Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/RQsI6Ua7YkX0J_OKb_8LhD8PHD4.roa
File: RQsI6Ua7YkX0J_OKb_8LhD8PHD4.roa (raw, json)
Hash identifier: 4dMBfxZ4atlNO8ejrrI1s+d9GVPUH6Ak8rujOLGie3M=
Subject key identifier: 45:0B:08:E9:46:BB:62:45:F4:27:F3:8A:6F:FF:0B:84:3F:0F:1C:3E
Certificate issuer: /CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5
Certificate serial: 0183409CB820F1B7C642EE37A79A7C3841EA
Authority key identifier: 58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/RQsI6Ua7YkX0J_OKb_8LhD8PHD4.roa
Signing time: Thu 15 Sep 2022 10:05:56 +0000
ROA not before: Thu 15 Sep 2022 10:05:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 2a07:4b40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:9c:b8:20:f1:b7:c6:42:ee:37:a7:9a:7c:38:41:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5
Validity
Not Before: Sep 15 10:05:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=450b08e946bb6245f427f38a6fff0b843f0f1c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:9f:e6:5a:2b:f6:8e:ee:97:59:7a:c2:49:
ef:de:eb:75:9f:64:11:e6:0b:84:fe:68:d8:b8:1b:
b6:04:93:5c:1f:0a:47:46:5d:24:f9:cb:6c:8a:7f:
d1:46:c7:41:b3:a3:02:01:8c:b6:80:5b:de:49:cc:
40:47:31:ab:b9:41:12:f7:52:74:a6:59:de:8d:da:
87:99:c5:67:67:af:01:8e:6c:23:cc:05:a5:b7:f4:
a9:b4:97:90:91:8e:2a:cb:9a:68:2b:f0:bd:a4:92:
a1:0b:cd:db:e8:82:08:9d:f6:69:5e:51:e8:ef:1a:
18:cf:7a:99:19:4a:17:41:ee:37:d5:01:7a:21:62:
bb:68:ef:78:35:ef:93:4f:23:17:d3:90:c7:8d:a3:
32:db:b1:32:82:dc:3e:d7:61:ba:27:c9:f4:2b:fb:
99:75:e2:d7:b3:89:54:86:a7:79:00:73:b4:f4:57:
3a:09:b4:cd:85:11:3d:8a:b0:ea:a2:b3:49:90:c4:
a8:7e:7b:39:bb:70:c1:5d:5d:73:e4:a4:a3:18:bd:
53:5d:e9:5d:67:9d:8b:89:ad:02:d0:dc:dc:76:c1:
20:8b:6d:c9:47:98:54:c9:ab:db:26:db:a7:54:a7:
8b:f5:bc:a5:84:b9:be:b6:d8:4a:12:1d:f3:d5:89:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0B:08:E9:46:BB:62:45:F4:27:F3:8A:6F:FF:0B:84:3F:0F:1C:3E
X509v3 Authority Key Identifier:
keyid:58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/RQsI6Ua7YkX0J_OKb_8LhD8PHD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
1b:16:ca:dc:53:21:99:ea:bc:e5:69:de:1c:b5:26:b7:cf:68:
81:8a:ff:92:a0:b5:93:6b:e3:be:d8:fa:61:e5:19:8d:42:8e:
6d:d1:a1:6f:af:d2:7d:3f:97:d4:b2:5b:36:e5:11:0e:01:64:
b3:2f:3f:e4:42:40:5a:f2:97:84:96:77:11:c3:57:78:bb:cd:
20:d1:39:32:fe:7f:18:a1:35:34:24:01:27:88:fc:53:aa:88:
54:cd:d0:26:b2:28:b5:32:8f:17:83:4c:f1:7f:40:d3:55:3f:
1b:55:d2:8c:7a:a0:c9:d9:87:ab:97:8f:87:9a:62:27:86:12:
ca:39:48:ad:29:33:63:66:63:43:57:52:05:49:d5:9a:4e:c8:
6e:df:83:46:28:cb:5a:01:48:d0:d3:b8:f2:3a:b7:c1:d6:0b:
2e:01:b4:3a:7e:ae:de:73:95:2c:3f:14:1c:ea:5d:7d:b8:68:
b2:44:ae:85:18:93:2c:33:38:1a:44:4b:7e:a8:4c:d9:4c:06:
30:d3:e7:ee:4a:e2:95:7e:ab:f6:7a:06:f6:42:39:18:be:05:
ee:da:41:40:0b:00:00:a4:90:11:2c:8e:5d:05:41:ab:75:ab:
72:22:92:d5:47:c0:eb:9e:ea:49:d4:f8:27:3e:c7:3c:0d:9c:
7c:1a:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:33 2024 by rpki-client on console-ams.rpki-client.org