Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/m_yZvz8xUgBpOF4_h4t7W0l5x6w.roa
File: m_yZvz8xUgBpOF4_h4t7W0l5x6w.roa (raw, json)
Hash identifier: gaLzE9JSk99MsRW0HDlYWxnQauJD4Lrt8RLzAG3xIvw=
Subject key identifier: 9B:FC:99:BF:3F:31:52:00:69:38:5E:3F:87:8B:7B:5B:49:79:C7:AC
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 06D593A5
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/m_yZvz8xUgBpOF4_h4t7W0l5x6w.roa
Signing time: Fri 13 May 2022 10:43:40 +0000
ROA not before: Fri 13 May 2022 10:43:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 2a05:1087::/32 maxlen: 48
2a0d:2585::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114660261 (0x6d593a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: May 13 10:43:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bfc99bf3f31520069385e3f878b7b5b4979c7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:4d:01:cb:d7:8a:46:73:5c:56:be:30:ff:
94:b1:83:26:b1:73:1d:c5:cf:d9:80:ce:59:43:18:
6a:5e:18:c0:57:66:df:57:1e:e2:08:cd:c3:b7:7d:
01:b6:a6:09:0f:e2:4e:5b:0e:5d:2b:c9:23:16:e3:
f4:e9:d3:4e:f3:75:dc:01:92:62:0a:57:c9:56:b3:
ac:85:12:20:e0:d7:aa:a5:5d:88:30:70:50:ef:d5:
3b:8a:16:4e:38:26:14:22:b5:c5:9c:6f:4a:98:e8:
fb:f8:38:23:29:d3:5f:d2:63:09:74:84:ea:8d:26:
1f:2f:a9:96:d0:0f:74:5d:48:51:ee:60:21:82:61:
0b:85:56:e5:f4:61:68:a0:70:79:cb:56:77:2b:b8:
e3:f9:32:1e:13:42:b0:46:56:b0:fb:ca:eb:03:a0:
f5:17:d2:97:6b:09:90:51:6d:d6:37:9f:a1:1c:18:
80:f7:05:0c:fe:c9:93:b9:6a:c1:61:08:16:80:23:
1c:c8:e1:3a:04:5f:02:d7:3c:20:63:d2:ed:99:e1:
29:6b:99:bf:27:31:0e:f9:df:73:76:7d:8f:66:87:
4f:be:8b:bc:dc:2a:44:89:3d:cd:85:a0:9c:71:92:
f8:5a:0f:52:93:67:59:f9:24:04:6a:6a:0a:41:7f:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FC:99:BF:3F:31:52:00:69:38:5E:3F:87:8B:7B:5B:49:79:C7:AC
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/m_yZvz8xUgBpOF4_h4t7W0l5x6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1087::/32
2a0d:2585::/32
Signature Algorithm: sha256WithRSAEncryption
3d:15:74:db:9f:f6:0d:d4:0e:e8:59:83:93:ae:c7:fd:23:0a:
3a:96:b4:f6:eb:0e:4b:9b:f1:ab:79:15:ea:e2:71:00:48:ae:
fb:51:0c:65:04:ba:3c:79:a5:2b:45:4a:60:f8:2f:12:3f:09:
c4:7a:25:ef:b2:2c:0d:96:38:0c:ca:79:98:26:fd:8b:df:29:
63:69:b5:01:9b:22:91:4b:b6:06:6c:15:6c:6e:a9:3b:45:89:
61:71:be:38:1d:97:5b:02:4d:21:5b:08:c4:df:6d:3c:af:de:
75:ea:51:f8:6d:b3:8f:a8:a5:0e:1d:f4:d3:9b:0d:ec:9a:40:
fa:92:a9:2d:57:25:34:7a:8a:43:83:83:2f:07:b9:9b:ca:b6:
d4:b7:d5:68:2a:0f:b6:63:f9:27:e7:f2:65:fd:d5:0b:c9:ae:
12:be:12:27:fb:cc:6f:24:ca:40:bf:f2:eb:36:cb:bb:36:f2:
d7:6f:49:78:c0:36:14:43:80:f9:31:db:dc:ee:c5:21:00:38:
b2:d4:b9:be:96:85:67:11:ca:90:57:48:93:2e:4c:e4:4f:4e:
9e:ec:40:99:d5:81:0e:11:e9:ca:fc:4a:27:6e:40:24:44:26:
a8:34:a7:94:88:a9:f1:fa:5a:61:7c:00:f0:66:1d:6f:cb:3e:
28:ce:1a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org