Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vxTcIJa05TxVW8ZioGis8r0GdWo.roa
File: vxTcIJa05TxVW8ZioGis8r0GdWo.roa (raw, json)
Hash identifier: /294lUi5z4WA6e+Kpw+DPoyS/t3o2QQD8SbDllZEf5U=
Subject key identifier: BF:14:DC:20:96:B4:E5:3C:55:5B:C6:62:A0:68:AC:F2:BD:06:75:6A
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 097B3797
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vxTcIJa05TxVW8ZioGis8r0GdWo.roa
Signing time: Sat 01 Jan 2022 09:04:06 +0000
ROA not before: Sat 01 Jan 2022 09:04:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210872
IP address blocks: 2a0e:aa07:e026::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159070103 (0x97b3797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 09:04:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf14dc2096b4e53c555bc662a068acf2bd06756a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:c7:a0:6d:67:e6:32:b8:47:75:8f:5f:85:
64:63:2c:c7:c7:22:be:03:21:de:b5:4e:0b:c4:72:
da:99:3e:fe:bc:7c:b2:0e:c7:b3:5e:47:96:34:c3:
fb:c1:63:32:1b:fa:29:97:5e:e3:af:e3:79:c5:19:
85:6e:dc:65:a4:09:fc:86:60:18:df:01:58:08:18:
21:bc:75:b7:fa:21:c8:a7:75:8a:78:48:e1:ac:a7:
0b:fe:3a:13:88:61:b6:2d:31:60:ba:d5:51:99:92:
1c:b2:6c:70:dc:e4:9d:e1:e3:32:f8:ae:c3:c6:8a:
58:95:09:65:fe:a6:11:57:50:4a:8c:8e:d0:74:df:
05:49:5b:75:26:ee:23:59:94:be:41:25:fd:b0:f3:
16:13:90:3c:c6:91:ad:9c:ea:5f:c3:d9:1b:3f:6f:
2b:a9:24:86:6e:b0:c2:d2:ca:bc:f9:ee:a4:56:1c:
bb:5e:1a:c2:9c:3c:08:c1:af:3c:ff:4e:66:e8:1e:
08:7f:dd:a7:73:32:23:13:43:41:07:af:23:83:71:
9f:6e:36:8a:d1:67:b8:65:49:57:f1:e2:d3:e7:87:
93:af:8b:10:c5:14:dd:e1:44:90:cb:9d:81:81:ad:
62:2e:1c:7f:e7:b6:2f:7c:fa:b1:b8:f7:96:f2:bc:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:14:DC:20:96:B4:E5:3C:55:5B:C6:62:A0:68:AC:F2:BD:06:75:6A
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/vxTcIJa05TxVW8ZioGis8r0GdWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e026::/48
Signature Algorithm: sha256WithRSAEncryption
b0:9f:43:09:45:b6:d9:b5:cb:f9:c8:4d:d1:72:c8:cf:1e:fa:
cc:30:63:91:a6:d3:98:91:4a:70:91:e6:c1:65:66:fd:b2:b3:
88:85:86:e4:a5:ec:ab:6e:b1:d4:f4:11:ea:de:8d:79:18:a6:
3f:9b:f5:e7:50:2c:85:23:95:c8:dd:27:22:2a:0f:3d:b5:a1:
48:6f:ab:56:b0:04:78:29:1e:ca:c5:ab:d6:54:82:c3:0e:92:
5d:03:de:e4:a5:6e:a8:74:1c:95:88:63:da:63:75:a6:8d:88:
b5:4c:45:90:51:76:2d:ff:0e:42:f2:26:fd:6b:a5:f1:e0:69:
9e:33:c9:ec:8a:b3:78:07:59:9b:d7:12:29:28:c6:31:04:78:
7b:ba:17:97:70:cd:95:4c:91:cf:37:28:0f:af:8d:88:68:f7:
8b:32:37:49:6c:f9:b5:73:f6:ad:7b:01:45:fe:f8:73:60:a0:
b6:e4:89:20:21:81:b1:0f:da:12:79:60:a5:4f:a2:00:08:57:
d2:3e:06:f9:e6:aa:c6:fa:a6:52:4e:18:00:31:f0:cf:a5:16:
2f:1a:7a:9b:1b:59:a6:cb:5d:4f:32:86:3b:80:35:8d:1d:32:
cd:40:b2:35:d6:f9:7e:3a:78:43:3f:29:43:83:78:7d:52:1c:
31:8d:ee:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org