Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/unwCOgFsiH1kUr-K67IYTSsMnBg.roa
File: unwCOgFsiH1kUr-K67IYTSsMnBg.roa (raw, json)
Hash identifier: TPMAPJzHJ+/j8Xmf3dj4DmyczGfOKmkNTdgnik9ZhbQ=
Subject key identifier: BA:7C:02:3A:01:6C:88:7D:64:52:BF:8A:EB:B2:18:4D:2B:0C:9C:18
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 473D26
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/unwCOgFsiH1kUr-K67IYTSsMnBg.roa
Signing time: Tue 04 Jan 2022 12:23:33 +0000
ROA not before: Tue 04 Jan 2022 12:23:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203764
IP address blocks: 2a06:ee80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4668710 (0x473d26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Jan 4 12:23:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba7c023a016c887d6452bf8aebb2184d2b0c9c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:c7:8e:ba:36:76:98:94:7f:34:6b:a2:71:
fd:f6:1e:bd:8d:af:4b:20:f6:4d:4e:ee:2f:ea:2d:
ff:97:4f:01:36:82:c0:ba:86:30:e3:69:23:ad:20:
11:60:90:aa:7c:7a:8a:cb:03:e1:e7:e5:bb:7d:35:
6b:e2:69:d8:41:6f:47:b6:cc:bd:ad:a6:4b:1b:b6:
b8:7d:9e:ef:23:9c:85:e9:53:fe:24:ee:68:41:ec:
ce:c5:77:67:9b:fe:3e:8e:d0:b9:5b:e7:4d:62:1c:
e5:a9:40:f9:dd:2b:f7:aa:f2:9b:51:0f:55:7e:46:
64:99:2a:dc:33:f4:98:bd:62:57:75:da:29:d8:0b:
79:d5:e8:25:ef:1c:88:a8:ca:19:be:2a:dd:3b:73:
e6:e0:99:92:2e:50:02:aa:65:0c:a4:26:5e:38:94:
65:fa:ba:a0:4c:6a:d6:27:36:73:6b:0f:d3:03:59:
6f:b0:ed:d2:d8:b4:f7:80:2a:ef:28:1c:f8:f2:0a:
49:12:3c:82:aa:7b:1a:80:bb:95:05:fe:bf:52:23:
7a:f4:95:97:27:2f:cf:f2:9d:00:9a:d2:3d:18:8a:
b4:cb:38:6a:d8:4a:ca:8d:1c:30:4c:2d:55:9a:75:
4a:30:87:40:42:b4:61:ee:ba:7c:1a:62:fc:9e:d4:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:02:3A:01:6C:88:7D:64:52:BF:8A:EB:B2:18:4D:2B:0C:9C:18
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/unwCOgFsiH1kUr-K67IYTSsMnBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:ee80::/29
Signature Algorithm: sha256WithRSAEncryption
53:aa:df:59:99:64:8c:48:c7:6b:db:61:ca:ed:cc:a7:e0:33:
bb:33:c6:33:26:24:29:15:c4:4f:79:13:29:54:5e:5f:67:93:
a1:99:e3:a0:9e:f9:b2:71:be:68:16:7b:4d:67:5a:c3:f8:cc:
55:8c:98:85:0f:36:f8:db:39:82:71:26:07:eb:f3:57:16:7d:
43:ad:16:37:29:6c:41:9b:75:ec:2a:68:5e:cf:bc:0a:52:4d:
2b:63:ce:45:a3:e1:5d:d5:a8:42:0a:a2:eb:c5:c2:21:ed:e9:
34:ee:9c:dc:20:8c:9f:f5:47:af:fc:79:80:3c:da:f5:eb:fc:
53:01:55:3d:37:1c:01:71:93:c9:a1:b1:a1:8c:f8:66:6f:94:
5f:7d:ca:b7:da:4a:49:b5:01:25:ae:95:68:dc:e3:2b:84:7d:
1c:6c:6d:1f:8c:45:c6:65:b2:d7:a5:4b:7a:cc:8f:8c:b1:40:
4a:4c:3f:b8:64:1d:38:df:a4:df:a2:3d:ed:7c:61:20:87:56:
e5:96:69:ba:81:72:8b:95:73:b7:d5:9e:a1:08:fc:78:fb:72:
19:44:3c:80:3a:c8:66:9f:58:4b:ee:e7:9a:ad:fc:dc:e5:1e:
f4:ef:85:08:51:bb:d7:38:2e:f8:ed:d7:e2:67:b5:04:3a:da:
ab:47:b7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:27 2024 by rpki-client on console-ams.rpki-client.org