Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vrN17Y79blbuOnuNLH-pbrJkbW8.roa
File: vrN17Y79blbuOnuNLH-pbrJkbW8.roa (raw, json)
Hash identifier: ZA+tgFVMftvYblldQUB+Wa9JKqbvG35XPaeLg8ACbNg=
Subject key identifier: BE:B3:75:ED:8E:FD:6E:56:EE:3A:7B:8D:2C:7F:A9:6E:B2:64:6D:6F
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0983E203
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vrN17Y79blbuOnuNLH-pbrJkbW8.roa
Signing time: Sat 01 Jan 2022 09:04:11 +0000
ROA not before: Sat 01 Jan 2022 09:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212705
IP address blocks: 2a0e:aa07:e019::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159638019 (0x983e203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 09:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beb375ed8efd6e56ee3a7b8d2c7fa96eb2646d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:c0:9d:05:03:6b:57:22:62:50:8d:53:65:
f4:f0:9a:b8:eb:51:ff:76:f9:04:12:fc:bd:94:b9:
30:23:72:10:09:4d:f3:36:b4:8d:2c:7a:84:d2:ce:
dc:6f:7a:d1:75:34:89:af:19:c2:b6:18:13:94:df:
6b:02:79:25:55:2f:c3:26:6a:15:f7:b1:90:f3:10:
48:99:a1:cf:22:8a:5d:60:cb:fb:99:47:26:63:05:
7b:43:08:82:38:9f:c3:1c:c5:76:68:69:76:d9:1e:
b9:91:9c:b7:69:8b:97:a8:72:72:e5:ac:21:ef:e4:
c9:99:67:34:15:21:29:d2:55:48:59:d8:63:11:cf:
08:1b:21:d7:b7:d9:9b:f2:6b:0c:3c:38:73:d9:e2:
7e:4d:1b:15:b3:3b:7b:0e:d7:72:a2:9d:2b:c2:d6:
f6:63:e7:ee:76:cb:48:e6:ba:8e:45:4d:6a:1f:8a:
ea:2c:00:3e:7e:e8:19:c1:46:a7:4b:60:a7:da:04:
52:fd:f5:52:42:d3:b8:e1:19:a2:c6:c5:c0:21:00:
c7:17:93:97:6d:29:94:08:7b:25:22:72:77:d4:0f:
8e:25:94:d8:1e:b2:82:78:89:4a:40:57:0d:af:35:
6e:0c:55:4c:e4:35:ab:01:02:21:6c:8e:d7:70:ce:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B3:75:ED:8E:FD:6E:56:EE:3A:7B:8D:2C:7F:A9:6E:B2:64:6D:6F
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vrN17Y79blbuOnuNLH-pbrJkbW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e019::/48
Signature Algorithm: sha256WithRSAEncryption
12:55:d6:f7:31:52:fe:50:8c:50:da:67:11:62:d4:74:43:42:
31:f8:ea:86:bb:99:d8:63:29:4b:aa:75:74:e3:23:5a:80:66:
59:e7:4e:0d:64:10:f3:7a:38:71:b3:20:6f:c1:4b:62:4c:61:
8c:db:bb:8e:8a:37:6a:85:74:0f:39:34:29:55:d4:70:65:e4:
7f:75:b8:f7:58:e3:5d:73:f6:69:44:36:f1:e9:6c:e6:4a:64:
08:5c:2a:1d:ab:6e:28:df:c6:86:7c:38:3a:e0:4f:c4:a9:26:
bb:15:58:ec:f9:3f:ba:8e:dd:92:9a:3b:22:b8:cb:52:ce:a7:
47:9c:ae:85:2c:37:17:17:6c:30:2c:b1:df:19:dd:0b:a7:30:
7c:4c:17:48:b6:16:e9:ff:3b:24:63:d3:f7:e1:b7:56:60:f6:
e4:db:13:91:8b:92:2e:d4:cc:b5:26:9a:f5:94:07:ed:5a:a1:
49:d6:f6:7b:54:36:8e:6e:f8:6c:25:20:a4:71:18:0f:2a:8a:
c7:de:5a:d1:03:34:21:89:f1:87:b8:b2:06:bd:13:4c:51:66:
c0:ac:cb:4c:35:94:4e:85:d6:81:89:eb:57:6b:bd:11:37:f4:
0b:ef:a9:32:69:95:45:69:9e:0b:2c:ca:78:51:eb:f6:6b:86:
44:e1:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org