Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ifLudbUNHqm4Pkx1aYOtItZdUrI.roa
File: ifLudbUNHqm4Pkx1aYOtItZdUrI.roa (raw, json)
Hash identifier: sPDHAahnL8TM4ikywYCeQRdVULragqnHUMC+cCY481E=
Subject key identifier: 89:F2:EE:75:B5:0D:1E:A9:B8:3E:4C:75:69:83:AD:22:D6:5D:52:B2
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018322DB5705F6BB029AFD226D6624A229C5
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ifLudbUNHqm4Pkx1aYOtItZdUrI.roa
Signing time: Fri 09 Sep 2022 15:25:43 +0000
ROA not before: Fri 09 Sep 2022 15:25:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203458
IP address blocks: 2a05:1084::/32 maxlen: 32
2a05:1084:b00b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:db:57:05:f6:bb:02:9a:fd:22:6d:66:24:a2:29:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Sep 9 15:25:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89f2ee75b50d1ea9b83e4c756983ad22d65d52b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:59:88:22:1a:08:0a:2c:62:f1:c1:c2:8d:
c7:2a:ce:d9:56:82:ab:4b:51:d0:0f:a9:08:71:03:
8a:2d:93:6b:53:92:44:86:25:c9:f5:f3:64:00:6f:
59:dc:98:d4:61:1e:ba:00:56:bd:e7:ea:89:1f:56:
4c:be:4a:c1:c2:3b:9e:fd:4d:9d:9e:52:cf:7f:ae:
47:e1:8e:bd:af:b5:3c:77:7e:e9:76:f2:d9:8e:c4:
f1:d1:29:de:8a:ac:e1:d1:e0:83:f5:8e:67:d1:3b:
fb:86:3e:c8:4e:85:d3:2a:0b:4f:07:59:0e:24:96:
f9:29:52:4a:62:93:da:c9:95:9f:dd:ae:ec:cc:5e:
e4:32:8d:fa:e6:e3:2c:65:e0:d1:e9:53:00:5c:83:
32:2c:bb:19:99:0d:0f:16:85:80:b1:7f:80:ab:a0:
56:63:c5:e8:ff:8d:44:90:9c:a6:f3:b6:d0:75:dd:
2c:25:e1:11:8a:9f:56:0a:63:8d:f6:9e:ca:01:2c:
41:4c:0b:ba:d3:3a:20:7f:2c:cd:c0:ed:69:e7:e3:
14:c0:a2:cd:10:61:b5:28:f1:93:50:b4:0a:cc:79:
d2:9f:e3:3f:8a:13:d4:1c:5b:e9:06:6c:fc:4b:3d:
9f:9e:38:6f:1c:d0:38:38:81:33:5b:83:1d:e1:59:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F2:EE:75:B5:0D:1E:A9:B8:3E:4C:75:69:83:AD:22:D6:5D:52:B2
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ifLudbUNHqm4Pkx1aYOtItZdUrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1084::/32
Signature Algorithm: sha256WithRSAEncryption
90:3e:f0:e3:db:d8:a3:42:92:35:6d:3b:13:13:b5:dc:7d:fe:
cc:07:67:8a:5c:53:14:e1:79:05:84:87:a0:76:c9:5d:80:2f:
4f:5b:73:c6:3a:38:66:26:ec:56:97:c0:e5:ae:1d:b6:bf:88:
7a:b0:dc:8a:d6:a4:69:3f:ca:c9:c6:45:31:38:83:53:8d:1f:
bb:99:32:02:a3:e5:39:9a:b1:e0:1b:75:88:e9:0e:39:ed:91:
03:8d:fa:f6:d6:ea:79:63:d7:97:4b:c6:0e:e2:7b:10:1f:da:
5e:5d:a1:d2:6a:6c:42:42:d5:ed:26:47:af:06:fa:2e:5f:87:
6e:c1:ad:60:25:67:43:3d:c0:01:b1:14:3f:59:8f:48:ce:14:
4e:5f:fd:b5:29:76:4d:c2:8e:f1:a0:8e:63:e9:05:59:ec:76:
10:3b:27:8e:af:fc:77:53:76:45:5c:68:40:ea:6e:a6:b1:8b:
54:f8:81:80:62:06:66:8e:ef:06:f6:eb:20:45:15:78:5d:6a:
41:ba:4f:32:fa:83:e8:dd:c5:49:f4:ae:fe:f0:89:12:6d:91:
51:6b:6b:69:60:f0:03:fc:68:62:38:8c:90:5f:37:e3:46:48:
2f:33:ab:8d:0e:72:e1:b4:03:7c:ac:8b:68:fe:7e:ec:f7:0f:
2b:b8:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org