Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/DBEk957ihDGqiYOHwA7eoQoteGc.roa
File: DBEk957ihDGqiYOHwA7eoQoteGc.roa (raw, json)
Hash identifier: vOEdE6hcUcKyhkimuP4KLHq8L8gPGregrCnEzOxlyFg=
Subject key identifier: 0C:11:24:F7:9E:E2:84:31:AA:89:83:87:C0:0E:DE:A1:0A:2D:78:67
Certificate issuer: /CN=e8477159d65b22568098b95952487300771b3ce5
Certificate serial: 0182A9
Authority key identifier: E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/DBEk957ihDGqiYOHwA7eoQoteGc.roa
Signing time: Mon 28 Feb 2022 09:48:31 +0000
ROA not before: Mon 28 Feb 2022 09:48:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208171
IP address blocks: 2a12:8d40:2022::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98985 (0x182a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477159d65b22568098b95952487300771b3ce5
Validity
Not Before: Feb 28 09:48:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c1124f79ee28431aa898387c00edea10a2d7867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a6:8e:31:6b:66:c9:62:0c:22:4f:fe:37:64:
3f:bd:ac:d6:c2:64:97:21:a9:49:af:da:c3:ea:c9:
80:11:ec:5d:60:53:8d:e1:77:b4:49:4b:ba:e2:20:
a9:1b:23:42:02:1f:3c:09:c3:0e:c8:29:17:fc:9c:
9b:5c:06:8f:43:81:6e:cc:1e:b7:96:cb:39:09:e6:
73:08:c2:a2:77:a4:cb:bd:eb:19:8d:ef:94:e9:13:
a8:ce:f9:46:65:f4:6a:9e:df:c2:5f:b9:fa:c0:8d:
eb:ff:b3:76:e7:38:2d:8a:eb:08:6e:71:7d:43:8c:
4a:97:65:44:45:83:3b:d5:53:1f:b6:63:3d:23:21:
55:66:e9:04:5e:16:5c:43:2a:33:9a:91:7b:70:4a:
19:61:35:55:3c:07:3a:52:e0:7d:7c:01:7c:c5:9f:
bb:a9:5b:1e:55:c7:c7:2d:9b:8c:cd:11:4c:94:25:
61:8a:11:83:ce:d2:57:b9:ab:19:b6:3a:e5:70:58:
06:85:e4:05:d2:d0:72:5f:a5:78:98:d3:81:0a:0e:
b8:3c:2f:cd:46:6b:c0:4c:d0:71:cc:e3:44:d2:18:
27:38:7d:d2:79:d6:9e:97:53:7c:5b:b6:78:50:a2:
59:39:a1:47:0d:55:aa:a2:53:34:1e:32:31:5f:3f:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:11:24:F7:9E:E2:84:31:AA:89:83:87:C0:0E:DE:A1:0A:2D:78:67
X509v3 Authority Key Identifier:
keyid:E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/DBEk957ihDGqiYOHwA7eoQoteGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8d40:2022::/48
Signature Algorithm: sha256WithRSAEncryption
83:b5:05:06:cc:7e:9a:4e:66:45:d3:60:1a:6e:f6:64:f4:a0:
7d:91:98:c0:b9:b3:27:5d:4f:0d:5d:10:9f:cd:92:a1:7f:30:
74:24:48:29:17:c2:b9:01:f7:a1:80:1d:e6:b4:9e:e0:1d:f8:
e7:3b:a4:e7:a3:e6:ee:57:a9:cb:3b:9a:9e:a8:32:d2:63:89:
13:24:d4:d7:a8:18:0c:8b:c7:4c:ae:46:2e:13:0a:93:19:de:
68:c0:76:88:cf:8a:b4:73:8e:e8:3f:bd:1f:7e:b9:6b:c4:cf:
b3:9b:90:be:a8:79:77:73:32:9e:df:e1:9e:7f:9c:4d:a9:2f:
41:b8:92:29:2b:63:fc:ba:12:4a:c0:d5:5b:cb:d9:c3:7c:44:
80:21:0b:ab:ef:9d:70:3c:2e:bf:c7:7b:2b:45:14:b2:9b:11:
55:2e:ce:52:81:b7:bf:24:81:78:ee:4e:53:10:db:72:0e:8d:
20:20:ed:79:61:30:b2:d7:88:e8:b5:63:c4:69:2e:55:e1:18:
32:e8:2d:7f:af:fb:7b:07:62:ef:80:9f:a4:c8:ab:f9:17:de:
09:a0:42:5c:f9:28:9c:57:87:2a:da:ba:9c:40:b8:f6:60:28:
92:d8:54:2e:29:d9:91:04:e1:be:f2:f9:b3:44:00:a9:6a:39:
96:59:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:34 2024 by rpki-client on console-fra.rpki-client.org