Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/5Wc1k91tpEu_47CWtytpe0Oqkd0.roa
File: 5Wc1k91tpEu_47CWtytpe0Oqkd0.roa (raw, json)
Hash identifier: DZwFCyupFWxWMVw7eXBhV0qVCBmTV2CUl4U6i1sQar0=
Subject key identifier: E5:67:35:93:DD:6D:A4:4B:BF:E3:B0:96:B7:2B:69:7B:43:AA:91:DD
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 03F62E5F
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/5Wc1k91tpEu_47CWtytpe0Oqkd0.roa
Signing time: Sat 01 Jan 2022 06:00:51 +0000
ROA not before: Sat 01 Jan 2022 06:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212856
IP address blocks: 2a07:22c1:11::/48 maxlen: 48
2a07:22c1:10::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66465375 (0x3f62e5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 06:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5673593dd6da44bbfe3b096b72b697b43aa91dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:55:fe:d1:d0:ba:96:43:e7:f2:71:d1:d5:
83:4a:51:17:4b:29:0a:3e:95:a4:0a:be:c2:0b:d3:
df:99:d0:93:47:14:41:89:63:db:ac:e6:ce:84:09:
0c:f8:b7:a5:93:8e:7c:75:0e:c4:9c:e3:40:91:e0:
9f:60:2a:49:75:4b:24:46:ca:3f:82:97:3e:ad:24:
7b:3e:da:1d:a1:58:f9:4e:4e:b8:fb:02:29:2f:e4:
68:0b:27:ba:10:2e:b1:64:c5:79:a8:a3:7c:da:da:
bf:00:e0:a9:67:e8:92:79:d0:d4:d0:61:00:93:4c:
b6:26:82:bd:6c:98:ea:1a:8f:f8:e9:f4:15:d0:73:
a0:87:1f:dd:3b:7a:fe:a0:bb:2e:17:77:db:de:56:
1d:37:10:57:5e:90:d2:5b:71:ed:37:93:36:05:5f:
22:83:e3:18:77:3f:9f:76:9c:e3:ad:a6:49:2a:8f:
d6:20:2c:24:d9:0b:ad:94:f3:64:7c:28:b9:27:8b:
0b:a0:c9:bf:75:66:4d:c6:f4:7f:e7:8d:d5:1e:88:
fd:87:5b:b4:50:52:60:ec:aa:ce:fe:80:ae:b2:51:
fa:f1:78:e4:1c:11:58:29:44:e1:af:67:af:27:95:
32:51:7f:dd:77:25:be:a5:a2:ec:de:d3:12:a4:13:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:35:93:DD:6D:A4:4B:BF:E3:B0:96:B7:2B:69:7B:43:AA:91:DD
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/5Wc1k91tpEu_47CWtytpe0Oqkd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1:10::/47
Signature Algorithm: sha256WithRSAEncryption
58:b3:ab:ed:f8:ab:a9:65:09:83:47:81:8c:31:a9:fa:4d:c8:
f8:41:3a:02:8f:f3:91:9a:35:5a:86:f8:af:dc:4a:23:80:7c:
ae:57:bb:46:aa:95:f6:df:13:20:72:ef:73:f2:bc:91:38:56:
09:06:fb:bb:20:b2:12:f7:f6:c5:4e:7c:bb:56:76:09:8e:91:
f1:95:df:c3:f1:0f:95:04:97:7e:a3:e9:c9:a2:b8:2e:e7:c3:
c3:cd:32:f3:6e:1f:2a:ff:aa:25:a7:73:d3:3e:19:6e:52:41:
3c:42:04:96:6d:8c:f3:39:3e:11:46:14:fb:86:a7:71:71:11:
4a:1e:0a:e6:d4:62:e5:b7:a8:11:9a:a8:aa:85:13:7a:65:b3:
db:00:2d:00:ca:f9:09:d4:3f:ae:b8:7b:db:8e:5d:b6:55:30:
ae:75:99:5d:25:9d:c8:be:29:16:52:05:28:90:1f:94:a8:7a:
1f:3c:ce:0b:26:55:6a:fc:91:46:05:fd:02:98:ef:74:44:00:
b1:ea:0f:6a:53:db:b8:0f:7c:c3:12:f3:48:86:c4:4c:26:5a:
03:25:18:7c:3e:5e:9a:71:38:9b:4e:44:a4:c0:94:9c:b5:c4:
63:20:6d:e7:16:c1:55:e6:c6:1c:0f:80:08:ae:2b:91:f0:3c:
92:1d:99:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:48 2024 by rpki-client on console-fra.rpki-client.org