Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ESuUH4KGWCvPMBj8oY5SAng9S-8.roa
File: ESuUH4KGWCvPMBj8oY5SAng9S-8.roa (raw, json)
Hash identifier: ggxilj3KAFhxrhUw38pWgbap7rquE5AYvR3if5qY2IM=
Subject key identifier: 11:2B:94:1F:82:86:58:2B:CF:30:18:FC:A1:8E:52:02:78:3D:4B:EF
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 09616A67
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ESuUH4KGWCvPMBj8oY5SAng9S-8.roa
Signing time: Sat 01 Jan 2022 09:03:51 +0000
ROA not before: Sat 01 Jan 2022 09:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138631
IP address blocks: 2a0e:aa06:100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157379175 (0x9616a67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 09:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=112b941f8286582bcf3018fca18e5202783d4bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0f:34:d6:23:a7:22:07:4d:e7:80:a3:b4:7c:
51:85:c4:5f:72:1e:a2:26:92:8c:0e:7b:6c:c5:bd:
e6:9e:c5:98:db:19:66:09:95:76:3f:2d:8c:df:9b:
83:15:7b:a2:41:a3:6b:6d:90:1a:f1:7c:18:29:9e:
02:2c:1a:1b:01:de:c3:31:43:03:54:1a:5d:a2:37:
3c:8b:18:cf:53:12:d4:5e:ea:4e:a5:45:f8:45:99:
87:a5:c3:12:ce:c9:e6:4f:f8:25:47:ee:38:cc:04:
18:46:19:61:06:9a:2f:43:24:77:6b:7b:c3:35:6e:
15:bd:3c:f5:dc:c0:63:2d:76:8a:4c:09:f4:cf:13:
ce:9c:8a:12:a1:a4:6d:3d:5f:a4:9d:ce:d4:e8:0e:
19:1d:7b:61:5c:8c:ee:8c:19:fc:8e:da:10:7c:94:
18:b5:72:69:05:4a:46:38:4b:a5:11:e8:0f:02:55:
80:f1:65:ad:9f:fd:ec:b9:f3:d6:e0:c8:b3:70:ea:
c4:a6:52:9d:e8:11:89:20:d3:21:f4:fc:f3:fd:c6:
9c:80:90:51:b3:d0:fc:8b:3d:28:36:c7:5c:dc:ba:
a4:f1:84:1c:a6:44:ca:d2:ab:4d:27:b0:32:69:eb:
a5:54:56:42:4f:36:ad:86:6e:85:17:ff:c4:4f:06:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2B:94:1F:82:86:58:2B:CF:30:18:FC:A1:8E:52:02:78:3D:4B:EF
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ESuUH4KGWCvPMBj8oY5SAng9S-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:100::/40
Signature Algorithm: sha256WithRSAEncryption
19:7c:c0:4a:6a:d4:31:44:83:b2:fe:f3:2e:ea:f7:4d:d7:ab:
74:6d:4b:f7:91:15:05:77:40:f5:8b:74:52:0e:e3:bd:37:86:
73:ee:4d:87:f2:fc:fb:ad:f2:2b:f2:a2:b8:02:8f:5d:ca:16:
f0:bd:65:73:e3:e8:5a:da:dc:80:d6:8b:2d:04:66:f7:f4:69:
1c:b7:37:ff:e3:ba:9e:09:b8:d6:68:14:58:10:e0:aa:f2:b9:
14:ed:76:e5:b5:6f:48:a6:7d:b2:ce:81:3d:49:51:53:27:c1:
17:e9:ab:45:ec:21:49:76:49:c8:a8:2a:56:bd:1b:e1:62:d8:
83:57:79:40:2a:06:f2:41:ea:46:50:8e:83:eb:62:32:52:3c:
2e:81:e3:76:c9:0c:97:4c:ef:73:a1:6e:e0:06:fa:16:61:fd:
d6:3f:38:63:e7:3a:ba:b5:d3:39:6c:11:6f:0a:9f:8b:c7:27:
c3:60:88:df:a9:43:81:39:97:6b:0c:5a:60:76:9c:4f:39:95:
08:fc:f4:53:b6:20:ea:b1:e5:52:f0:3b:8c:3b:7b:87:7e:71:
46:ec:25:ab:ba:07:50:80:10:68:fd:f0:8a:4a:e4:fc:03:86:
ca:fb:7b:5f:24:d3:f4:65:fa:50:84:90:52:28:c1:7f:e2:a0:
ae:ea:86:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org