Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/o8uxcO22yjTFWxx-iPMuT3U1xLs.roa
File: o8uxcO22yjTFWxx-iPMuT3U1xLs.roa (raw, json)
Hash identifier: ABBM8c6ZzfhphmaLrC4wqK4AiNwdX0DvVIdoQ6pHa84=
Subject key identifier: A3:CB:B1:70:ED:B6:CA:34:C5:5B:1C:7E:88:F3:2E:4F:75:35:C4:BB
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 018487D5C2FAC3C9C2EA6D3E27F2FD8F07CC
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/o8uxcO22yjTFWxx-iPMuT3U1xLs.roa
Signing time: Thu 17 Nov 2022 23:04:04 +0000
ROA not before: Thu 17 Nov 2022 23:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52042
IP address blocks: 2a0e:ec05::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:87:d5:c2:fa:c3:c9:c2:ea:6d:3e:27:f2:fd:8f:07:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Nov 17 23:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3cbb170edb6ca34c55b1c7e88f32e4f7535c4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:cf:7c:f7:bf:a2:e8:e8:29:21:34:02:67:
10:03:03:1f:70:b5:73:43:50:16:d9:f1:9d:02:b9:
f3:0a:96:7b:6e:8f:39:3c:7d:76:de:73:28:10:8f:
40:df:05:88:1b:8a:0a:12:b9:10:a6:e4:f5:de:84:
6d:7c:54:ec:c5:b1:b4:c6:c9:a5:b5:8d:f7:0d:a1:
27:a5:db:bf:c3:c6:1f:3c:23:1d:98:6e:f4:16:6c:
c4:c5:d3:1f:46:4a:bf:71:67:f8:cf:82:c2:02:fa:
81:ac:a9:80:ed:21:3b:53:a8:fb:03:82:4c:81:c8:
85:5f:15:22:c7:53:ed:8e:9b:34:68:b4:65:fd:28:
5f:2f:ea:a8:4e:bd:21:f7:54:aa:73:42:38:02:3c:
f0:f6:65:53:41:c5:b9:43:58:b9:3d:0e:6f:42:78:
56:8a:14:2f:34:08:cf:93:57:92:c9:75:f3:96:db:
b9:f7:71:e9:03:a1:50:58:00:e1:a4:7c:c9:af:fe:
54:9b:74:29:fe:54:d5:b7:ae:79:80:72:4f:98:7b:
e2:be:70:c4:45:e0:bc:fb:57:3c:c1:3a:3b:0b:06:
7e:98:5f:4f:9f:57:92:22:7f:b4:ec:bd:22:77:cc:
ab:d9:60:1e:b0:ec:73:86:27:35:8d:b4:96:d3:4d:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:B1:70:ED:B6:CA:34:C5:5B:1C:7E:88:F3:2E:4F:75:35:C4:BB
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/o8uxcO22yjTFWxx-iPMuT3U1xLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:ec05::/32
Signature Algorithm: sha256WithRSAEncryption
b8:c5:0b:89:2c:ff:fd:9a:94:8d:74:bc:af:c8:55:e0:21:7a:
db:f6:ae:f6:77:15:da:97:ad:b6:30:8b:41:fb:5c:44:ec:e2:
4f:c4:60:f4:79:a8:28:bc:af:6b:05:5e:9d:e0:99:0b:ac:0c:
8d:1a:63:7e:35:7b:f4:eb:93:b2:14:3d:33:b7:15:2a:e8:5e:
1d:2a:b2:40:63:cd:92:d2:0f:98:bb:b9:8b:f8:e0:61:b2:07:
3e:7f:cd:d7:3e:81:f4:60:ab:f6:a6:1d:f8:78:16:25:d2:e0:
e2:ac:9b:6e:39:2a:df:8f:1f:1c:fd:9e:10:22:8b:62:4b:60:
87:ba:7f:9e:d0:15:1c:e4:6e:6e:d5:8a:cb:54:ac:fd:c7:69:
30:73:33:2b:f9:48:8c:6f:2c:d5:72:48:a1:32:93:4a:a8:63:
22:bb:a8:9b:ff:81:73:7d:68:6f:f0:e1:e0:77:f8:bd:af:cc:
e9:64:d7:ff:cb:2c:85:39:1f:b2:fe:da:9e:de:b8:34:5b:5f:
df:9c:19:f0:10:58:50:51:f9:75:0b:ab:02:63:b8:0e:1e:76:
c5:43:74:af:cd:12:96:e2:e4:39:54:34:19:50:94:db:79:bd:
a2:52:7e:70:96:fd:6d:22:fb:5d:06:71:6a:a2:87:0e:cf:9b:
e8:77:e5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:50 2024 by rpki-client on console-fra.rpki-client.org