Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/It_-YY2XDwZMfS7xN6tEuUx0K7M.roa
File: It_-YY2XDwZMfS7xN6tEuUx0K7M.roa (raw, json)
Hash identifier: O+6kdQMGBmX7fZxc9Udk81I8HStrboOyCJ1euxkIZC4=
Subject key identifier: 22:DF:FE:61:8D:97:0F:06:4C:7D:2E:F1:37:AB:44:B9:4C:74:2B:B3
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 0D04EA
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/It_-YY2XDwZMfS7xN6tEuUx0K7M.roa
Signing time: Thu 10 Mar 2022 18:07:13 +0000
ROA not before: Thu 10 Mar 2022 18:07:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49910
IP address blocks: 2a12:9940::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853226 (0xd04ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Mar 10 18:07:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22dffe618d970f064c7d2ef137ab44b94c742bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:96:87:21:dd:5e:d3:d9:18:25:1b:6b:5b:
ec:3e:08:b8:fb:2c:a5:cd:6a:50:f4:74:96:55:5c:
7d:52:d3:26:84:fc:0d:0b:64:61:4c:4f:73:09:0b:
13:f9:9c:13:3a:68:6f:07:b1:6e:1e:cc:0c:eb:3f:
2e:9a:ac:ba:ac:5c:35:c0:58:e2:86:e7:2b:0f:54:
c7:28:5f:98:6e:fe:4a:3e:20:de:5e:57:2d:ff:14:
bb:12:1d:cf:e1:b6:6f:33:94:4d:92:0d:a7:b6:94:
8c:19:42:4f:b7:53:24:0b:af:21:df:22:2b:4d:7f:
32:04:1e:13:50:a0:17:ce:c0:b9:84:c7:d5:e5:b1:
d4:bb:8c:d2:c6:b2:63:c5:2d:0d:2c:8a:f9:d8:fa:
9d:46:3a:c6:83:ea:0a:e0:73:dd:df:35:48:15:21:
16:f9:f9:49:ce:13:01:b4:f1:ba:fe:00:f5:9e:8b:
68:5f:e1:0a:b6:05:65:70:85:58:79:a2:95:21:ab:
cf:71:f3:07:b1:85:9f:32:71:14:7b:89:53:20:c6:
64:3b:af:a5:31:a0:9e:7c:41:bc:8a:ce:28:64:44:
c5:5e:87:2c:57:b8:e9:8a:4b:c8:54:5c:40:78:bf:
3e:26:c5:21:ce:56:14:12:5a:9e:7f:62:60:92:e3:
e0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:FE:61:8D:97:0F:06:4C:7D:2E:F1:37:AB:44:B9:4C:74:2B:B3
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/It_-YY2XDwZMfS7xN6tEuUx0K7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9940::/29
Signature Algorithm: sha256WithRSAEncryption
75:4b:aa:70:08:7b:1a:91:51:0e:82:ed:7e:fa:54:2a:43:6e:
7f:c0:a9:db:f3:e7:a7:86:37:78:6b:8c:7a:e3:54:51:9f:08:
3f:99:40:99:cd:9f:44:6b:73:27:6a:52:b6:b2:4a:36:96:dd:
8e:32:7e:d5:df:0a:e5:4c:25:47:e1:ea:16:a8:95:00:14:1d:
5a:1d:13:62:be:47:22:46:a1:fe:26:d6:59:e3:24:89:9f:2f:
f1:53:49:e4:2a:9f:1a:ec:82:db:ed:66:fc:f1:c5:19:dd:4d:
9d:ac:0a:0b:d4:aa:12:45:d4:21:b5:96:eb:79:13:63:76:c0:
32:d0:16:78:7a:75:63:55:23:f1:14:17:ed:4d:35:8a:fe:18:
7f:52:96:60:61:5d:c1:4f:12:ac:89:38:16:49:8a:3e:8d:db:
54:dc:42:0e:a1:58:59:34:23:19:77:83:2a:d3:60:0c:19:4a:
a6:08:9f:4c:83:10:3e:f9:af:5a:01:83:eb:65:22:a9:6d:ad:
67:9d:40:7d:b8:7a:5a:40:f8:66:af:03:bf:02:3b:d5:49:06:
47:ed:cd:3f:38:f6:1a:30:2b:71:74:ec:3b:00:a2:c1:f4:86:
24:10:f9:53:bb:3e:87:87:ee:95:3b:a3:31:13:86:d4:a1:57:
f1:ff:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:54 2024 by rpki-client on console-ams.rpki-client.org