Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/eZJASuVcKrqrT9vC92trDpzuxyE.roa
File: eZJASuVcKrqrT9vC92trDpzuxyE.roa (raw, json)
Hash identifier: UbNUGf86dqiUOQQ5hSTxc67Vm9QLMVDpfXvuPcX255k=
Subject key identifier: 79:92:40:4A:E5:5C:2A:BA:AB:4F:DB:C2:F7:6B:6B:0E:9C:EE:C7:21
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 03BE6583
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/eZJASuVcKrqrT9vC92trDpzuxyE.roa
Signing time: Sat 01 Jan 2022 14:07:17 +0000
ROA not before: Sat 01 Jan 2022 14:07:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15683
IP address blocks: 2a01:6d80:2000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62809475 (0x3be6583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jan 1 14:07:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7992404ae55c2abaab4fdbc2f76b6b0e9ceec721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:cd:01:96:cb:cb:60:d7:b3:e2:e7:16:6f:
5d:34:e0:1e:e9:ca:dc:8b:7c:8b:2c:83:e7:ec:21:
fe:73:83:d1:20:c3:5c:c0:ee:da:8a:fc:de:09:67:
2a:73:49:e0:39:f7:37:5c:2f:30:a8:dd:2c:15:4a:
f4:00:31:e8:30:2b:e3:b4:ca:c2:b3:44:20:b1:e1:
6d:c9:bf:5e:0a:32:9a:9c:4f:e6:88:d3:ec:02:d2:
57:b7:1b:b7:44:fd:50:79:80:59:1d:e7:01:66:16:
cb:03:fc:bb:4c:1b:13:b6:79:e4:d7:4a:06:a9:b0:
46:97:e7:1d:e4:d7:1d:dc:e3:53:32:4a:d1:98:1f:
bb:f7:3a:00:8d:ed:a4:bf:7e:eb:41:51:8f:da:81:
3c:b9:7c:c4:25:e7:9d:2e:12:09:54:ac:0e:34:07:
26:ff:dd:9b:25:c0:44:53:00:43:2f:d9:8e:fe:70:
74:72:1e:64:7d:fa:f0:a7:60:d1:b8:8d:c1:7e:1c:
ae:41:c6:46:26:f6:eb:b4:00:4b:10:a6:a0:63:e9:
46:a1:7c:99:af:49:89:29:bf:1d:ea:63:15:bf:6a:
06:19:b5:72:99:eb:43:85:f3:e5:30:18:4d:b2:c8:
d7:e6:be:af:d9:cf:9c:ea:a3:75:66:3d:38:99:42:
f7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:40:4A:E5:5C:2A:BA:AB:4F:DB:C2:F7:6B:6B:0E:9C:EE:C7:21
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/eZJASuVcKrqrT9vC92trDpzuxyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6d80:2000::/36
Signature Algorithm: sha256WithRSAEncryption
ab:4a:f3:d2:ec:c4:28:f7:ff:86:97:7f:9d:ae:ba:96:26:18:
cc:b0:e3:e6:d0:d5:c3:63:98:80:12:cc:30:b6:ba:5d:5a:e7:
c2:7d:2b:0d:45:29:d9:f4:ca:d7:b8:6c:37:15:8a:49:ff:71:
af:ca:40:6f:6c:ff:36:08:b1:c4:3e:a3:de:e4:52:e7:44:22:
d1:49:48:0a:a2:98:8a:5a:d2:ee:17:75:ee:ea:4e:4f:3b:de:
d1:36:91:73:4d:90:54:21:f4:72:aa:bb:d9:55:91:72:74:24:
e7:c5:40:fc:b9:3a:f8:50:a3:b7:e1:b2:53:bd:00:c0:e1:52:
6f:fe:d8:d3:3e:63:69:b4:e0:26:84:1c:b9:1e:fa:d3:f7:c0:
23:ac:b3:5c:fa:81:84:57:68:26:20:cd:26:b5:f4:08:52:42:
58:a6:29:43:df:48:d6:6b:2e:9b:af:21:69:31:bd:c8:37:40:
4c:dc:b2:e3:49:36:a0:0f:b5:35:68:6b:58:40:d8:e5:02:38:
a8:bd:78:6d:5d:cf:c1:be:32:5a:69:d7:93:0f:e1:f4:e9:e7:
8d:80:69:82:2f:e0:c5:f1:7c:dd:e7:73:31:a7:7d:70:a4:45:
f0:77:91:c0:61:b0:0a:85:a8:0e:b8:25:32:2a:3e:07:f7:ca:
59:d6:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:04 2024 by rpki-client on console-ams.rpki-client.org