Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/v_GDTvM1bcONvxsdcf1CWhFEoN0.roa
File: v_GDTvM1bcONvxsdcf1CWhFEoN0.roa (raw, json)
Hash identifier: i1KeagW5LuDPhL2JlsEdlJnpIKH/HU51suSCpj+bF5g=
Subject key identifier: BF:F1:83:4E:F3:35:6D:C3:8D:BF:1B:1D:71:FD:42:5A:11:44:A0:DD
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 0A2CF541
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/v_GDTvM1bcONvxsdcf1CWhFEoN0.roa
Signing time: Mon 23 May 2022 05:43:30 +0000
ROA not before: Mon 23 May 2022 05:43:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207821
IP address blocks: 2a0a:2782::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170718529 (0xa2cf541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: May 23 05:43:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bff1834ef3356dc38dbf1b1d71fd425a1144a0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:39:b7:96:ac:c8:27:47:cb:6c:37:72:14:2d:
cf:71:7e:e6:da:6e:17:27:bb:69:a7:7d:02:16:89:
39:6e:ca:63:16:f3:4a:38:7c:8e:b8:9f:b3:26:d1:
71:7f:5c:f6:12:6b:2f:5b:41:07:fb:71:aa:5b:85:
61:02:53:02:3b:ab:b6:c8:09:2a:27:61:4b:ab:32:
bd:be:29:30:16:97:a1:d5:85:01:b3:17:36:37:03:
d1:57:d3:aa:e7:70:b2:7f:2e:1b:62:a9:d9:cc:7c:
a6:62:ca:4f:c6:c3:2f:2a:b4:34:50:d4:9f:67:42:
25:e1:70:ff:a7:67:4a:c6:6a:e4:6b:d5:d3:b7:f6:
c6:90:49:62:44:a7:50:c1:32:db:73:d8:f9:b6:aa:
00:66:23:33:99:45:9b:86:cc:f2:d1:f0:99:71:dc:
62:0e:51:ff:e7:b8:6d:71:a7:82:d0:c9:cb:76:47:
49:5c:04:00:48:c4:11:f6:71:be:ce:94:7d:2a:c5:
44:14:52:45:1a:05:87:31:c0:be:4f:16:62:48:97:
cd:77:f0:45:73:9d:5f:7f:7a:d8:e2:a8:66:c9:b7:
f4:51:94:a6:01:68:08:63:c8:0a:a7:4d:9f:e7:68:
6f:48:ad:16:39:81:0a:2f:f7:6a:2d:ed:0c:6a:76:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F1:83:4E:F3:35:6D:C3:8D:BF:1B:1D:71:FD:42:5A:11:44:A0:DD
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/v_GDTvM1bcONvxsdcf1CWhFEoN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2782::/32
Signature Algorithm: sha256WithRSAEncryption
9d:c7:2f:2c:15:d3:43:da:e9:28:5b:ba:39:c7:3d:5e:87:9c:
fa:9f:fe:61:eb:36:52:18:88:22:1c:1a:5c:b6:c5:c6:7e:8e:
94:6e:f3:d3:b5:b6:13:7b:2a:6c:5a:a9:f1:78:01:24:5e:c5:
90:73:bd:0d:12:32:c7:ff:7d:d9:25:af:ef:eb:11:da:54:37:
13:5f:6f:64:f7:d0:ba:cc:41:84:76:95:09:85:7e:6e:bd:44:
4e:0a:7f:69:c2:3b:1c:9f:d5:51:d9:af:dd:64:ac:df:25:2b:
08:af:7d:c5:9b:d1:53:bd:98:fb:7e:92:de:91:ad:44:90:e3:
da:be:50:94:04:c7:e2:96:2e:3c:80:4d:eb:92:1c:5d:44:a6:
1e:a6:68:e9:0b:d2:2e:b3:a8:1c:13:55:09:e0:49:e9:80:6c:
c0:9f:a3:be:30:24:bb:ee:5d:70:48:34:db:32:dc:c4:73:7d:
a7:a9:1c:41:7b:17:44:a1:63:f1:2c:9f:2d:66:22:a4:ab:4b:
ee:7c:43:92:2a:58:29:71:04:ad:52:c8:20:22:cf:17:07:e4:
73:d3:e7:fd:c3:50:f4:50:96:53:5f:a6:75:0f:e6:31:52:82:
94:56:08:d7:06:68:52:90:83:c2:f1:f9:80:a9:14:03:6a:9f:
c5:28:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:03 2024 by rpki-client on console-fra.rpki-client.org