:
88:55:60:c5:2d:86:d6:d1:a0:d9:2f:16:8c:1d:59:0e:26:4e:
98:60:dd:71:f6:3a:50:4a:2e:b9:d1:11:96:1f:cd:8b:2f:7d:
68:c4:69:88:76:d9:cd:5c:0f:2a:30:14:27:63:b5:35:40:30:
86:e2:f2:f4:68:50:33:dc:c2:2a:11:a6:b3:d0:aa:76:84:c7:
bc:99:e2:1f:31:e8:5c:f0:e5:16:0b:8d:d5:17:e2:54:d1:b2:
e5:01:99:ca:34:b5:66:c7:d2:fd:1a:82:aa:9f:65:bf:5f:22:
9b:0e:8f:b6:b0:f1:85:75:0b:c8:a9:fb:49:c8:02:2c:7b:f2:
62:2c:88:c9:7e:c6:54:a2:8a:9e:2a:35:04:e5:bc:93:d7:5c:
36:88:cd:4e:71:ba:bb:00:c9:a8:90:87:6d:81:24:8b:9b:65:
b5:87:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:29 2024 by rpki-client on console-ams.rpki-client.org