Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/f_KnnQ0UEvi44IWduqCH6kJ0Wp0.roa
File: f_KnnQ0UEvi44IWduqCH6kJ0Wp0.roa (raw, json)
Hash identifier: qs/D1X6xKJF0ZlFVgpDtas7ute/nqUmtNQz9sN1REjY=
Subject key identifier: 7F:F2:A7:9D:0D:14:12:F8:B8:E0:85:9D:BA:A0:87:EA:42:74:5A:9D
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0977295F
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/f_KnnQ0UEvi44IWduqCH6kJ0Wp0.roa
Signing time: Sat 01 Jan 2022 09:04:04 +0000
ROA not before: Sat 01 Jan 2022 09:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210320
IP address blocks: 2a0e:aa07:e02e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158804319 (0x977295f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 09:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ff2a79d0d1412f8b8e0859dbaa087ea42745a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f2:7a:9a:99:27:b3:59:a8:ff:2f:7e:a7:90:
9a:4a:5d:e2:0c:31:11:e4:be:03:a1:8b:34:ac:dd:
ff:2f:08:47:20:10:38:a0:ae:49:38:59:0a:18:73:
09:f3:95:12:0a:1f:37:26:c0:9b:e7:f7:0f:fc:67:
d6:b4:5e:99:e0:8d:94:5b:61:e3:c4:9b:9e:18:f6:
4b:13:54:de:03:17:a7:af:5f:ea:09:37:6d:ea:77:
a9:2f:df:7b:99:c4:ae:fb:8d:4c:82:13:5b:9f:6d:
73:20:bc:88:92:cb:e1:11:94:ac:90:71:dc:88:4f:
b4:dd:ba:4e:61:30:09:87:86:a6:97:69:be:5b:a4:
0a:81:1c:ce:df:8f:52:7a:a0:a6:47:c0:cb:5b:99:
6a:10:fa:85:f0:ec:02:62:4e:25:33:4e:44:78:8c:
af:5b:e1:3d:95:fc:ad:8a:61:73:4c:8f:2c:38:f3:
d4:90:d4:7d:84:de:68:c9:2c:ee:13:52:18:0a:62:
1d:66:c3:62:e8:b1:d2:bd:4a:b7:8c:7a:e9:16:36:
e8:d8:90:a6:7f:e5:f7:be:83:1c:be:d4:3c:fb:87:
b3:31:30:b7:ca:4e:85:c0:bb:f4:cc:3c:64:81:8c:
e9:94:8f:79:ff:54:c2:f3:a1:52:69:41:4b:54:ba:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:A7:9D:0D:14:12:F8:B8:E0:85:9D:BA:A0:87:EA:42:74:5A:9D
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/f_KnnQ0UEvi44IWduqCH6kJ0Wp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e02e::/48
Signature Algorithm: sha256WithRSAEncryption
53:b8:6c:73:f2:e2:65:a7:52:d8:f9:40:1a:c6:b6:d6:fd:8a:
18:5d:e7:06:0e:98:f3:1f:99:2a:ea:01:f5:25:1e:76:2e:2c:
00:0c:eb:08:11:07:4c:61:fd:79:db:68:1f:95:d0:40:3b:ae:
17:95:f8:01:c8:e1:0d:88:52:d6:07:90:c9:a2:da:77:52:32:
8e:c0:b1:44:73:9d:3a:b3:0b:1d:8d:6a:32:bc:e6:45:01:d3:
6d:7b:ba:13:3c:f2:7e:ec:24:ec:86:d9:66:e6:24:d0:e1:87:
30:de:7d:47:e3:10:86:48:8c:51:b7:f1:02:19:3c:f9:ca:9c:
01:65:d0:4f:52:16:f7:a6:44:2f:70:e7:51:0d:d8:b2:89:23:
57:b2:f7:98:1f:5e:af:52:54:53:c4:5a:2b:6c:a1:73:e5:75:
4a:38:ee:03:95:2e:82:f3:9b:43:a2:31:59:52:29:5b:27:7c:
0b:b6:c0:49:76:16:1f:c0:e0:a9:8f:58:96:64:1f:a2:03:6d:
e2:80:8d:6f:09:02:7a:3c:b6:35:c7:db:83:52:f4:69:63:4a:
a5:b4:e1:6a:4a:bc:51:b1:53:7f:7f:f9:b6:2c:2a:88:54:d1:
04:fd:b7:3c:24:cd:93:9c:20:bc:9c:0f:21:c0:93:c9:b3:63:
06:2c:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org