Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/QdfZPQpbFidpiYKeINvgXeqH8wk.roa
File: QdfZPQpbFidpiYKeINvgXeqH8wk.roa (raw, json)
Hash identifier: ZeC27aT2UibCHlKhre/Cx90QQcBLyAO59JFwtpzigm8=
Subject key identifier: 41:D7:D9:3D:0A:5B:16:27:69:89:82:9E:20:DB:E0:5D:EA:87:F3:09
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 09833BCC
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/QdfZPQpbFidpiYKeINvgXeqH8wk.roa
Signing time: Sat 01 Jan 2022 09:04:10 +0000
ROA not before: Sat 01 Jan 2022 09:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211968
IP address blocks: 2a0e:aa07:e01a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159595468 (0x9833bcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 09:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41d7d93d0a5b16276989829e20dbe05dea87f309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:84:ba:68:70:41:d7:a0:af:1e:52:74:f5:
3b:92:fe:26:4b:10:f3:af:e9:e6:df:8b:30:6f:44:
7a:29:d3:61:b9:55:c8:0c:49:1b:3b:e7:ee:05:a3:
3f:9e:92:2d:0d:64:62:a9:08:83:c0:1d:e8:a7:05:
59:e1:5a:02:d5:6c:1f:df:22:44:9b:f1:82:60:de:
c1:33:39:4d:ba:a9:05:f1:f6:71:47:19:1a:aa:49:
11:23:c0:68:47:5b:04:18:7c:66:9f:2c:75:09:a4:
a5:01:24:cb:9d:0c:ed:b6:d0:fa:f2:c6:97:0d:16:
a2:a9:3c:fe:39:60:9e:01:3b:8a:64:1f:ef:15:20:
0a:4c:0b:84:52:a0:b1:6f:29:0d:05:75:50:67:ea:
46:04:28:b6:e3:d8:e0:54:ea:de:24:dc:ea:3f:a2:
b3:f6:4c:a7:c5:03:39:5d:27:12:0d:d8:72:e8:08:
d4:5a:c7:f9:52:c5:f3:8d:61:ec:21:97:80:0c:be:
e0:6a:30:86:44:06:9d:19:24:4e:ee:92:6f:24:3c:
6a:2b:78:f0:20:33:2c:37:fb:ef:27:be:75:e0:b6:
ca:a0:15:57:c7:fa:38:95:bb:e5:f6:83:ce:66:57:
77:05:f3:61:ac:0e:d4:2f:6f:0c:e1:53:0a:25:6c:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D7:D9:3D:0A:5B:16:27:69:89:82:9E:20:DB:E0:5D:EA:87:F3:09
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/QdfZPQpbFidpiYKeINvgXeqH8wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e01a::/48
Signature Algorithm: sha256WithRSAEncryption
71:e8:d7:c7:8c:c6:ca:46:a4:15:91:1a:08:05:4e:2e:e7:34:
12:14:6e:4a:f8:42:63:2a:5d:a4:9d:8a:23:c8:49:97:f7:d2:
6d:2e:80:d2:db:b7:98:3a:66:5a:e6:26:be:14:02:1c:71:f4:
04:48:33:74:d5:6b:f0:2b:01:13:c4:9b:1e:e5:db:5f:34:76:
e1:8f:59:4a:dd:9f:fa:8c:fb:98:28:29:cd:92:f6:1d:11:2c:
bb:5e:f2:74:b3:5e:43:9c:2e:fd:f5:04:bd:99:c9:c4:f7:69:
86:ec:1a:97:b1:19:b9:c9:a1:eb:5e:4a:91:ef:7b:30:89:a8:
98:c7:e9:3b:96:3d:21:8f:96:07:91:96:b4:de:85:64:17:2e:
fe:96:7e:5b:80:a7:ce:7c:c8:70:43:da:85:7b:fe:80:08:1d:
2c:29:6c:6c:ed:bc:cb:ef:00:28:c1:d7:7f:b2:25:38:2a:f7:
cf:1e:61:23:61:d2:1a:e4:ef:99:14:f1:78:88:ea:0e:51:44:
60:6a:fb:af:58:d7:76:71:41:67:74:4a:1b:db:bf:8f:ca:34:
be:26:b7:9a:d7:3f:6c:92:ff:e1:e9:30:03:36:4a:4d:4e:01:
09:68:32:ee:28:cb:de:40:6b:b4:f9:0f:a3:76:20:d0:09:ba:
36:6b:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org