Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/t4lULjeh5XzydHcDrSC8DK7Pz0w.roa
File: t4lULjeh5XzydHcDrSC8DK7Pz0w.roa (raw, json)
Hash identifier: ZkqcwAqVxHaeg3BJbBA7aVf/B2pgCIvlsBK4jqIFfcA=
Subject key identifier: B7:89:54:2E:37:A1:E5:7C:F2:74:77:03:AD:20:BC:0C:AE:CF:CF:4C
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 088164
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/t4lULjeh5XzydHcDrSC8DK7Pz0w.roa
Signing time: Tue 01 Mar 2022 12:15:26 +0000
ROA not before: Tue 01 Mar 2022 12:15:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34465
IP address blocks: 2a12:8fc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557412 (0x88164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Mar 1 12:15:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b789542e37a1e57cf2747703ad20bc0caecfcf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:24:5c:26:4f:82:c1:37:12:bf:c1:d1:61:
a5:19:e5:00:b9:8d:0d:74:86:24:cd:26:4e:f6:2e:
9c:61:06:5d:c9:d0:6f:29:ae:e3:c3:5d:8f:ec:92:
2b:e2:b6:30:15:57:6f:16:77:dd:45:ef:81:e9:e3:
b2:4c:60:a2:1f:6f:22:56:ab:94:ea:8f:29:6e:c7:
12:91:cf:0c:78:1e:5f:6b:8a:02:9f:95:a5:c9:04:
7c:5d:95:27:9b:71:6c:d7:15:77:13:62:f4:40:04:
99:24:5c:17:fc:31:71:00:33:93:37:3e:ba:cd:b7:
47:ae:00:bf:c7:73:45:e1:d6:c0:45:3e:41:07:40:
d5:25:cb:92:3b:4b:e9:67:c9:95:08:4d:26:48:61:
d1:f3:52:69:e8:13:14:c2:c7:f3:90:51:f8:90:5f:
a8:92:32:e9:f0:a2:40:a6:33:e0:27:ac:b9:07:dd:
bc:9b:e9:b3:36:81:49:40:55:66:1a:58:ca:b0:23:
39:f8:5d:01:4f:96:5b:cf:43:7e:86:d3:5a:50:72:
45:63:77:c8:1f:7a:26:23:50:c4:1f:bc:e4:26:91:
98:4c:9e:41:ea:d8:88:be:b1:6b:05:da:da:f7:8f:
ef:90:8b:0f:6a:2e:46:ea:99:d6:65:6a:49:42:6f:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:89:54:2E:37:A1:E5:7C:F2:74:77:03:AD:20:BC:0C:AE:CF:CF:4C
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/t4lULjeh5XzydHcDrSC8DK7Pz0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:8d:e6:51:84:3e:8b:c6:cc:f3:b2:93:cc:68:df:d7:c0:e5:
bf:9a:80:2f:23:e8:f0:e0:e5:9a:96:ec:03:2c:e3:dd:7e:b6:
f8:69:08:6a:8c:82:1b:4c:34:e1:28:b4:60:8f:0a:b7:0c:72:
d1:fe:fb:4e:62:79:2e:52:f8:35:79:5d:34:36:07:ef:43:ee:
b8:5f:0e:49:36:7f:f7:7a:35:24:55:e9:17:db:40:2c:5c:19:
32:a7:3b:cb:e7:6f:5b:3e:1f:a2:31:ce:69:be:62:63:e2:8a:
1d:bc:dd:49:17:57:a5:03:40:d4:29:43:35:a9:fa:9f:bb:f9:
10:21:04:1f:7a:32:b3:fd:83:97:e8:98:3b:90:90:e8:88:84:
e1:a3:ee:6d:44:1f:f4:3d:df:4c:25:7c:bd:66:05:54:43:07:
8c:d4:d5:78:a6:00:cf:20:ff:7e:90:5f:33:aa:c7:00:c2:df:
16:9f:a7:0e:3e:b7:97:b3:fa:c4:9a:8f:97:df:7c:a0:e5:6b:
af:70:4e:eb:b1:82:ed:b4:42:4a:61:e1:9e:59:94:4d:5e:f8:
13:71:e2:ea:f9:93:b6:e4:ea:03:17:f0:53:7e:3d:c1:f3:a2:
21:67:19:cd:80:b8:44:c2:ec:f2:b8:cb:27:09:dd:9e:61:9f:
56:cf:82:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:04 2024 by rpki-client on console-ams.rpki-client.org