Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/WIIeC9lO_T8NMN9FZqKRccqW4v8.roa
File: WIIeC9lO_T8NMN9FZqKRccqW4v8.roa (raw, json)
Hash identifier: HB165du9YjUYdnXiHnFU8KsMJKbHvCG75NrQBjEq3gs=
Subject key identifier: 58:82:1E:0B:D9:4E:FD:3F:0D:30:DF:45:66:A2:91:71:CA:96:E2:FF
Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df
Certificate serial: 05097A2E
Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/WIIeC9lO_T8NMN9FZqKRccqW4v8.roa
Signing time: Thu 10 Feb 2022 16:51:10 +0000
ROA not before: Thu 10 Feb 2022 16:51:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 2a05:f500:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84507182 (0x5097a2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df
Validity
Not Before: Feb 10 16:51:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58821e0bd94efd3f0d30df4566a29171ca96e2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:32:ee:13:07:cd:28:28:a1:f2:f4:56:94:
11:6a:de:d8:e3:e3:90:00:a2:5d:f3:88:fe:c3:b6:
07:98:a3:c7:02:8b:0a:92:7f:54:30:39:94:de:8a:
9e:58:ce:08:cd:fd:fd:69:f9:a7:05:31:6f:69:c7:
18:bd:f5:c1:8b:c4:1f:e1:31:b8:27:e7:9a:13:ab:
84:2c:7b:bf:0c:cf:a8:9b:ee:69:0b:58:a7:12:b8:
00:e3:2f:4d:51:43:36:a7:13:ca:8f:bf:0f:47:7c:
09:ab:82:31:bc:54:e3:38:9e:72:77:10:7b:4b:81:
20:62:2f:b2:7a:22:a2:2b:18:34:85:bd:d4:23:85:
bd:f6:3d:65:a1:61:2a:3f:49:80:bf:1e:66:10:d5:
27:6f:db:8b:ca:64:bb:3d:f3:95:eb:ad:9a:ab:4b:
eb:b4:e4:4b:dd:95:34:9e:a5:fd:db:4b:97:1a:f2:
14:b8:9c:51:4f:fc:5d:0c:6c:38:25:08:d9:c7:1c:
e7:07:5c:c7:3b:ca:46:87:ce:55:52:e2:89:e8:0b:
1a:c1:47:fc:88:c2:11:0d:b2:de:27:52:d1:56:fd:
7a:6a:eb:80:ef:d4:02:09:87:66:df:b0:4f:98:42:
d4:cc:bc:ea:a8:18:3e:7c:ea:10:85:45:ea:70:87:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:82:1E:0B:D9:4E:FD:3F:0D:30:DF:45:66:A2:91:71:CA:96:E2:FF
X509v3 Authority Key Identifier:
keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/WIIeC9lO_T8NMN9FZqKRccqW4v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:f500:2::/48
Signature Algorithm: sha256WithRSAEncryption
49:ec:2c:df:91:26:1e:dd:a3:6a:64:03:bb:af:33:38:11:7a:
ff:8b:4b:8b:9a:3c:f5:ff:c8:7d:7f:e5:2e:4a:9c:00:d0:63:
b2:23:ae:f2:2b:32:a4:9f:f8:91:b1:76:cb:7a:cf:87:a9:cf:
67:3a:49:28:27:fb:dc:94:22:06:fd:d5:4e:25:61:d6:5e:6d:
9d:76:1b:9c:2a:94:f6:e3:5e:aa:a2:cb:2a:41:b9:07:1c:5e:
e5:9c:9b:62:24:2a:82:d1:a2:46:5b:c1:c9:00:59:f4:cf:bf:
02:f8:c1:9b:8d:3c:85:ac:94:ff:e0:e7:54:f0:fc:47:f1:cb:
5f:ed:75:ac:0b:07:7e:c0:cf:cd:0c:19:bb:9a:48:42:61:63:
c1:7d:de:5b:17:5c:86:a5:15:3c:7c:a0:5e:e6:1d:5d:48:09:
1d:1e:ca:ce:b9:0a:4a:54:ce:cf:c8:a1:fe:43:27:9f:fb:42:
a5:fd:46:58:08:cf:b1:90:76:25:52:6e:9c:a6:5b:f3:1e:58:
fc:bf:f7:f4:74:64:c2:99:17:8d:6f:bc:f3:45:35:7e:15:cd:
29:85:ff:c8:13:fc:4f:e6:c5:c5:4d:59:f0:13:e1:8c:b6:b8:
1f:e0:4d:0f:4f:cd:6d:ff:d9:cf:d9:aa:4f:9f:76:43:1b:e4:
66:be:14:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:16 2024 by rpki-client on console-fra.rpki-client.org