Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/VkEA2P8r09yObKWU50sq9AJiV6E.roa
File: VkEA2P8r09yObKWU50sq9AJiV6E.roa (raw, json)
Hash identifier: TZaoklNOGS65UuLU/oGi9KNngAri/zpKTyBXuWjcUIc=
Subject key identifier: 56:41:00:D8:FF:2B:D3:DC:8E:6C:A5:94:E7:4B:2A:F4:02:62:57:A1
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 0FBADB48
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/VkEA2P8r09yObKWU50sq9AJiV6E.roa
Signing time: Sat 01 Jan 2022 09:57:03 +0000
ROA not before: Sat 01 Jan 2022 09:57:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 2a05:b0c6:300::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263904072 (0xfbadb48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 1 09:57:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=564100d8ff2bd3dc8e6ca594e74b2af4026257a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:f3:8b:4d:5b:3a:cc:46:03:7c:b5:ad:e4:
82:74:0c:06:c8:94:13:2d:ec:cf:d9:d5:60:9d:27:
10:98:49:cd:96:00:72:96:bc:12:ea:a9:78:c1:94:
00:a2:60:a5:26:76:52:c7:6d:cb:7f:12:da:27:e4:
35:2c:ba:aa:77:60:6c:18:53:c2:65:e7:77:86:1b:
db:d9:e3:cb:83:fb:c9:13:ff:eb:14:9f:68:3f:25:
f8:88:88:c8:15:fd:44:5f:6d:6e:fc:e2:e9:7d:ee:
14:e9:14:57:3a:2b:70:75:20:42:64:3e:47:cc:e8:
71:ac:1d:60:fa:b6:9f:ae:ec:1d:c7:90:af:fc:c7:
ae:74:c2:76:27:cd:44:f5:84:b2:58:b1:96:e7:7c:
9d:29:01:ee:00:96:ef:4c:00:28:2f:b0:a2:12:e8:
d6:89:f4:8e:d8:bb:67:73:ae:b4:a2:ea:a2:e3:e1:
b3:fb:b9:67:c3:c0:c2:9b:28:a3:bb:55:e3:a0:7b:
f3:b2:ce:85:83:82:37:16:36:c9:b5:83:c3:bb:0d:
6b:56:cf:35:48:ce:42:ef:2b:a6:cf:73:9e:66:49:
2a:41:ab:65:ec:0c:3f:3c:3c:01:a5:ad:41:fe:00:
4f:ad:e9:fa:da:a6:4e:31:cf:f9:bb:63:b7:ae:81:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:41:00:D8:FF:2B:D3:DC:8E:6C:A5:94:E7:4B:2A:F4:02:62:57:A1
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/VkEA2P8r09yObKWU50sq9AJiV6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:300::/40
Signature Algorithm: sha256WithRSAEncryption
73:58:77:2c:42:1e:52:69:ee:7c:d5:e1:d9:61:e1:3e:b4:5a:
1d:bd:74:37:63:62:49:06:7f:c9:c7:be:fd:c6:c1:a7:4e:bb:
6d:ad:84:f8:e7:3b:55:b7:4b:28:16:dc:0b:41:6d:e2:56:ee:
58:06:2b:bd:71:ab:ef:20:0d:08:6c:34:9a:f8:ac:42:c5:1d:
33:45:1c:d1:f9:f9:38:10:2d:ca:a7:95:4e:88:0b:47:b4:bc:
38:02:c5:b7:91:a0:54:3e:0c:e2:fe:72:6c:6e:2b:7d:e4:54:
ba:24:7e:61:31:a3:a3:b3:e8:f8:2b:da:ef:8c:a5:47:17:93:
ed:16:c4:7a:bb:5e:9c:b4:c4:f5:d7:39:6f:e1:01:ea:e0:2d:
e3:02:f8:54:9b:46:8e:b6:38:29:d5:47:03:38:18:c9:f6:a3:
df:fc:f3:6c:5c:cb:30:da:59:b1:d6:77:f8:15:b9:75:f5:8c:
80:5a:bd:a7:3c:29:5f:af:d3:9e:ab:7a:11:02:01:26:07:b8:
b9:ba:dc:93:cb:c2:a3:25:49:48:42:07:45:d8:cd:d4:4b:28:
8a:f9:2f:83:05:73:64:da:62:ba:23:41:3e:28:5a:e7:85:0d:
f5:54:3c:b7:57:62:f9:34:2c:37:95:cd:7e:89:5b:d9:0b:93:
4a:83:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:21 2024 by rpki-client on console-fra.rpki-client.org