Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/OakYE70Qa8DZYgCCx4ikxhu3Ye4.roa
File: OakYE70Qa8DZYgCCx4ikxhu3Ye4.roa (raw, json)
Hash identifier: Z63iiHGBONuNfLUnDgqClpNas8VkMNT6ke1JF8v6RUk=
Subject key identifier: 39:A9:18:13:BD:10:6B:C0:D9:62:00:82:C7:88:A4:C6:1B:B7:61:EE
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0183F428B53B1FD0B0782440DF913BC97B7F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/OakYE70Qa8DZYgCCx4ikxhu3Ye4.roa
Signing time: Thu 20 Oct 2022 06:50:51 +0000
ROA not before: Thu 20 Oct 2022 06:50:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39831
IP address blocks: 2a05:4380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:28:b5:3b:1f:d0:b0:78:24:40:df:91:3b:c9:7b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 20 06:50:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39a91813bd106bc0d9620082c788a4c61bb761ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6c:7d:b4:d0:60:2c:e9:b1:0f:43:89:15:26:
ae:2f:0c:5a:7d:b9:2b:a6:4a:06:e1:bf:d5:41:37:
8b:c4:c1:37:1a:e1:39:3c:09:9c:b8:51:1b:cb:a2:
88:14:a4:f6:7d:9c:a0:13:02:7f:55:da:00:4c:2d:
c2:b4:54:c2:81:d2:a5:03:9a:83:c1:34:01:c1:9e:
e9:ee:69:0b:5f:12:ae:6d:9d:85:dc:65:39:e8:5b:
5e:3c:d9:ab:3a:69:c7:b1:15:a8:7b:2e:51:aa:15:
29:8a:11:df:82:03:e6:6a:2c:f2:04:71:8f:d4:54:
1f:ed:1d:98:26:51:1a:43:eb:da:26:3c:fa:25:51:
c8:21:a4:af:0c:1f:bc:3a:dd:5c:3a:6a:86:b8:48:
7b:f6:89:55:0b:54:62:3b:b4:59:cf:12:46:3e:1c:
af:77:7f:32:18:8b:8e:4e:02:7e:55:a3:f3:e7:48:
a0:ad:4f:6f:96:7a:43:69:7c:46:48:9c:d7:c7:82:
72:a1:75:c6:ba:2c:0d:7c:fc:32:c8:10:df:a3:e1:
c9:99:e5:5c:85:fe:50:9c:52:57:f7:a2:c6:c7:e6:
03:77:f4:5b:cd:c3:b8:62:a5:f9:dc:95:8e:78:cd:
9d:d2:7d:df:49:82:4e:b1:26:d2:f8:b4:a4:93:2b:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A9:18:13:BD:10:6B:C0:D9:62:00:82:C7:88:A4:C6:1B:B7:61:EE
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/OakYE70Qa8DZYgCCx4ikxhu3Ye4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4380::/32
Signature Algorithm: sha256WithRSAEncryption
74:5e:bf:f2:66:4e:b8:96:5f:8e:f3:a5:bf:ad:9f:51:7f:83:
9f:ce:8e:d9:ba:2c:7a:78:8d:4f:8e:b8:75:7c:39:21:be:a0:
ff:3b:89:8a:bc:8b:0a:73:8d:e9:2b:ba:c2:62:74:4f:ca:ce:
3f:7e:02:98:97:42:cb:0d:34:56:0b:23:23:9e:d8:00:12:97:
e2:cc:82:2f:e0:7a:94:fb:98:ab:fe:3b:f6:e1:3f:9f:73:e5:
82:e0:b9:32:8f:a8:a7:93:9a:c8:d9:38:06:1a:2d:08:0d:07:
e9:cb:c8:31:35:ac:b9:4e:0f:da:01:db:b2:e4:e6:bc:bd:34:
da:49:6c:1d:db:5c:20:a5:d4:06:c6:83:4c:cb:5a:cb:24:32:
0f:d8:71:27:af:23:1c:52:af:13:60:f5:3a:20:6c:99:df:6f:
54:7a:ce:5b:67:f1:99:cc:2f:9c:d8:1f:a3:56:52:68:be:e7:
8f:3a:0e:2b:53:cf:31:c9:04:90:2d:62:39:0d:4e:4d:2c:15:
d6:93:fc:e3:bd:c8:27:d3:8e:95:c2:f9:41:01:b4:50:9e:61:
17:0f:08:a4:7b:8a:ae:45:5b:18:94:fc:cf:7d:3c:ec:1e:b2:
f7:de:fa:4e:51:ff:ee:e0:50:eb:71:c3:ca:84:2e:8f:f3:57:
f6:7d:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:35 2024 by rpki-client on console-ams.rpki-client.org