Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/aRuGpGlq--Rkyn0MQkBC5yymbHM.roa
File: aRuGpGlq--Rkyn0MQkBC5yymbHM.roa (raw, json)
Hash identifier: THAmrfJem7cKO3P/HKJcdoaqXJ1m9CL6CPFeKCBmfXA=
Subject key identifier: 69:1B:86:A4:69:6A:FB:E4:64:CA:7D:0C:42:40:42:E7:2C:A6:6C:73
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 03F2665A
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/aRuGpGlq--Rkyn0MQkBC5yymbHM.roa
Signing time: Sat 01 Jan 2022 06:00:47 +0000
ROA not before: Sat 01 Jan 2022 06:00:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207740
IP address blocks: 2a07:22c1:ffe5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66217562 (0x3f2665a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 06:00:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=691b86a4696afbe464ca7d0c424042e72ca66c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:09:83:ca:a3:c7:20:91:ce:d9:1d:ee:61:
dd:ca:b5:87:c5:d1:cd:19:5c:e0:3c:da:5a:d8:c5:
76:8a:33:e4:b4:0e:44:8d:76:84:85:db:e4:26:6d:
b3:d3:e3:77:e8:7b:d0:ca:2f:bb:d2:c4:6c:55:4f:
3f:70:c5:44:13:51:89:ac:9e:43:90:51:71:7d:57:
85:4f:1b:7f:83:45:74:5c:6f:36:6e:32:7e:01:86:
9f:7c:16:04:c6:73:36:da:b8:fa:0f:75:f1:8c:3f:
5a:aa:b2:b1:78:e6:bd:3c:2e:33:a6:c5:63:c9:50:
f6:0c:a0:86:66:8f:e0:f5:a0:b9:28:17:7c:37:df:
a4:61:a8:e4:e7:6f:7f:a4:93:f2:5b:34:2b:58:c7:
db:25:b9:a0:d2:52:5a:0b:30:45:e7:d4:58:88:c3:
d0:c8:4e:c9:2d:b7:35:14:35:0c:c7:eb:90:52:32:
42:6b:84:57:3f:aa:5c:e6:ed:54:c5:33:15:cd:7d:
e9:84:17:af:eb:df:52:2b:75:76:aa:9d:96:e7:11:
75:aa:fa:8d:3b:1f:30:f8:25:f3:82:33:e3:4f:ab:
1b:18:82:09:bf:4c:41:71:b4:61:16:dd:69:6b:d3:
af:de:b3:f5:36:59:ef:3a:e6:be:e5:48:db:92:79:
b0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1B:86:A4:69:6A:FB:E4:64:CA:7D:0C:42:40:42:E7:2C:A6:6C:73
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/aRuGpGlq--Rkyn0MQkBC5yymbHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1:ffe5::/48
Signature Algorithm: sha256WithRSAEncryption
6e:a7:a6:bc:1f:96:b8:e5:6e:8b:d8:ff:ae:1a:88:c4:1d:69:
c0:5c:94:36:c0:1f:f8:ee:6f:cb:dc:d0:b0:21:06:6a:9c:60:
dd:17:cf:79:13:b5:88:c7:34:63:8c:a1:97:f5:72:3b:7a:7b:
76:11:de:a5:39:b6:68:84:d6:45:ca:6a:82:31:83:9d:ab:09:
ec:de:62:93:c3:db:7c:69:e2:b0:4f:13:2e:68:72:75:15:cf:
42:42:72:6b:74:77:0d:be:e1:e0:e7:9d:90:26:94:b4:57:90:
a9:2b:3a:7c:88:71:01:f8:f0:4c:0d:bd:26:d8:6d:d4:0a:36:
29:10:db:4f:a9:58:8b:40:cd:f9:75:6a:23:c9:97:94:41:0c:
d3:a8:fe:6c:0f:b8:47:17:f5:6d:d6:62:85:7d:3e:94:29:59:
5f:0e:57:36:27:5c:42:98:9c:de:0e:94:3b:a1:e7:70:e7:f6:
99:65:f7:51:e0:e7:db:75:1b:e3:5c:4d:87:45:67:95:60:72:
47:4f:b8:e3:b1:c4:34:fa:a4:58:61:3c:7c:77:a1:81:f5:58:
e4:79:b8:af:18:ad:dc:ac:5f:df:cd:fa:39:5c:5d:1b:aa:c4:
b4:dd:45:b7:8d:86:7f:d6:fa:f6:87:cb:0c:01:44:15:51:dc:
d2:fd:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:48 2024 by rpki-client on console-fra.rpki-client.org