Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/vEMlH_cYFrfsH0P6OIyf1bClDrc.roa
File: vEMlH_cYFrfsH0P6OIyf1bClDrc.roa (raw, json)
Hash identifier: 7m1q7qnAM6NPdvkjf/KFSNudfr8RKeg/0W6Oa+7hd2s=
Subject key identifier: BC:43:25:1F:F7:18:16:B7:EC:1F:43:FA:38:8C:9F:D5:B0:A5:0E:B7
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 01D8FB42
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/vEMlH_cYFrfsH0P6OIyf1bClDrc.roa
Signing time: Sat 01 Jan 2022 06:02:04 +0000
ROA not before: Sat 01 Jan 2022 06:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 2a07:5dc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30997314 (0x1d8fb42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: Jan 1 06:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc43251ff71816b7ec1f43fa388c9fd5b0a50eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:b6:14:37:5c:bd:11:74:8f:14:01:5c:26:
58:e8:f7:97:2b:85:ce:97:e6:13:84:8a:e7:d3:dd:
3e:87:a7:2c:48:16:58:dc:57:11:a5:6b:66:1a:de:
7b:86:02:39:8c:db:4b:90:dd:43:cb:70:e7:37:18:
c3:d3:2e:7a:d8:6c:72:8a:9a:d0:1e:7f:fd:3a:c6:
4d:d9:fe:eb:fc:dc:69:90:b4:4e:8f:cb:39:17:30:
19:5c:2c:ed:e1:2f:6c:12:88:bb:0e:28:1b:ba:3f:
67:cd:35:dc:75:18:d8:e9:0e:4e:2c:e4:43:b9:22:
7b:42:16:8b:c4:44:ae:a9:24:7e:a7:e4:74:9f:d0:
c6:e4:65:6f:92:a0:26:ab:cc:c9:35:a9:ab:0d:03:
2b:07:55:f8:f6:5f:14:c7:47:ce:9b:ea:d0:a4:2b:
2c:00:29:f1:12:23:54:2a:27:1c:a5:c1:6e:7f:ed:
4c:ac:ff:83:85:af:7d:7b:02:7c:5b:91:7e:a3:7b:
e6:d7:3b:df:6d:b7:41:0f:0a:a0:13:1a:a5:3c:6f:
2f:8b:84:1c:53:61:f9:73:9b:12:d1:b0:18:c2:db:
06:70:60:95:e0:98:87:cd:21:69:9f:f0:22:d3:ae:
79:54:40:53:3c:dc:b9:75:63:01:cf:ec:0e:75:d9:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:43:25:1F:F7:18:16:B7:EC:1F:43:FA:38:8C:9F:D5:B0:A5:0E:B7
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/vEMlH_cYFrfsH0P6OIyf1bClDrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5dc0::/29
Signature Algorithm: sha256WithRSAEncryption
2a:77:97:49:a4:35:d8:e4:0a:f3:95:83:9e:1c:42:82:97:06:
2a:f8:bb:bd:94:2e:77:c2:74:68:dd:36:79:9d:2e:e7:2e:3b:
17:af:84:b3:5b:72:57:7f:55:7f:9e:91:41:e7:2d:16:c0:d5:
ce:26:f5:24:f5:d3:bc:b0:a0:85:58:e8:1a:e1:c6:e1:7a:c9:
cf:d3:f2:1d:aa:ec:4d:c9:ee:13:c0:53:bf:cb:53:d5:f2:a0:
f9:02:c3:ab:c3:d7:bf:f7:1f:65:79:cc:d2:df:7f:29:63:10:
19:2c:93:e6:47:22:70:8b:ff:a3:ec:fd:67:a9:6c:87:2d:c1:
0d:af:2e:42:15:86:e7:14:c0:94:13:34:6a:b4:4a:16:a8:64:
86:80:2b:f0:13:bb:a1:80:d7:5b:51:7b:d7:b7:15:5b:df:2a:
b2:76:d5:23:bb:3e:9d:b2:b4:36:84:77:79:fc:df:1e:3a:10:
3f:33:8f:d7:ac:2e:55:12:eb:5f:21:66:32:07:3d:24:23:38:
b5:2b:50:d8:42:1c:f7:ab:b1:55:b1:50:43:fa:d6:d1:d5:23:
98:2c:97:75:11:cb:ce:02:6b:2c:02:40:cb:aa:4d:81:2a:e1:
c1:47:44:80:4d:3f:17:cd:7f:24:39:f9:c8:31:d2:50:0b:4e:
9e:bf:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:39 2024 by rpki-client on console-fra.rpki-client.org