Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/pBpR5a0dvN_VVvPq3cBwyL1DVYY.roa
File: pBpR5a0dvN_VVvPq3cBwyL1DVYY.roa (raw, json)
Hash identifier: BKjh5n86iUrBGw2yROVbFQP3hxGC1Q7gOkZbniYrtKM=
Subject key identifier: A4:1A:51:E5:AD:1D:BC:DF:D5:56:F3:EA:DD:C0:70:C8:BD:43:55:86
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 0BCFD4
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/pBpR5a0dvN_VVvPq3cBwyL1DVYY.roa
Signing time: Tue 18 Jan 2022 20:09:07 +0000
ROA not before: Tue 18 Jan 2022 20:09:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210926
IP address blocks: 2a12:5844:1111::/48 maxlen: 48
2a12:5840:2111::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774100 (0xbcfd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jan 18 20:09:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a41a51e5ad1dbcdfd556f3eaddc070c8bd435586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:6a:da:de:26:ca:7f:1e:5f:64:84:c4:17:
e7:8d:ff:8d:59:21:67:55:39:45:05:45:0c:e5:98:
40:39:aa:f8:ef:16:80:52:fc:91:41:42:c4:a5:9f:
0f:2e:75:e4:ba:a3:2d:a6:ab:5f:47:53:a6:9f:d2:
17:a3:74:67:2d:c2:26:30:fc:c5:f6:b3:ff:f1:00:
18:93:66:18:b4:f3:75:f0:6a:06:0e:2e:73:d7:1a:
ff:c2:c2:fc:3f:9e:ea:59:03:9c:75:12:64:49:f6:
ef:34:04:07:24:a6:c1:43:18:53:c7:35:f6:92:2d:
19:8a:25:b7:da:7e:79:20:83:33:47:58:1a:a6:9b:
ae:bf:bd:42:97:19:42:16:2e:7f:74:2a:79:56:12:
10:0b:26:45:c2:ec:79:c0:bb:df:8c:77:81:6f:5f:
cc:51:3a:18:eb:7f:7f:92:6d:9b:8a:fe:86:94:2e:
13:47:6b:0b:65:3d:13:2c:a4:4b:4c:7c:1b:0f:07:
22:b4:91:a9:39:4e:53:9f:3a:7a:4e:a0:dd:10:e0:
8f:17:44:27:3f:70:59:8f:9f:b7:13:50:19:55:ed:
0a:b1:37:27:ae:49:03:13:05:79:b3:d9:8a:e9:df:
0c:b6:c8:c7:50:bc:03:fc:4a:d9:dd:01:76:62:b0:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1A:51:E5:AD:1D:BC:DF:D5:56:F3:EA:DD:C0:70:C8:BD:43:55:86
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/pBpR5a0dvN_VVvPq3cBwyL1DVYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5840:2111::/48
2a12:5844:1111::/48
Signature Algorithm: sha256WithRSAEncryption
9f:42:a9:ba:6b:d4:42:77:2e:12:c7:a1:17:54:aa:9e:7f:c6:
c4:b8:a2:9d:3a:33:3d:5a:cf:7c:f0:a8:e3:9f:88:4c:f7:08:
4f:17:e0:74:85:35:d5:4a:00:54:e9:4a:a4:1b:e7:90:b8:c9:
f0:9c:38:c5:1f:65:44:85:cc:ba:b0:dc:b8:4f:34:56:6b:4d:
81:7b:b4:a7:4e:50:83:c3:b0:b3:ba:b5:38:08:b3:0b:6c:7b:
5a:02:d4:e6:5e:51:22:73:9e:6e:99:16:ea:80:47:1c:ad:e9:
de:c7:e3:76:e8:b0:ab:9d:15:b2:42:49:dd:81:a6:b0:fb:93:
c5:85:1d:8a:b7:6b:fe:c3:ae:0a:7c:96:0e:5d:b6:ce:fe:ac:
ce:71:40:a1:a0:f1:9b:a4:7b:9e:c7:14:8c:ef:70:3c:57:50:
61:db:75:27:82:93:bf:a9:21:1d:e9:94:4e:56:41:fc:4b:ed:
c2:1b:ed:60:06:b8:cd:2c:9a:56:bb:46:b0:9f:15:e0:2b:f0:
58:d4:08:a6:2d:f2:f2:c1:8a:0f:95:a1:51:c2:1c:f4:84:ab:
c6:11:5b:19:bc:ac:86:a8:7c:d9:7c:69:bf:2d:5f:d3:ac:9a:
7d:27:c2:a6:8f:0f:73:87:04:ed:12:ec:8f:c2:a0:65:5d:fa:
e2:c9:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:35 2024 by rpki-client on console-fra.rpki-client.org