Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/vnTbvUeaXFgkAaWdHeI3feBcGis.roa
File: vnTbvUeaXFgkAaWdHeI3feBcGis.roa (raw, json)
Hash identifier: 5YiOCe8SxUIJiY4DZMagS80a9hS8J3DLf7wN3mlNmJw=
Subject key identifier: BE:74:DB:BD:47:9A:5C:58:24:01:A5:9D:1D:E2:37:7D:E0:5C:1A:2B
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 05AE5CFC
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/vnTbvUeaXFgkAaWdHeI3feBcGis.roa
Signing time: Sun 09 Jan 2022 22:24:09 +0000
ROA not before: Sun 09 Jan 2022 22:24:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38136
IP address blocks: 2a0c:e644::/30 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95313148 (0x5ae5cfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 9 22:24:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be74dbbd479a5c582401a59d1de2377de05c1a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:d8:4e:8e:72:c7:8e:39:ca:77:be:41:fa:
9f:b2:46:56:9e:16:2d:62:fa:66:81:b7:66:77:b3:
82:99:28:7f:24:6f:9e:58:54:fb:05:82:51:28:22:
05:a4:5a:1f:aa:32:0a:94:ac:84:a5:13:90:0e:6c:
b4:24:fe:87:d8:cd:9f:d4:02:69:6b:10:b5:c8:20:
d7:95:6b:0a:9e:00:66:9e:0f:72:60:eb:2e:25:03:
ef:10:a4:71:1e:ee:06:24:52:02:6d:20:b8:e6:c5:
88:5d:f7:22:17:1d:6a:b3:33:3a:20:2a:d7:a0:6b:
9a:c3:3d:c8:5d:96:d9:a5:04:ac:d1:0c:11:a0:a7:
a2:c7:a5:43:47:05:cd:64:70:75:21:2a:68:2a:f1:
3e:28:d6:de:94:4e:93:9f:1a:28:25:c3:4e:7b:97:
8c:f4:16:8a:ba:28:a5:c9:29:09:e1:bd:d1:cb:1d:
d2:a3:e1:5a:b6:f4:35:94:46:15:ad:44:38:63:bd:
21:d3:a0:4e:5e:a3:c7:67:c7:30:7a:e0:c1:7b:3b:
94:d9:a8:af:05:0d:e8:ab:0f:0c:af:d0:ad:0c:19:
b0:6a:bf:ee:0f:da:c3:d0:9f:25:50:32:07:3f:a5:
a1:33:25:e5:26:be:2d:4b:7a:e5:2f:b9:a6:f7:f3:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:74:DB:BD:47:9A:5C:58:24:01:A5:9D:1D:E2:37:7D:E0:5C:1A:2B
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/vnTbvUeaXFgkAaWdHeI3feBcGis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e644::/30
Signature Algorithm: sha256WithRSAEncryption
1a:d8:76:6d:b0:84:00:44:38:95:cc:e3:82:22:35:6f:e3:a3:
8f:90:52:ff:f0:6e:ea:8c:f0:7b:7a:02:6e:3d:f6:4a:2e:5f:
52:21:41:57:ca:8d:17:b0:70:93:3a:ac:d3:52:e6:8b:5b:fd:
c5:63:54:59:5c:16:9b:08:f7:f1:8e:2a:9a:91:30:42:9b:97:
3e:93:6e:8f:73:0e:39:21:12:99:52:25:15:65:5f:40:ca:45:
ce:f0:6d:55:a5:20:97:e6:bf:c0:70:2c:19:94:e6:1e:aa:b5:
71:06:ae:65:20:5f:7b:b8:96:6f:5d:30:7d:cd:18:f7:38:b6:
ef:91:1d:10:58:c8:38:11:5a:12:7c:65:f4:66:0c:a5:32:09:
04:64:c3:2a:7c:56:80:95:25:7a:e3:cf:62:e0:09:21:bd:2c:
19:ed:b4:95:4a:04:1b:de:6f:de:33:82:46:5d:83:b0:da:af:
ba:28:bb:70:44:23:01:8d:79:e8:ca:fc:c7:ad:d0:c9:c6:1a:
fa:dd:4a:79:2b:9e:5d:c4:61:9a:cf:8d:81:e1:bf:6b:22:df:
a8:a7:a1:fd:c2:9d:13:3a:cc:a1:f6:75:ce:fc:57:a3:96:13:
f4:48:fb:43:64:00:47:99:8c:ce:d5:76:be:3f:43:c1:f0:df:
86:15:fc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org