Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/Z4DtsutBa9Oij5xSMy758LwYI7I.roa
File: Z4DtsutBa9Oij5xSMy758LwYI7I.roa (raw, json)
Hash identifier: AWDi9HIK6nLk7mSnxdch32Llz+Wyr3Gbbc3Trln0Gzo=
Subject key identifier: 67:80:ED:B2:EB:41:6B:D3:A2:8F:9C:52:33:2E:F9:F0:BC:18:23:B2
Certificate issuer: /CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Certificate serial: 01869461
Authority key identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/Z4DtsutBa9Oij5xSMy758LwYI7I.roa
Signing time: Sat 01 Jan 2022 01:59:11 +0000
ROA not before: Sat 01 Jan 2022 01:59:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210490
IP address blocks: 2a11:4e07:f000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25597025 (0x1869461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Validity
Not Before: Jan 1 01:59:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6780edb2eb416bd3a28f9c52332ef9f0bc1823b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:37:36:ca:0d:2b:42:41:03:b7:fa:fc:66:
50:b7:d0:6b:4e:84:41:68:c2:5f:7d:dc:dd:f9:0b:
2d:9b:1f:fa:1e:b9:a3:f2:ee:f0:45:04:d8:b1:91:
0f:2a:25:5f:3f:7e:8c:36:b9:64:b9:c4:93:3e:9c:
80:fe:23:59:b5:90:99:41:e8:ae:ca:37:21:29:9c:
60:e8:bc:23:e1:e3:86:04:bd:c5:49:e5:ae:03:53:
3c:93:5a:25:28:73:6e:0e:2a:e3:de:ba:c2:b0:0f:
24:79:b8:3e:9d:5c:be:4c:3d:18:32:7e:08:43:85:
8d:5a:62:64:1d:22:6b:e0:a7:73:1f:78:ed:15:df:
24:83:15:1a:d8:41:28:cc:7a:2c:1d:60:19:aa:86:
f2:6e:f4:fc:a9:ad:88:ee:bb:ba:02:88:91:98:d7:
e9:9e:37:ee:6a:32:ca:d7:a4:14:19:7a:20:b7:6b:
f4:90:c8:ed:a3:43:11:20:f9:c3:5f:4a:8a:2c:4a:
3f:14:a5:84:8f:07:f5:65:8c:3d:7d:9f:23:38:20:
57:9d:b5:7f:4e:43:10:87:44:f4:8e:5c:36:e1:55:
d8:a8:f3:cf:5e:88:63:9e:92:55:5a:92:e6:3b:3f:
80:3a:2e:88:0d:db:d0:36:fb:db:f4:cc:fc:50:a6:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:80:ED:B2:EB:41:6B:D3:A2:8F:9C:52:33:2E:F9:F0:BC:18:23:B2
X509v3 Authority Key Identifier:
keyid:8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/Z4DtsutBa9Oij5xSMy758LwYI7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4e07:f000::/48
Signature Algorithm: sha256WithRSAEncryption
9c:94:d3:5a:3b:a0:ab:ee:5c:7c:25:8c:67:08:b2:0b:99:a6:
93:b1:53:82:b7:42:51:ff:5b:47:20:7d:14:5d:08:7e:35:bb:
f1:cb:bf:27:0b:1c:a2:ff:48:69:f9:e9:1e:87:8b:53:90:a1:
fc:13:fa:3f:14:60:16:85:9d:7d:e6:79:4e:96:3d:df:bc:3c:
b2:3e:dc:fc:93:3f:f4:88:ac:64:c3:72:13:67:b3:5d:bd:66:
25:4b:27:a3:1d:d7:50:67:a0:8f:f8:18:83:2d:d8:69:26:09:
74:bb:de:16:57:b8:15:fb:04:8c:c5:90:81:66:86:b4:03:7f:
30:53:67:e9:26:c1:79:bb:93:91:f5:64:83:f7:83:8a:a5:11:
e8:3e:ed:bb:cd:77:de:9a:e1:f7:2e:61:9f:89:29:26:80:f6:
0f:fd:9c:e0:1c:ac:a2:7c:79:1b:9d:aa:85:79:07:89:12:d6:
9d:92:ce:a8:82:4d:11:0f:2d:82:c3:40:b4:2a:db:4d:54:be:
91:66:87:6e:4d:bc:05:cf:9f:f4:20:b6:85:93:be:4c:0b:3d:
ff:31:09:a0:5e:41:48:1b:25:ac:0a:d6:eb:28:aa:fb:66:cb:
fe:9d:36:66:44:82:0f:4d:9a:2c:93:08:7f:58:72:54:15:81:
bb:69:89:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:19 2024 by rpki-client on console-fra.rpki-client.org