Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1jtuM0y3iq8NECs1ZSep9qmfVAU.roa
File: 1jtuM0y3iq8NECs1ZSep9qmfVAU.roa (raw, json)
Hash identifier: JCvzdM28gfmSqQSz8RrZ04X50x3hoqSl3+bWcaEb94w=
Subject key identifier: D6:3B:6E:33:4C:B7:8A:AF:0D:10:2B:35:65:27:A9:F6:A9:9F:54:05
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0977EC28
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1jtuM0y3iq8NECs1ZSep9qmfVAU.roa
Signing time: Sat 01 Jan 2022 09:04:04 +0000
ROA not before: Sat 01 Jan 2022 09:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210338
IP address blocks: 2a0e:aa07:e400::/44 maxlen: 48
2a0e:aa07:e02d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158854184 (0x977ec28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 09:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d63b6e334cb78aaf0d102b356527a9f6a99f5405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:07:24:48:ad:5c:39:ef:17:87:79:42:98:
86:dc:2d:84:bd:29:24:0e:0c:7e:65:c8:51:06:e5:
53:5b:c5:ff:3c:49:fb:f5:60:6d:62:20:2b:8a:b3:
13:c8:fa:88:7a:cc:44:99:b0:c1:c8:85:99:32:91:
e8:30:83:80:f9:74:d6:b3:a2:67:25:ae:4d:76:88:
7f:16:4f:64:bb:0b:2d:96:ae:7f:9a:46:03:30:d9:
25:30:49:1f:09:dd:7a:7d:b5:25:e4:24:c0:4f:86:
03:0c:f0:6e:36:c4:6e:4d:38:1c:46:79:af:46:6c:
66:01:c8:31:7c:c1:f8:18:93:f8:84:54:51:8f:ce:
36:5b:99:5b:8f:2c:2a:11:9a:03:e4:d7:8d:37:77:
3d:49:cf:cc:68:1e:6e:a0:e0:4a:62:b2:e9:40:7a:
93:16:73:97:07:f0:7c:f0:89:4f:0e:fb:07:3c:b2:
18:1d:73:39:8a:4d:19:66:8b:af:95:bd:9f:1d:78:
ea:7d:b7:8a:84:0e:bf:71:94:97:85:fe:8a:ca:de:
db:05:8b:c7:b0:27:31:ac:04:16:06:4c:c6:38:5e:
ad:19:80:9a:fa:d2:28:f9:cf:2d:73:06:3d:bf:b0:
97:61:dc:19:1e:e1:67:0f:63:80:98:35:94:e8:62:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3B:6E:33:4C:B7:8A:AF:0D:10:2B:35:65:27:A9:F6:A9:9F:54:05
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/1jtuM0y3iq8NECs1ZSep9qmfVAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e02d::/48
2a0e:aa07:e400::/44
Signature Algorithm: sha256WithRSAEncryption
61:a7:d8:e5:c4:31:ae:e0:9d:0a:5a:46:25:c1:6c:1d:53:c3:
5e:d5:d2:8b:29:21:50:f2:7b:b1:85:8e:5a:a7:af:93:2f:a4:
fc:6d:fd:f8:3c:5e:c9:c5:3e:6b:20:18:c8:bf:b7:06:bf:4f:
f5:37:56:44:85:58:c0:6b:ee:98:62:85:ce:05:41:d7:f9:a6:
af:54:52:f7:65:1b:b8:54:71:ee:c0:c3:e5:20:69:d4:91:22:
6f:39:c7:43:fc:17:17:10:25:ba:b1:e8:92:2e:f4:49:40:ba:
06:ab:2a:e2:ed:44:ac:42:df:ac:6c:3e:23:8e:f2:d5:ae:77:
c1:c3:d5:22:f8:12:3d:34:f6:cf:80:b4:aa:b8:50:75:ca:9d:
1b:08:32:92:3e:45:fd:37:16:f4:60:8a:2e:6d:c8:f7:8c:a9:
c4:4b:0e:7b:d3:da:39:14:54:23:46:31:f6:76:9c:09:de:87:
42:41:f3:28:98:d8:9e:66:3f:b5:e6:08:5f:51:54:6d:1b:de:
99:53:f0:a5:be:b5:b6:72:51:ff:63:84:a0:e3:96:32:52:b2:
21:64:04:a1:c5:a7:db:ae:b4:1e:50:b3:87:2f:e8:d4:50:69:
79:38:89:6a:47:b0:35:93:58:9e:7f:c0:df:fb:17:8a:da:7c:
f9:64:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org