Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/px-yffzfzoyCaAaWnHbCI7j3tiY.roa
File: px-yffzfzoyCaAaWnHbCI7j3tiY.roa (raw, json)
Hash identifier: q5VWI83dM2azzVNTTqVpEb9zNPkUmhi85ACDEe0PInk=
Subject key identifier: A7:1F:B2:7D:FC:DF:CE:8C:82:68:06:96:9C:76:C2:23:B8:F7:B6:26
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 075F7D3C
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/px-yffzfzoyCaAaWnHbCI7j3tiY.roa
Signing time: Sat 01 Jan 2022 02:00:39 +0000
ROA not before: Sat 01 Jan 2022 02:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25057
IP address blocks: 2a0a:ab00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123698492 (0x75f7d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jan 1 02:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a71fb27dfcdfce8c826806969c76c223b8f7b626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:4b:7f:fc:2d:b4:4c:64:36:4b:62:c2:28:
35:29:0b:d8:67:19:f4:99:f6:bf:c0:fa:3a:6e:c1:
31:73:76:1a:d3:33:fc:92:8d:d7:1b:a4:5a:09:59:
ca:26:15:d3:f7:8a:8b:08:74:09:2c:88:f7:22:8d:
c6:ce:77:e0:4a:58:cf:8d:e6:a1:83:98:69:47:22:
fa:2e:39:f0:69:04:54:bb:9d:bf:f6:ca:5a:21:57:
7b:dd:b7:8f:20:8d:4b:dd:4c:08:8b:d8:ef:68:b0:
12:4b:ee:80:98:af:80:a9:e1:1b:d8:74:50:66:47:
40:eb:6e:8a:65:75:c5:24:79:91:3a:76:19:e0:e4:
e2:9a:2b:e1:c9:d5:30:25:79:da:09:6f:6e:4e:43:
1f:73:81:48:27:73:da:33:cd:be:ba:18:f2:24:9a:
2d:90:d5:1b:e4:8b:03:47:bf:4a:2a:fc:e8:d5:ce:
16:4c:3f:68:14:48:bd:a0:2b:3d:57:93:21:c3:85:
c4:63:59:19:26:77:d4:08:ab:56:02:a4:6e:36:15:
ac:0f:93:ad:56:75:21:21:d7:00:e4:fe:dd:d0:1c:
58:04:f5:63:27:ad:64:a2:e9:43:2e:ac:7d:bd:12:
87:68:f7:5e:07:0a:e5:aa:2f:5e:46:c1:a4:bb:b8:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1F:B2:7D:FC:DF:CE:8C:82:68:06:96:9C:76:C2:23:B8:F7:B6:26
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/px-yffzfzoyCaAaWnHbCI7j3tiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:ab00::/29
Signature Algorithm: sha256WithRSAEncryption
78:ad:dc:61:dd:e6:ce:5d:2f:e6:a7:1f:c1:fa:9c:2a:0e:eb:
62:40:fd:8b:9e:ac:1c:0a:c2:cc:38:33:f2:21:e7:39:6c:a4:
b5:9d:c9:bc:23:44:e8:05:04:c7:1a:e5:1a:d6:d8:e1:00:97:
d8:8a:05:0b:b9:7a:b0:47:f4:dc:27:f7:5a:60:fd:3f:f9:74:
b1:09:23:e2:d3:33:d3:3b:3a:9d:c8:43:82:2f:7a:82:b0:6b:
37:a0:b1:ed:93:4d:e2:a2:2e:40:1e:f1:b9:92:a5:af:c6:d7:
16:b2:c2:b6:d6:eb:16:1b:95:45:1e:15:45:e1:84:fd:ab:92:
aa:45:77:0c:40:b2:b7:52:61:cf:75:00:e6:6e:97:6c:12:a4:
e5:c8:5e:ea:d2:58:90:72:5d:aa:91:81:17:94:6e:53:2f:f5:
56:b6:ab:af:94:1c:a3:1a:7e:db:7d:1e:d2:58:54:e1:03:a5:
ff:f0:c1:dc:a6:b3:13:b1:25:a5:6f:5a:73:da:8b:5f:33:a5:
08:61:b1:f1:74:04:6c:df:d9:78:2c:23:0f:88:3f:e5:d7:65:
db:35:d2:82:0c:88:b4:c2:72:b0:e7:65:75:da:b3:30:69:03:
81:e5:a9:98:b2:50:36:3b:1a:a8:77:5d:84:1e:6f:52:b7:f4:
f3:24:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:11 2024 by rpki-client on console-ams.rpki-client.org