Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/ElD_V2tt7rpTCrVjhl3Ipof6Kss.roa
File: ElD_V2tt7rpTCrVjhl3Ipof6Kss.roa (raw, json)
Hash identifier: Erex0LuD5geOiPEHZBtRDLkxxDcxjFBw9Dci0xjgQFg=
Subject key identifier: 12:50:FF:57:6B:6D:EE:BA:53:0A:B5:63:86:5D:C8:A6:87:FA:2A:CB
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01828937F0060BA76AA235CEAB67E98429A3
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/ElD_V2tt7rpTCrVjhl3Ipof6Kss.roa
Signing time: Wed 10 Aug 2022 19:25:20 +0000
ROA not before: Wed 10 Aug 2022 19:25:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211139
IP address blocks: 2a05:b0c6:6006::/48 maxlen: 48
2a05:b0c6:6000::/48 maxlen: 48
2a05:b0c6:6007::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:89:37:f0:06:0b:a7:6a:a2:35:ce:ab:67:e9:84:29:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Aug 10 19:25:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1250ff576b6deeba530ab563865dc8a687fa2acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:cb:02:0c:a3:c0:85:55:a2:a8:ea:66:0d:
74:b9:c4:8f:7e:de:f2:77:5b:01:e8:88:99:47:16:
2e:85:75:e6:1f:7f:a2:d8:d2:e3:bf:4e:19:a5:2a:
30:cb:1b:96:94:ac:b1:97:58:dd:ab:e8:42:98:d9:
62:20:6e:54:ee:ab:56:90:93:38:99:f2:bc:b0:7f:
c0:df:13:50:9c:64:32:62:2e:6a:2a:77:ff:1c:59:
32:88:f2:e2:5a:a2:63:9b:bc:58:cd:ba:eb:5d:89:
b6:a2:33:6d:f8:12:0b:ef:07:23:99:fb:92:dd:bf:
52:0e:27:d4:6a:14:f7:3c:0f:dd:bb:30:7c:3a:ce:
41:bb:fe:bf:69:9c:2f:82:32:a3:61:56:d0:49:45:
14:8e:b2:cf:03:2a:1d:91:a8:80:58:35:62:38:99:
b0:fc:1e:8b:73:a5:09:5c:25:e0:66:ec:20:bb:91:
46:64:f7:5c:bc:ad:a2:0e:17:3b:94:2d:36:7e:26:
14:25:53:65:2f:cf:f9:d9:f6:87:94:57:e2:94:74:
ab:87:1f:0f:2e:30:3d:12:0a:ad:4f:df:15:a8:02:
47:0e:70:12:95:de:54:ae:8f:4a:18:fc:f0:e6:99:
e8:5c:82:a3:2a:10:cd:5d:fa:0c:57:2e:5c:10:34:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:50:FF:57:6B:6D:EE:BA:53:0A:B5:63:86:5D:C8:A6:87:FA:2A:CB
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/ElD_V2tt7rpTCrVjhl3Ipof6Kss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:6000::/48
2a05:b0c6:6006::/47
Signature Algorithm: sha256WithRSAEncryption
7b:8f:ec:44:c2:b3:13:eb:e7:5b:84:2e:81:05:72:e5:c1:46:
62:f2:1a:70:62:d8:4f:8c:ce:a0:38:71:60:8f:e7:bf:7f:39:
b9:ff:d3:d3:64:13:b5:22:67:a5:73:2c:88:e8:c9:fb:57:27:
28:54:aa:76:76:45:e9:e6:ae:27:bb:73:81:78:b4:72:ca:36:
a0:a9:9f:b1:3c:25:02:40:79:98:71:1b:12:20:c1:44:29:f6:
17:47:a7:5c:52:bd:50:6e:80:d0:07:0e:7c:47:fb:3e:c5:cb:
9d:04:26:35:a3:db:10:f1:65:90:1d:d4:c9:49:10:eb:14:b0:
e8:10:a1:72:f4:7b:eb:5a:e4:1d:df:4a:5a:e7:32:62:6f:50:
d2:dc:21:91:95:2a:a3:7f:49:0d:ef:e5:db:3a:f8:44:83:ea:
82:30:fb:fe:0d:75:85:13:e1:91:1e:a7:7e:db:15:77:5f:60:
e4:e1:5c:90:9e:45:3c:65:93:72:16:ee:1a:5e:b6:2a:e4:d6:
98:07:9f:81:69:1c:a1:e4:b1:a2:23:b0:2f:af:e3:57:e7:38:
6d:04:37:73:6f:97:6c:53:9f:5e:7d:2e:63:39:c2:fa:5c:25:
27:ca:8a:24:f1:b2:81:06:a3:ad:f7:5a:c7:fe:f0:a6:50:61:
f6:35:2c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:17 2024 by rpki-client on console-ams.rpki-client.org