Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/w3agLxHX8IIuSxPGcBt8k6Z1F-Y.roa
File: w3agLxHX8IIuSxPGcBt8k6Z1F-Y.roa (raw, json)
Hash identifier: a40vEZjthk+FVDT9QVGVRJX0epnYkXLJGAgAH6JEbp4=
Subject key identifier: C3:76:A0:2F:11:D7:F0:82:2E:4B:13:C6:70:1B:7C:93:A6:75:17:E6
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 059BACE3
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/w3agLxHX8IIuSxPGcBt8k6Z1F-Y.roa
Signing time: Sat 01 Jan 2022 05:01:34 +0000
ROA not before: Sat 01 Jan 2022 05:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213316
IP address blocks: 2a0c:e643:8000::/33 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94088419 (0x59bace3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 05:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c376a02f11d7f0822e4b13c6701b7c93a67517e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:68:82:84:c7:a4:92:6c:6f:f3:9b:29:85:
35:aa:00:9d:87:43:50:16:93:e6:e5:4d:ce:3f:c4:
e4:f5:ec:83:31:69:13:18:5b:63:55:5a:a8:d6:18:
4a:fc:d2:3b:5c:74:dc:f0:b1:b2:bd:72:eb:f0:dc:
c0:0c:91:6f:6c:6f:e1:c0:7d:1f:3c:e2:40:af:0e:
ed:aa:6b:51:75:60:fb:6e:8c:77:45:ae:13:5e:45:
a2:50:0c:e9:0b:d2:23:76:a6:56:4e:ad:11:d0:3b:
c9:d9:c8:f3:3f:c9:78:96:ad:ed:29:a2:ce:8b:08:
7c:e7:8a:8a:8c:1c:12:6e:fa:88:28:c1:13:49:5c:
f2:f1:ca:47:ac:c0:87:a8:96:ae:5a:12:23:15:d9:
7e:49:67:b9:8d:35:a0:ae:6e:28:9d:e5:fb:c1:8a:
98:c3:70:bf:0c:a0:ac:78:22:cc:62:79:d2:3d:28:
8f:c1:3c:34:7a:f3:4d:e1:f2:bb:40:2f:c4:3f:c4:
92:9a:89:5b:77:8a:69:14:8a:ff:6c:06:a7:f6:d4:
a5:65:f2:48:ce:e4:d1:ce:2b:2f:50:13:67:f4:3a:
f6:a7:8c:34:5e:25:9f:77:97:2f:4c:2c:9e:45:27:
ff:a7:89:34:f8:c5:bf:f5:9a:d4:80:ea:5c:fe:f7:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:76:A0:2F:11:D7:F0:82:2E:4B:13:C6:70:1B:7C:93:A6:75:17:E6
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/w3agLxHX8IIuSxPGcBt8k6Z1F-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e643:8000::/33
Signature Algorithm: sha256WithRSAEncryption
7b:23:ac:81:36:1b:56:6c:82:66:5b:0a:c5:ce:1e:08:97:7f:
2d:c3:60:8c:c1:c8:28:eb:83:a4:3b:8b:e4:c0:d3:a9:d4:c2:
02:d6:29:66:8e:b3:ed:89:a2:26:5d:d9:27:63:7d:87:75:77:
5d:8e:b5:25:27:a8:28:44:c9:1a:5b:69:8f:ef:f0:66:3c:a9:
28:6d:49:84:62:01:41:40:2d:8b:84:6c:f5:6b:8c:72:15:9e:
14:47:b4:e6:5c:fb:71:dd:08:ce:e1:2c:a5:ae:dc:b4:5c:4d:
8a:2d:e3:b4:8b:0e:0f:1b:21:e5:95:12:a2:c9:1a:f2:2d:8c:
a8:b8:3e:29:76:9f:ef:81:0e:55:ed:cc:26:89:d4:c5:b8:c7:
60:11:5b:e2:ca:62:ec:e5:72:2f:db:43:ce:86:b6:a4:d9:2d:
63:70:5d:da:a4:2e:25:10:31:31:c3:45:3b:dc:80:05:af:cb:
6f:c7:b7:5b:b9:57:d0:ee:e7:ee:ec:36:c3:86:de:42:bc:17:
c6:19:5c:ed:6a:43:ed:c9:bf:de:66:01:16:28:b2:c7:ed:7e:
43:75:ed:01:57:b0:f3:9e:bb:9d:75:97:cd:ce:c1:ba:fb:24:
60:0b:ba:71:f0:06:44:78:97:b7:13:94:71:50:e5:44:8f:bc:
f2:d5:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org