Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/1-05cEZf5iiuWCpYAhMH60PIxtsg.roa
File: 1-05cEZf5iiuWCpYAhMH60PIxtsg.roa (raw, json)
Hash identifier: hCf7A/9EanXKnTYsXMUFFxo0680kl/PsDmGltAtMsTA=
Subject key identifier: FB:4E:5C:11:97:F9:8A:2B:96:0A:96:00:84:C1:FA:D0:F2:31:B6:C8
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 03F9DEFA
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/1-05cEZf5iiuWCpYAhMH60PIxtsg.roa
Signing time: Sat 01 Jan 2022 06:00:52 +0000
ROA not before: Sat 01 Jan 2022 06:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213189
IP address blocks: 2a07:22c0:c000::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66707194 (0x3f9defa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 06:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb4e5c1197f98a2b960a960084c1fad0f231b6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:e0:7a:4d:ec:dd:2c:bc:52:7d:f6:c8:f0:
a4:09:9c:c8:c8:fa:21:31:e2:18:99:51:7c:8a:ab:
27:99:9e:83:38:16:0b:c7:6e:0f:71:04:4f:b1:4f:
84:8d:24:04:5b:88:37:cf:08:4c:b0:77:4d:31:26:
6a:07:7a:aa:a2:dc:94:5c:13:04:20:86:77:82:32:
3e:35:ff:e2:55:9f:2d:8e:eb:c1:8f:07:78:8a:3b:
81:16:88:10:78:6d:08:19:18:fa:e4:56:4c:12:b4:
49:ed:21:db:ff:f4:33:69:83:6b:4d:3d:6b:d0:f5:
ab:3b:12:d7:3f:d3:5c:10:4e:29:64:31:cd:d3:c3:
21:bb:96:5d:fa:79:64:f6:1a:80:f9:fc:5d:7a:df:
ac:36:4e:56:4a:66:32:b8:7f:16:97:6d:75:d5:c2:
05:09:47:f5:ea:a3:d5:a1:e8:c7:cd:45:6b:22:5f:
f8:4f:08:f6:da:c0:da:1b:e7:fd:d2:e7:e6:1a:5b:
1a:13:e8:8b:61:24:47:30:fc:1f:f5:46:bb:4f:fb:
49:54:ca:88:46:05:f0:3d:2d:37:8d:81:56:fd:9f:
53:56:78:17:5a:e1:80:93:de:c9:b6:36:9a:de:60:
06:e3:6b:7f:50:16:cc:d3:6d:46:57:6d:db:e6:90:
2d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4E:5C:11:97:F9:8A:2B:96:0A:96:00:84:C1:FA:D0:F2:31:B6:C8
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/1-05cEZf5iiuWCpYAhMH60PIxtsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c0:c000::/40
Signature Algorithm: sha256WithRSAEncryption
4c:fd:69:c2:f8:ce:3b:95:7c:9e:75:41:39:bd:0d:d4:67:5d:
16:99:2a:90:87:53:93:37:74:d1:62:04:1f:68:b5:af:ad:02:
dc:7f:61:10:0a:08:69:c4:1b:2d:92:49:35:00:0a:fb:c4:ba:
f5:65:c3:08:93:59:3b:3b:c6:01:70:5d:8f:f6:bc:f9:5d:8a:
3c:93:ee:d1:00:9a:d9:8a:0c:56:3f:3a:1b:34:11:7b:f2:44:
d6:cd:16:bc:7c:4d:05:ac:b6:6d:cf:27:d1:cc:f7:af:67:f4:
fd:0c:99:27:9c:3b:a4:1b:98:7a:5a:ef:00:01:db:8a:b4:90:
47:29:04:8e:0d:fc:13:5c:7a:64:6d:e3:12:d6:52:ce:92:8b:
8d:83:27:f9:04:cd:48:e6:96:79:22:23:5f:7a:8b:55:0f:cd:
6b:4f:9f:ef:6f:4f:2d:12:61:f8:e7:19:5c:ba:03:0a:5b:2f:
63:40:50:cd:70:c6:ac:6d:40:fb:76:2f:de:5e:c5:e6:27:3f:
71:0e:a4:33:77:15:32:74:3e:e2:2a:fe:c1:88:e6:f3:89:61:
ed:d7:d8:27:45:8d:a2:4e:25:7e:b2:fe:c8:19:34:b2:8b:3d:
d4:7c:31:88:eb:f6:33:0d:11:da:77:93:89:25:14:3d:7c:7d:
87:be:3c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:48 2024 by rpki-client on console-fra.rpki-client.org