Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ebyaZdcdfP-3w74mv-4Uq3IwM9E.roa
File: ebyaZdcdfP-3w74mv-4Uq3IwM9E.roa (raw, json)
Hash identifier: uoG03z1IrFMK3OAY8eZ/nWGxaZyHeftZI+8Hu7wUuRc=
Subject key identifier: 79:BC:9A:65:D7:1D:7C:FF:B7:C3:BE:26:BF:EE:14:AB:72:30:33:D1
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0983819B
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ebyaZdcdfP-3w74mv-4Uq3IwM9E.roa
Signing time: Sat 01 Jan 2022 09:04:11 +0000
ROA not before: Sat 01 Jan 2022 09:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212690
IP address blocks: 2a0e:aa07:e022::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159613339 (0x983819b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 09:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79bc9a65d71d7cffb7c3be26bfee14ab723033d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:8b:48:3e:6a:fa:8d:08:bd:fd:3d:ef:08:
bf:ab:4a:38:31:20:c5:fd:7a:70:56:da:bb:ba:6f:
a7:b9:72:38:08:6f:c0:91:3c:5d:be:e0:41:37:e8:
65:83:94:dd:3c:68:38:10:3f:ba:81:97:23:22:7c:
83:73:a6:32:82:57:ff:b3:de:2b:ff:6a:7c:76:90:
25:a5:f9:ad:43:58:4a:dd:52:2f:44:42:33:5f:0c:
61:92:6b:82:12:6b:d5:a3:df:02:b7:80:a8:1d:cb:
36:fe:b4:56:7d:bd:fc:f6:32:2e:90:c6:df:38:97:
26:c7:81:a5:1a:0a:7f:ad:ce:e0:62:de:30:8b:52:
54:bb:cf:fa:1f:66:8b:0b:73:fe:31:79:61:fb:5c:
7d:ec:b8:9f:67:13:14:c4:96:ca:0c:38:ca:fd:48:
a4:70:09:15:4d:4b:22:24:44:30:81:e8:f3:38:64:
0e:2f:45:0f:1e:68:ca:38:5c:30:ab:a4:39:b6:38:
6d:6c:d4:9f:55:1c:c5:91:80:48:65:01:21:d9:14:
c5:be:25:7d:c4:32:5d:2c:2e:38:36:51:a9:df:0f:
7c:33:00:8c:d2:33:27:0a:0d:af:b6:6d:0c:71:b7:
d2:a6:15:c3:e8:5f:de:a6:46:9a:bf:e6:57:42:d3:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BC:9A:65:D7:1D:7C:FF:B7:C3:BE:26:BF:EE:14:AB:72:30:33:D1
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/ebyaZdcdfP-3w74mv-4Uq3IwM9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e022::/48
Signature Algorithm: sha256WithRSAEncryption
26:6e:38:d9:17:1e:a6:b8:db:1c:83:ad:d3:42:de:50:5e:9c:
7f:3a:a5:e0:ce:38:65:f9:9d:2d:be:f9:85:01:4e:b4:20:78:
ba:4c:be:2c:63:36:75:53:8a:4d:42:e8:85:81:a9:b9:71:0c:
97:a7:11:2f:56:4b:19:a8:2e:04:9a:a2:0c:55:1d:4a:8b:76:
e1:cb:3f:38:b1:7f:32:ed:1d:b0:c7:f1:36:85:e2:4b:71:4a:
0c:fe:3d:0d:9d:3b:10:d9:b8:82:c5:2d:a1:0e:39:a4:71:fe:
ba:51:4a:b3:66:93:a9:c2:03:2b:0e:b6:f8:37:e9:41:8e:29:
ba:61:ef:74:4c:07:59:5b:4f:c4:c7:42:3a:41:3e:e1:95:81:
a0:da:9a:52:94:8d:66:38:1c:38:51:26:d6:3c:b6:f5:42:0e:
ec:ef:17:bb:da:9b:35:b6:c7:f1:67:13:41:4b:50:e4:d6:67:
bb:46:f5:37:4d:70:bf:87:45:bf:04:9f:0b:35:42:ac:92:c3:
4e:01:86:d2:ca:4f:39:23:4d:c6:d5:e9:da:37:48:8b:59:ed:
fd:84:43:77:7a:99:14:42:b4:c6:25:fc:b8:b5:42:05:70:57:
62:53:61:5f:82:5f:b9:72:c1:d2:40:60:a1:40:aa:b1:fa:89:
8a:a8:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org