Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/1-JF3YtIuXaWJ4sTfW2gauR25pLA.roa
File: 1-JF3YtIuXaWJ4sTfW2gauR25pLA.roa (raw, json)
Hash identifier: bljbjPsXUaUIeVoLptL1OJ6pnk7kdaHiSqqTwaJ6YBY=
Subject key identifier: F8:91:77:62:D2:2E:5D:A5:89:E2:C4:DF:5B:68:1A:B9:1D:B9:A4:B0
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 369FC539
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/1-JF3YtIuXaWJ4sTfW2gauR25pLA.roa
Signing time: Sat 01 Jan 2022 07:03:15 +0000
ROA not before: Sat 01 Jan 2022 07:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196610
IP address blocks: 2a02:c50:db8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916440377 (0x369fc539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Jan 1 07:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8917762d22e5da589e2c4df5b681ab91db9a4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:db:20:ed:60:46:88:96:46:46:9f:e0:43:
95:7c:8b:ab:aa:60:26:22:e7:dd:d9:6d:cd:01:a1:
92:3d:aa:00:37:e0:c4:e4:5d:1f:f4:d7:f3:10:07:
23:5c:9b:a6:f7:71:99:d0:41:1b:ba:b2:79:6c:5f:
d1:6a:a7:67:23:aa:01:87:b6:2d:d5:91:bb:07:50:
3b:b1:ea:7a:71:b2:a8:a5:dd:13:1e:9a:ef:eb:b5:
14:a4:2b:62:11:f6:87:de:d3:04:45:9f:ff:b7:1d:
a1:57:89:c2:e9:a1:ad:05:db:35:65:10:d8:56:38:
06:c6:68:77:86:d6:f9:b5:d6:dc:9d:b0:fa:d2:d2:
42:9d:df:f3:dc:24:12:81:2d:54:9e:13:dc:59:77:
36:fa:17:09:8c:73:e6:d8:a1:25:24:2f:d7:7d:80:
c8:70:14:a6:1c:4f:c2:7c:95:c1:28:77:3f:3c:b9:
a8:80:b6:c1:d1:d0:67:f4:05:1f:13:e5:03:a0:e2:
ee:dd:8a:a5:99:70:db:f8:b7:33:48:b7:db:cd:4a:
8e:8b:82:01:7b:66:b1:d8:8c:16:f6:bc:fe:43:3d:
71:79:68:19:eb:af:46:0e:77:1d:28:39:22:4e:12:
c2:9a:eb:d4:98:70:e6:0b:f8:8b:65:9e:da:de:eb:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:91:77:62:D2:2E:5D:A5:89:E2:C4:DF:5B:68:1A:B9:1D:B9:A4:B0
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/1-JF3YtIuXaWJ4sTfW2gauR25pLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:c50:db8::/48
Signature Algorithm: sha256WithRSAEncryption
79:a1:3b:63:5f:78:da:e4:e5:0e:84:d6:78:f5:24:84:65:1b:
25:e9:eb:d6:74:09:eb:68:85:3b:c3:65:2b:09:1c:4f:cc:57:
3f:ba:84:c1:06:1e:cd:fa:8e:8a:83:79:e3:fb:4d:c5:40:b2:
e7:02:5a:92:df:88:f7:25:af:f0:39:41:05:fb:6b:4a:76:4f:
ab:40:da:90:a4:0e:74:4f:ad:45:94:37:d0:39:4e:77:58:50:
db:8c:dd:50:74:40:32:9c:d0:2e:96:cd:24:07:74:5a:de:1c:
3e:81:b8:c5:1d:4e:4a:48:b0:f8:c9:b8:8a:5f:3e:ba:f3:4c:
f2:9d:b2:09:7d:ba:d0:ad:06:aa:9e:79:17:b1:61:33:29:7d:
05:12:96:17:a0:a5:b2:6b:85:73:ef:b4:57:0f:66:1c:c2:38:
98:98:cb:80:08:2d:62:4f:b5:e8:07:a5:1a:0d:38:69:60:c3:
34:d6:42:a1:4d:d0:19:11:64:db:f3:50:8c:05:c2:fb:3b:81:
fd:89:4a:9c:d5:d8:a1:f4:68:3c:49:8c:6d:80:ae:0d:58:81:
87:7f:3c:5b:9f:19:0f:47:3c:29:fc:45:f8:59:15:bb:47:29:
ea:62:1d:fc:e9:c0:16:e2:6b:26:fd:fb:5a:08:15:cc:49:a7:
c2:83:91:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:50 2024 by rpki-client on console-ams.rpki-client.org