Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/rBLXsE1nG0dqu_ztpxFZBHYz_jM.roa
File: rBLXsE1nG0dqu_ztpxFZBHYz_jM.roa (raw, json)
Hash identifier: mY9F/8KRNDdrtOrLPx21oE/CsouWAWM5ZOit+S46Td4=
Subject key identifier: AC:12:D7:B0:4D:67:1B:47:6A:BB:FC:ED:A7:11:59:04:76:33:FE:33
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 0182692CD96C512DEA21E34EB2646C674B6A
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/rBLXsE1nG0dqu_ztpxFZBHYz_jM.roa
Signing time: Thu 04 Aug 2022 14:05:23 +0000
ROA not before: Thu 04 Aug 2022 14:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54203
IP address blocks: 2a03:efc0:1900::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:69:2c:d9:6c:51:2d:ea:21:e3:4e:b2:64:6c:67:4b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Aug 4 14:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac12d7b04d671b476abbfceda71159047633fe33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:44:4c:5e:8e:a8:f5:e7:d5:71:38:b0:45:70:
8e:dd:de:07:ef:59:56:77:32:ab:3e:1e:2e:ea:ac:
90:8f:bc:9f:24:92:fe:4a:e0:ae:c7:14:49:66:23:
b7:4b:f4:d3:f2:8d:50:60:61:19:c6:36:0b:d2:c7:
8a:46:5d:30:bd:83:af:c7:b0:26:87:d3:34:c7:22:
52:08:ef:89:a3:a2:ec:1c:69:a7:4a:42:c9:12:1e:
76:1c:01:3d:82:5f:d3:c3:b3:0f:6c:2c:7c:ec:80:
a2:d8:60:3b:9e:6f:56:88:ab:e5:59:f3:8c:dd:16:
f7:07:ae:a6:80:89:d1:0d:d8:3e:58:91:e0:08:db:
8d:2d:7e:03:a8:7d:3c:6f:7a:ea:69:a8:a9:75:58:
f4:39:22:f2:0c:27:ea:ae:fd:9b:62:01:93:48:34:
cf:2f:b5:7a:20:3e:8c:dd:1b:f0:26:c1:63:58:c4:
98:b6:f6:da:48:56:b3:e1:80:19:85:63:a6:05:f7:
8b:83:8c:1c:90:ea:68:1d:bc:49:ea:7f:ad:51:0d:
2d:0a:2d:f0:51:87:b5:63:a9:a7:69:10:6a:ee:a3:
57:d9:02:32:85:92:57:5a:8e:bb:ab:d2:3b:93:86:
fa:df:ea:1e:e2:0b:b0:38:31:fc:08:47:c0:46:21:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:12:D7:B0:4D:67:1B:47:6A:BB:FC:ED:A7:11:59:04:76:33:FE:33
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/rBLXsE1nG0dqu_ztpxFZBHYz_jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:efc0:1900::/40
Signature Algorithm: sha256WithRSAEncryption
57:8f:fc:da:b1:99:2e:e9:a0:74:a2:c5:4f:23:f8:8c:68:88:
5b:38:1c:c5:8a:2d:cd:0c:c0:48:a0:eb:7e:fe:9c:8b:44:75:
49:3b:a8:b2:1a:1e:b2:cc:05:a6:37:a3:4f:66:9e:08:4f:2e:
ee:a9:8e:e1:22:5e:e4:5b:ab:96:b3:de:3c:52:85:52:64:cd:
63:e8:53:58:91:7c:52:28:b1:40:4d:a0:be:2e:96:08:dd:9b:
a5:1f:e2:5c:a4:50:31:6e:5a:1f:16:83:64:6c:74:16:42:c6:
fc:a7:31:6b:53:21:03:26:05:10:0a:a4:ed:f2:c2:a6:24:cb:
64:10:e6:e8:db:9d:30:c4:73:7d:f4:d0:f7:d0:06:89:c6:4c:
da:e2:2e:20:83:0d:29:2e:36:f4:e5:dc:88:ce:b3:f1:c3:e9:
e6:05:00:20:13:47:f3:8c:1e:b2:da:17:5a:d3:94:59:f4:8e:
1c:67:91:ff:65:f6:94:70:5c:f8:ce:85:77:59:06:79:90:69:
f3:b0:d7:cc:9c:04:ea:52:84:60:c4:8f:cd:84:7e:bf:fd:4d:
31:98:67:4d:0e:d3:c5:2f:0f:0a:35:1e:48:e8:eb:18:e8:08:
d5:44:65:24:a7:a7:71:c8:e2:df:6a:11:af:b5:64:91:fc:0f:
16:86:b8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:30 2024 by rpki-client on console-fra.rpki-client.org