Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/e4X3ie0ME_O_boB7OTXgYkTpLrY.roa
File: e4X3ie0ME_O_boB7OTXgYkTpLrY.roa (raw, json)
Hash identifier: rvynmVwLrP+PdxcFx8AD8PRSI5g659eX+3TdXiJFxts=
Subject key identifier: 7B:85:F7:89:ED:0C:13:F3:BF:6E:80:7B:39:35:E0:62:44:E9:2E:B6
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018336B0F8B96E7A3365044CBA10D46321A6
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/e4X3ie0ME_O_boB7OTXgYkTpLrY.roa
Signing time: Tue 13 Sep 2022 11:51:51 +0000
ROA not before: Tue 13 Sep 2022 11:51:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211877
IP address blocks: 2a0e:aa07:e04b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:b0:f8:b9:6e:7a:33:65:04:4c:ba:10:d4:63:21:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Sep 13 11:51:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b85f789ed0c13f3bf6e807b3935e06244e92eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:ad:a4:61:cb:b8:9c:a8:f7:ff:a3:c5:2f:
c0:41:b8:93:10:52:c8:a2:5a:f3:08:8e:bd:53:33:
76:16:3b:10:bb:31:96:18:4c:43:32:17:ce:9c:fa:
4f:f5:72:7c:70:c4:7d:e9:5f:ca:5c:48:95:50:f3:
e6:25:b4:c7:cf:a7:44:5c:8a:bf:e5:35:d1:3c:9e:
d6:66:f8:47:d8:12:d5:46:79:8b:23:2c:1d:da:02:
29:19:04:ee:2c:90:83:18:e0:af:5b:fc:49:4c:c6:
cc:4c:36:0d:18:b8:97:43:07:a1:84:58:d5:7d:05:
93:ab:2a:46:df:f1:e4:8f:1a:11:b6:a0:90:9b:84:
0a:ee:76:91:a6:c9:44:4b:27:5e:61:d0:ce:0f:86:
bd:17:fa:b3:bf:e7:4e:62:1f:e1:58:91:92:f9:7c:
ed:a8:45:b3:4a:9a:b1:77:34:ba:53:4e:6e:88:63:
9a:47:97:cc:4a:01:63:d5:2a:b8:5a:bb:d0:a1:96:
89:80:1a:06:e6:0d:3b:53:4f:e4:49:75:ea:21:21:
46:f7:fd:c8:e8:44:a8:02:88:c2:7d:3a:7f:d3:f2:
2c:f7:25:10:eb:35:d0:32:41:63:a7:5f:78:9a:68:
98:71:70:fc:23:fc:44:09:dd:e5:50:7e:20:92:4e:
be:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:85:F7:89:ED:0C:13:F3:BF:6E:80:7B:39:35:E0:62:44:E9:2E:B6
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/e4X3ie0ME_O_boB7OTXgYkTpLrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e04b::/48
Signature Algorithm: sha256WithRSAEncryption
7f:9f:c8:07:4a:c4:a3:04:69:42:3f:1c:fb:11:f3:c5:60:34:
63:e3:86:85:ba:8d:af:60:2f:94:c0:05:4f:10:f7:e6:b0:59:
b9:a5:62:58:5c:c1:24:48:7a:d0:2c:8b:69:c4:6c:83:cc:6f:
4d:60:ab:02:5e:a0:98:d7:fa:fb:f1:92:c2:2b:b9:73:a5:2a:
f9:d9:5a:d2:3d:9a:b6:ad:6f:95:65:73:a5:d9:2a:6c:45:40:
28:7c:a9:e5:1c:bd:39:54:6b:b2:28:87:c4:9b:cc:f7:99:60:
d2:5b:bc:dc:1b:66:00:eb:6e:8a:ec:90:d4:88:44:1e:82:27:
c8:d0:54:29:bb:92:92:16:c8:2e:40:6b:2e:25:ce:69:6b:28:
c6:2e:f7:d1:ac:5a:63:ed:70:a9:34:93:4f:18:b8:ea:85:90:
89:3b:85:38:08:60:66:67:c4:cb:d1:d2:22:73:05:76:b0:4b:
70:48:fc:a1:1d:3b:c3:ce:d1:9b:78:2f:15:8c:49:13:48:a4:
69:c5:39:9b:3c:3c:81:b2:5d:4f:6e:21:1c:d6:c2:35:0d:e2:
51:cd:aa:b5:1b:77:91:5d:65:d4:78:2b:2c:ee:20:61:c7:09:
61:eb:93:b0:ab:8b:b6:bd:cd:70:cf:7e:73:90:e8:26:98:37:
ca:07:3b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org