Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/2p4XaPRmgdTeg_OKvVrsvncbu4U.roa
File: 2p4XaPRmgdTeg_OKvVrsvncbu4U.roa (raw, json)
Hash identifier: hc+G9hKkA/ewQa5tuUP+od+RVHNCoYfS77gCwbfEEO8=
Subject key identifier: DA:9E:17:68:F4:66:81:D4:DE:83:F3:8A:BD:5A:EC:BE:77:1B:BB:85
Certificate issuer: /CN=6615e50f43013c356da097e34d465f2abc494e9d
Certificate serial: 0ECBF799
Authority key identifier: 66:15:E5:0F:43:01:3C:35:6D:A0:97:E3:4D:46:5F:2A:BC:49:4E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhXlD0MBPDVtoJfjTUZfKrxJTp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/2p4XaPRmgdTeg_OKvVrsvncbu4U.roa
Signing time: Sat 01 Jan 2022 08:58:08 +0000
ROA not before: Sat 01 Jan 2022 08:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43451
IP address blocks: 2001:67c:2b5c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248248217 (0xecbf799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6615e50f43013c356da097e34d465f2abc494e9d
Validity
Not Before: Jan 1 08:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da9e1768f46681d4de83f38abd5aecbe771bbb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:ed:ef:67:3d:9f:ed:ac:22:31:8c:81:af:
9b:24:0f:1f:0c:b5:f3:c9:d3:41:d7:2d:6a:20:21:
92:27:77:ae:64:59:68:dc:36:b0:b8:92:b4:46:e4:
5c:6f:43:fa:ff:c7:3f:9e:d9:b7:38:ac:e1:85:6d:
24:35:65:ce:ba:50:c2:b9:b7:ce:1b:f6:b1:17:2a:
ab:51:01:6a:1d:00:ba:a4:1b:6e:23:b5:4f:81:68:
b4:47:ae:a5:ba:58:a8:1e:d3:20:38:2f:34:f9:27:
a2:7d:49:b0:79:8c:1d:63:d7:4b:92:d1:6c:1a:48:
34:44:88:71:5f:d5:24:98:b7:90:79:05:fc:37:ef:
0d:6f:3c:88:4d:79:4a:25:b9:28:77:c7:b0:08:d7:
19:29:68:c6:e3:6f:ac:d9:bd:ae:66:7a:75:fb:70:
88:5f:ec:fe:25:35:02:38:74:f9:e2:84:d4:8a:9b:
27:11:08:4d:e7:aa:41:83:87:77:cf:e5:c1:81:c7:
9f:23:c2:a8:e1:7d:19:4c:78:64:68:4f:9d:8e:9a:
b3:3e:d8:0b:9e:e9:17:07:aa:42:4e:06:a9:bc:54:
55:da:4c:dd:88:18:cc:06:01:2c:cd:7a:fe:c9:89:
b6:87:e6:c5:87:73:79:0b:5e:82:9c:f6:66:af:9f:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9E:17:68:F4:66:81:D4:DE:83:F3:8A:BD:5A:EC:BE:77:1B:BB:85
X509v3 Authority Key Identifier:
keyid:66:15:E5:0F:43:01:3C:35:6D:A0:97:E3:4D:46:5F:2A:BC:49:4E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhXlD0MBPDVtoJfjTUZfKrxJTp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/2p4XaPRmgdTeg_OKvVrsvncbu4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/ZhXlD0MBPDVtoJfjTUZfKrxJTp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2b5c::/48
Signature Algorithm: sha256WithRSAEncryption
04:6d:fb:18:53:70:5a:6d:e5:57:e6:c4:f5:0c:1a:ad:3a:ff:
7a:a7:2e:53:d8:68:8c:f1:71:28:5e:ca:5b:4e:91:e0:e9:8c:
76:3a:df:e5:68:74:17:33:7d:3c:0c:43:0a:1a:87:4a:22:b3:
d0:59:74:3c:6d:03:bb:14:10:6a:1b:cd:bd:e5:aa:af:60:a1:
98:88:61:6a:5d:97:1e:e1:8e:31:6c:dd:22:80:58:52:a5:64:
b9:15:88:18:02:b0:27:67:51:94:c2:87:30:bf:44:4b:7f:fe:
b8:50:c8:af:27:36:12:12:9d:c0:ae:1a:bb:39:08:79:23:3e:
85:8f:c6:de:bd:32:09:55:12:e8:32:6e:be:a6:b8:5e:a7:72:
ee:88:46:88:7c:cc:e7:ff:e9:ea:ec:da:f9:62:7d:ba:59:46:
7e:34:6a:c0:49:4f:6e:72:7c:43:b1:a2:03:04:03:b2:3a:fa:
23:cd:7f:60:14:47:c6:87:70:52:ce:1e:55:56:5d:54:c6:5c:
6a:1b:38:71:11:a9:89:64:c8:7f:b9:96:fe:b3:27:e8:fe:72:
0f:50:e8:7b:4c:1b:b5:0c:f1:4c:6a:30:22:21:0d:5a:ff:2f:
c8:ff:92:15:83:ed:83:50:09:87:6c:f1:51:32:07:35:48:f2:
b4:88:40:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:27 2024 by rpki-client on console-ams.rpki-client.org