Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/1-xx5m4N2yPHUSDotbJVMfxsb4tY.roa
File: 1-xx5m4N2yPHUSDotbJVMfxsb4tY.roa (raw, json)
Hash identifier: jKu9ZzhLcf9I6BIxEcc/Yb+e/vwXU8fOJxzJnge64Gc=
Subject key identifier: FB:1C:79:9B:83:76:C8:F1:D4:48:3A:2D:6C:95:4C:7F:1B:1B:E2:D6
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 0FCC4AEE
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/1-xx5m4N2yPHUSDotbJVMfxsb4tY.roa
Signing time: Sat 01 Jan 2022 02:56:42 +0000
ROA not before: Sat 01 Jan 2022 02:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41179
IP address blocks: 2a05:a944::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265046766 (0xfcc4aee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Jan 1 02:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb1c799b8376c8f1d4483a2d6c954c7f1b1be2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:d1:a6:df:88:cf:a7:aa:e0:18:e0:8a:37:
ee:6d:5f:f7:9c:14:45:f9:0d:8b:2d:a8:e8:27:ad:
a5:91:65:39:33:2e:a5:aa:4e:f4:af:6b:7b:7e:d0:
7a:74:38:10:de:01:54:fd:de:5b:44:50:06:db:bb:
dc:0d:5c:d7:8f:1a:0e:a4:9f:80:27:8c:78:4f:26:
e7:c4:41:23:31:b8:0b:ff:b5:60:34:df:81:01:34:
1f:48:5b:00:b6:bd:83:2a:dc:c6:68:29:ba:af:58:
ab:3b:25:7d:fc:b3:f0:f7:70:cc:d3:0d:c4:2b:6a:
47:45:72:8b:65:75:8d:f4:c2:1e:74:d2:40:27:24:
76:73:c5:4b:e4:34:3e:0b:2a:74:83:2b:a6:d3:26:
af:d2:0d:54:9a:06:e1:4b:3b:8c:a8:d9:7b:cb:1f:
be:68:5f:c1:a9:f3:8e:0b:98:02:09:cd:03:d4:fa:
cd:1c:8d:a8:4f:a1:77:b4:0d:68:3b:bb:d1:0c:a0:
a8:0a:65:61:d5:fa:55:ce:50:ef:83:77:74:c6:96:
8f:33:02:28:5a:bb:77:6e:66:cc:39:9d:5f:0f:f7:
0c:be:39:d7:c9:6f:ec:8a:0e:15:fb:4a:fb:e0:70:
81:be:f3:8a:89:93:b6:61:e3:b8:16:25:91:30:d0:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1C:79:9B:83:76:C8:F1:D4:48:3A:2D:6C:95:4C:7F:1B:1B:E2:D6
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/1-xx5m4N2yPHUSDotbJVMfxsb4tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:a944::/48
Signature Algorithm: sha256WithRSAEncryption
90:87:49:6b:42:5d:30:22:8a:b9:bb:41:58:78:cd:b2:a1:91:
6a:84:ca:b1:a8:48:99:5c:d0:5b:c3:c6:08:1f:ef:40:4c:03:
d9:ad:34:70:bb:14:38:24:1e:8f:76:04:46:b9:d5:e3:f4:83:
a2:97:36:7c:e1:54:38:64:4c:b1:6b:36:f2:41:0e:79:56:9a:
85:8b:a5:82:19:e2:5d:6b:d9:df:79:2e:11:0b:93:e8:48:36:
74:8d:fa:0f:6e:71:06:ea:60:00:53:ad:12:c5:c7:0b:eb:57:
52:f9:c9:99:a5:b7:35:d6:3b:14:c7:95:2c:29:34:c2:49:5c:
13:9a:ff:25:fb:6c:6a:89:e3:b8:e8:f9:6f:a3:9b:99:98:50:
d2:1e:fd:c2:2e:c3:53:06:57:47:c4:1a:39:d7:a7:be:3f:01:
fd:11:0e:09:8e:6f:74:95:f8:b9:b3:a9:66:6b:f1:d9:23:38:
c2:ce:f3:2f:12:4f:63:40:0b:fd:ed:3b:ad:21:83:e1:9c:89:
b2:58:3a:63:b3:f4:dd:a2:c3:1d:47:da:48:1b:93:33:2e:c8:
78:f0:e0:94:a1:c7:94:c5:f9:2c:b7:fe:d3:4e:78:d5:dc:80:
90:01:ee:11:13:77:27:1a:c4:84:a3:2f:34:12:74:72:2e:90:
ca:1c:08:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:40 2024 by rpki-client on console-ams.rpki-client.org