Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/JlvFjU2mzwO2l5cXNcIetRAcM4E.roa
File: JlvFjU2mzwO2l5cXNcIetRAcM4E.roa (raw, json)
Hash identifier: oadV2Kmo4QfuxCxW8cmwXS/Wm/qn1TzBdGMufmBXcsM=
Subject key identifier: 26:5B:C5:8D:4D:A6:CF:03:B6:97:97:17:35:C2:1E:B5:10:1C:33:81
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 058AFFF0
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/JlvFjU2mzwO2l5cXNcIetRAcM4E.roa
Signing time: Sat 01 Jan 2022 05:01:23 +0000
ROA not before: Sat 01 Jan 2022 05:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 148971
IP address blocks: 2a0d:2583::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92995568 (0x58afff0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 05:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=265bc58d4da6cf03b697971735c21eb5101c3381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:b3:d1:8e:80:d8:9a:85:de:64:9c:d7:84:
69:22:95:4d:10:bc:39:52:4c:ae:00:6d:47:06:3b:
f5:7b:5b:89:3c:fb:1e:79:1b:5b:39:3b:2b:96:30:
13:74:68:e8:74:ed:af:2c:ec:55:3a:55:71:30:c5:
a0:a2:76:ae:93:95:62:83:0d:9d:f8:ed:f4:f4:98:
46:a5:e3:ec:43:6e:82:88:01:27:7d:be:1e:79:93:
4a:74:a4:18:e5:73:58:5d:d6:82:dd:a1:31:05:8b:
94:b4:7d:6b:79:48:be:de:f5:6c:e5:ec:7d:82:c0:
ba:2f:24:83:35:d1:a6:6d:0d:d8:3d:77:b2:fb:94:
de:24:fa:01:8e:4d:88:1c:39:87:e0:4f:e1:a4:be:
e8:dd:74:ec:a2:97:36:2a:a8:e2:b1:27:07:bc:0b:
c2:69:b7:bf:ad:6c:9b:f8:be:b2:8a:ba:08:c6:ab:
ff:4b:d4:a6:ec:a5:5f:e8:b9:54:b4:ff:69:91:75:
d4:ee:74:9c:25:d4:f0:3c:c5:94:99:10:7a:c4:76:
3d:0c:80:ca:f6:63:f1:5a:00:d7:2e:68:94:ae:58:
8c:d9:62:a1:06:70:55:95:d3:0e:5b:a7:13:b4:0f:
40:78:69:67:99:7c:08:7d:a8:ba:37:a4:5a:ad:7c:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5B:C5:8D:4D:A6:CF:03:B6:97:97:17:35:C2:1E:B5:10:1C:33:81
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/JlvFjU2mzwO2l5cXNcIetRAcM4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2583::/32
Signature Algorithm: sha256WithRSAEncryption
6f:57:54:17:b3:57:bc:60:fc:13:17:a5:fe:a1:bf:c3:bb:62:
08:24:99:0f:9b:9e:4c:a4:b5:4d:6a:c8:b4:0c:17:82:dd:d8:
da:d4:d7:1e:56:83:ba:78:a6:49:60:d5:ef:fd:41:b2:65:37:
f0:fd:ff:7b:e7:23:41:3c:e0:3d:e0:54:3b:d7:2b:73:ed:57:
81:06:96:12:55:d3:4c:5d:ce:6e:00:78:9a:00:80:28:84:b1:
24:21:5c:03:ca:b6:8b:59:c4:81:2a:79:f0:62:84:78:fc:98:
49:b0:9e:8a:db:df:59:a0:74:83:47:e0:ab:d8:28:a6:36:84:
17:d1:ea:94:8c:4a:0d:b3:0e:a0:79:11:a5:b5:9a:e2:db:56:
d5:52:c3:ed:91:0c:96:a4:34:21:c3:04:95:e1:aa:e3:f0:15:
08:4f:1f:93:f2:12:d5:04:c2:80:02:de:35:84:95:51:b0:8a:
b0:07:50:4f:8b:68:b5:6f:47:20:63:8a:cb:9d:f1:3d:d7:de:
15:96:3d:d9:a6:45:cc:b6:86:0b:9a:a6:1f:4c:1e:71:82:1d:
26:e7:bf:bf:bd:c2:e8:04:18:a6:b9:f8:db:17:45:bf:bc:4f:
b1:fc:5e:0c:ba:b9:82:03:79:8b:97:d8:5c:3c:00:c7:2b:c3:
61:76:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org