Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/jvkHeod0w73EZ9AFWZICRNtGKrA.roa
File: jvkHeod0w73EZ9AFWZICRNtGKrA.roa (raw, json)
Hash identifier: AAVUQGe9FQ2wC7PJWyz+qtA4ax0areO53FzKB8w/b9w=
Subject key identifier: 8E:F9:07:7A:87:74:C3:BD:C4:67:D0:05:59:92:02:44:DB:46:2A:B0
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 01849B3E84BAE23733A7B79E7E88BA451019
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/jvkHeod0w73EZ9AFWZICRNtGKrA.roa
Signing time: Mon 21 Nov 2022 17:31:16 +0000
ROA not before: Mon 21 Nov 2022 17:31:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201319
IP address blocks: 2a07:2902:6f00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:3e:84:ba:e2:37:33:a7:b7:9e:7e:88:ba:45:10:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Nov 21 17:31:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ef9077a8774c3bdc467d00559920244db462ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:97:73:03:20:02:2e:91:99:28:4c:a4:10:
48:ae:bc:ec:8c:e4:7b:7a:31:52:f9:0d:3e:f9:ae:
e2:f4:47:15:7f:0e:6e:f2:1b:d7:b7:be:7d:ae:94:
fc:7d:52:a5:34:fd:ac:16:8f:c0:1b:10:4c:b2:7c:
0e:7f:ec:47:10:3f:65:fb:9f:56:e5:e9:0a:35:cc:
eb:d4:23:ec:fc:ff:f6:79:ec:44:f2:50:92:ff:e6:
10:dc:8f:a3:d7:2f:fb:e2:c6:68:75:bb:f8:30:dc:
80:93:a1:d9:ed:fe:f8:01:2c:3d:40:33:c7:d4:4c:
90:fe:6b:e1:22:2f:42:b8:d4:73:3a:fb:fa:97:d0:
63:3c:1d:24:ba:72:f7:b1:6a:73:ee:3c:04:d1:c2:
11:0f:c0:a8:e2:26:95:54:b6:7c:4a:35:b3:70:1d:
fd:20:36:ce:59:c4:6e:9d:a4:21:01:c7:31:e9:79:
78:72:30:03:48:40:a9:ca:19:4a:9a:f6:b4:51:e9:
5a:b3:ce:65:5b:48:74:5a:31:89:64:2c:cf:00:22:
21:e8:2b:a9:bb:d3:63:5e:aa:12:2d:d5:43:df:db:
d3:15:ab:7a:d4:bc:2a:e8:55:1c:61:8e:a6:95:7b:
77:cc:a0:23:28:cc:aa:fa:8f:39:aa:c4:c9:cb:03:
29:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:07:7A:87:74:C3:BD:C4:67:D0:05:59:92:02:44:DB:46:2A:B0
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/jvkHeod0w73EZ9AFWZICRNtGKrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2902:6f00::/40
Signature Algorithm: sha256WithRSAEncryption
7e:84:f9:94:87:22:95:9c:d8:e8:cf:d3:92:08:07:db:9e:b1:
e6:73:d6:b4:ab:d8:b6:0d:16:7c:08:13:43:3e:41:e2:14:f9:
9b:4f:0e:f3:96:19:e0:a7:e2:6d:ac:cc:04:a5:81:d1:34:28:
22:79:5a:44:f1:88:bb:46:2a:07:84:84:8f:d5:e1:2f:fc:a2:
37:06:39:fe:21:ff:22:00:96:f5:cd:d9:65:0a:dd:73:b4:ae:
e8:72:17:db:11:19:f3:3b:2e:5a:34:43:7b:2e:9c:b6:42:cd:
4a:f3:a3:eb:3d:34:a2:29:b1:b5:b8:57:6a:9c:fa:ec:56:01:
0a:1c:0d:94:08:1f:fb:84:7e:33:65:a6:a1:1a:33:a1:e9:fa:
ad:3b:78:81:40:ef:97:fe:28:5e:be:9f:e6:58:90:18:84:09:
8c:7f:ad:fb:a6:34:44:3d:04:dc:2b:d1:38:dc:bb:d3:db:93:
ba:a7:c9:10:b6:b3:b1:d2:d1:7a:cf:b8:d9:cf:d9:36:2e:aa:
c3:ad:9c:88:1e:f9:be:99:b8:80:a6:56:23:d7:55:e5:ea:1e:
f6:4d:25:80:fa:9d:35:87:ce:7b:a5:1c:a9:5b:87:96:18:c2:
e8:5f:d0:e0:bc:1b:97:f8:17:4b:b4:81:14:85:27:86:83:d2:
84:af:44:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:16 2024 by rpki-client on console-fra.rpki-client.org