Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/PCTDnDuuSLJIE9DUv5BZyipHIg4.roa
File: PCTDnDuuSLJIE9DUv5BZyipHIg4.roa (raw, json)
Hash identifier: yn2PH4WmzSjsTfHv5BUbV0anYL7trWLsDNbVmxSjQug=
Subject key identifier: 3C:24:C3:9C:3B:AE:48:B2:48:13:D0:D4:BF:90:59:CA:2A:47:22:0E
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 05960ACF
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/PCTDnDuuSLJIE9DUv5BZyipHIg4.roa
Signing time: Sat 01 Jan 2022 05:01:31 +0000
ROA not before: Sat 01 Jan 2022 05:01:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211168
IP address blocks: 2a05:1083:d00::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93719247 (0x5960acf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 05:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c24c39c3bae48b24813d0d4bf9059ca2a47220e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:92:6b:8d:d9:e5:0c:0c:79:db:64:32:e9:
47:2b:4a:81:18:7c:2d:f3:31:62:80:fb:3f:e9:4e:
cb:73:00:bc:07:57:43:58:82:f5:08:1c:37:f3:6d:
be:e2:7d:96:d6:56:ce:51:43:9e:c8:c6:37:de:d6:
a4:08:db:20:9e:6a:85:89:21:9d:0a:17:bc:6f:26:
97:29:6d:4e:d9:14:52:70:bf:24:49:32:4e:fb:b3:
bc:25:0e:a6:49:ee:07:2b:ab:08:63:2e:4b:4d:aa:
48:42:68:f7:fb:f2:a8:bf:d6:03:95:1e:23:07:6e:
a8:fc:47:ac:f4:62:8e:64:a0:85:e8:86:3e:52:89:
ed:2d:20:06:62:42:e6:44:5d:09:d0:c7:47:52:37:
d1:7d:cd:5e:5f:61:02:8b:fa:3d:e9:09:d3:21:9e:
79:d2:43:4c:82:11:7c:ee:b4:e0:14:d4:f4:af:e9:
96:8c:22:bf:77:e4:ff:73:e1:c0:ac:80:23:ea:04:
a3:5e:8f:d9:f0:3e:40:66:86:e4:b4:db:54:08:d7:
7e:5d:58:8b:75:9d:79:ac:f2:7d:30:e3:30:79:70:
2f:b4:46:78:4b:46:05:cf:55:87:da:11:39:ba:0d:
65:5e:d4:e9:f1:80:26:11:57:2d:d8:cd:90:c5:09:
c9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:24:C3:9C:3B:AE:48:B2:48:13:D0:D4:BF:90:59:CA:2A:47:22:0E
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/PCTDnDuuSLJIE9DUv5BZyipHIg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1083:d00::/40
Signature Algorithm: sha256WithRSAEncryption
9f:07:8d:02:95:dd:0e:bb:15:a4:d3:9f:e4:87:f2:08:e8:88:
e0:87:cc:ad:76:18:8d:ad:5b:7a:b5:fe:23:59:4b:e3:d4:6a:
85:ec:ad:06:6e:b1:ec:45:33:0c:03:a8:b2:db:da:32:80:cf:
c2:b4:be:f5:37:2b:9b:0a:69:74:be:a0:df:45:a8:cf:0f:45:
5e:99:88:dc:94:c1:32:6e:3a:ba:be:00:8f:7e:09:32:f9:e1:
8f:24:cb:2f:d9:62:42:19:1c:a9:31:d7:f8:65:67:fd:44:22:
26:7f:9d:c5:40:37:7c:09:38:6c:e9:dc:a2:70:8c:28:37:04:
f9:ea:0f:21:70:b1:3f:f0:76:6c:30:ac:d8:a0:29:3b:20:97:
c0:20:4e:72:77:ef:f9:8d:29:fc:df:2c:28:63:c6:9b:e5:4c:
cb:3d:01:9e:a4:65:93:e7:3c:14:a2:a9:05:5e:2b:dd:d8:f6:
a8:ff:18:81:1d:83:7e:83:cc:da:15:a2:79:bb:7c:51:dc:1d:
bc:cc:49:74:10:a3:5c:32:fb:15:d9:eb:72:a8:73:8a:ca:64:
0f:1b:50:65:7d:02:9c:f2:fc:ff:ad:5b:14:62:39:a1:3a:f0:
4e:db:7d:4e:ae:cd:98:69:aa:c7:fe:68:49:c7:a1:f5:b0:ed:
47:e2:6d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org