Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/S0kFyMgktWmHULz6he411eYbf0c.roa
File: S0kFyMgktWmHULz6he411eYbf0c.roa (raw, json)
Hash identifier: x77uaEiJ5MBXu0m9byboRVlx7SILvs41Lgx0GF14Q7Y=
Subject key identifier: 4B:49:05:C8:C8:24:B5:69:87:50:BC:FA:85:EE:35:D5:E6:1B:7F:47
Certificate issuer: /CN=e8477159d65b22568098b95952487300771b3ce5
Certificate serial: E4BE04
Authority key identifier: E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/S0kFyMgktWmHULz6he411eYbf0c.roa
Signing time: Tue 07 Jun 2022 12:04:14 +0000
ROA not before: Tue 07 Jun 2022 12:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208171
IP address blocks: 2a12:8d40:1024::/48 maxlen: 48
2a12:8d40:2022::/48 maxlen: 48
2a12:8d40:2048::/48 maxlen: 48
2a12:8d40:4096::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14990852 (0xe4be04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477159d65b22568098b95952487300771b3ce5
Validity
Not Before: Jun 7 12:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b4905c8c824b5698750bcfa85ee35d5e61b7f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:c3:0f:ed:88:09:71:2b:3f:a9:ea:1e:3d:
0c:72:1f:5e:21:6c:e5:ff:ca:37:1b:1d:65:47:03:
25:48:2e:75:bf:77:f4:a9:21:2e:de:1f:a4:a8:cb:
4f:a1:e6:52:1c:ed:39:db:5a:94:51:fc:d3:5b:f0:
00:0c:7d:6c:27:c8:f2:3b:d2:77:4d:b0:b4:b8:35:
1d:b5:24:de:02:97:e7:10:ca:0b:41:d1:82:dd:b2:
41:83:8d:00:6f:7d:12:ec:88:dc:12:cc:b6:12:5a:
d8:21:11:bf:0f:20:a2:51:28:68:13:12:f7:a6:50:
16:73:ff:53:c6:70:e5:ea:68:8a:69:0c:11:d8:7d:
c3:15:e3:ab:1a:9b:2a:96:52:3c:98:64:69:dc:7a:
5a:c9:81:05:ab:40:95:82:36:5a:f7:d6:21:d9:20:
3b:b3:ed:5a:76:94:be:60:3a:60:80:c9:65:fc:6e:
f4:00:d2:ff:82:4c:21:82:be:c9:e0:f9:91:a9:4c:
d1:7f:8f:ed:43:57:57:8e:a1:14:ba:38:4f:c4:76:
87:48:eb:6f:96:df:bc:15:7f:ea:e8:24:a0:c8:63:
97:2a:0f:9a:b1:82:4f:d5:cf:3d:7d:65:0d:4f:e9:
00:4f:58:95:b4:aa:9f:ee:68:fe:75:ff:76:be:07:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:49:05:C8:C8:24:B5:69:87:50:BC:FA:85:EE:35:D5:E6:1B:7F:47
X509v3 Authority Key Identifier:
keyid:E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/S0kFyMgktWmHULz6he411eYbf0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8d40:1024::/48
2a12:8d40:2022::/48
2a12:8d40:2048::/48
2a12:8d40:4096::/48
Signature Algorithm: sha256WithRSAEncryption
6d:4d:a5:e8:67:7e:db:ec:31:2a:cf:f6:d0:af:a2:89:73:90:
5e:bc:6b:15:09:eb:aa:0f:cb:46:1f:03:69:fc:60:ca:dd:68:
5b:15:63:e4:f3:da:74:4a:2b:2d:19:d2:93:c5:7b:a0:50:ff:
3a:37:0b:00:dc:76:97:87:df:4d:ca:3a:61:1f:8a:8b:2d:7b:
03:19:77:f0:81:ce:03:6f:c6:a3:6c:4d:ec:4f:c6:ff:49:73:
1d:2e:84:b3:45:0f:2a:77:8b:13:96:18:14:b6:68:10:01:9d:
bc:e6:f9:c6:de:ad:14:2c:16:5b:6a:59:76:2d:6d:36:46:60:
22:7a:c9:43:7e:4c:4a:28:97:15:44:55:4f:50:0d:58:d6:eb:
2c:86:d7:37:95:a0:fb:fb:08:39:0b:2c:b4:3e:a2:fd:15:ae:
c7:89:1a:0f:7e:e9:b5:1f:af:ec:81:46:55:94:ba:3e:88:08:
5d:88:75:f6:a3:91:cc:47:8a:cd:01:7e:fb:1f:fe:e2:58:db:
64:cd:62:7d:51:d1:40:e1:14:b2:83:17:a1:7b:05:37:b0:33:
e6:10:57:fc:78:a0:37:3f:7f:11:73:63:f1:d9:dc:1e:53:ec:
e7:37:f0:05:50:bf:5d:49:5b:f9:73:d3:4b:33:3d:45:1d:c3:
c8:31:a3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:34 2024 by rpki-client on console-fra.rpki-client.org