Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/zZR5oO-D5IBj_0U8OxDIZv-7a5w.roa
File: zZR5oO-D5IBj_0U8OxDIZv-7a5w.roa (raw, json)
Hash identifier: p6czTvwLyVsM025Ce6CzV5sFLYUj4LtpAWmUiyvt3gs=
Subject key identifier: CD:94:79:A0:EF:83:E4:80:63:FF:45:3C:3B:10:C8:66:FF:BB:6B:9C
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0960EF04
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/zZR5oO-D5IBj_0U8OxDIZv-7a5w.roa
Signing time: Sat 01 Jan 2022 09:03:51 +0000
ROA not before: Sat 01 Jan 2022 09:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135671
IP address blocks: 2a0e:aa06:450::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157347588 (0x960ef04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 09:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd9479a0ef83e48063ff453c3b10c866ffbb6b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:53:b2:6c:89:d0:b6:38:f1:25:98:8a:1c:
1f:12:6e:07:59:a8:79:e0:6a:d3:3e:1d:0b:d5:1d:
54:42:d1:1f:7d:ca:82:6c:30:6a:de:c8:89:59:89:
10:69:30:8c:26:98:74:ef:16:ca:8c:3c:8e:31:6c:
2a:18:be:e2:3f:ec:0d:f3:f8:8a:66:53:4b:9e:9f:
9a:01:28:d0:8d:14:2c:e2:81:a3:ed:bb:78:e0:df:
af:39:c2:12:6e:97:a8:47:94:0f:c6:57:57:de:14:
87:89:4a:67:9e:56:cd:52:28:54:8f:29:a6:11:ad:
e1:92:fa:57:62:8e:20:12:74:03:59:8a:b6:11:65:
ab:f5:94:d4:9c:23:d3:9d:a1:4a:e2:a3:1b:a0:2e:
a4:a0:3c:68:44:d9:a9:33:5f:fb:e1:36:8a:95:91:
ca:c1:ac:29:7b:1a:46:8a:24:6f:8f:2e:e1:84:96:
b6:cc:14:df:5d:f1:73:25:98:00:f2:e9:61:d2:58:
cb:00:37:a4:dc:00:0e:26:47:81:49:95:b2:b6:dd:
e1:5b:23:e5:e2:50:42:6f:15:dc:1c:bf:07:c9:a7:
c9:b4:dc:c3:93:13:ef:03:4f:29:fe:b0:42:bf:69:
f9:f9:a2:e9:aa:f8:7d:64:de:f1:5d:05:8c:a5:a9:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:94:79:A0:EF:83:E4:80:63:FF:45:3C:3B:10:C8:66:FF:BB:6B:9C
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/zZR5oO-D5IBj_0U8OxDIZv-7a5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa06:450::/44
Signature Algorithm: sha256WithRSAEncryption
a2:b8:b5:81:15:01:b9:69:c5:12:cf:e5:54:7f:10:7f:f3:e0:
05:60:13:dc:72:c0:f6:02:42:f0:65:32:75:07:9a:a4:59:8e:
0f:d0:16:1a:97:ff:05:b2:15:48:10:34:03:9c:3f:e7:af:f9:
9f:61:d3:df:6a:30:47:f2:89:5f:a0:46:9e:2c:c1:46:cc:94:
05:ef:bc:9d:e0:e4:9b:e0:5f:58:a4:08:91:6c:31:2f:95:0d:
ff:a8:72:02:d5:b6:63:7a:03:94:c8:4f:ca:3d:7d:3e:7b:71:
df:24:6f:54:06:f1:92:d1:1e:13:19:7a:d7:b9:67:95:93:b0:
0e:26:2b:7c:0b:49:91:05:9f:0d:9d:8b:2f:86:52:01:1f:6e:
85:2e:9e:1e:83:94:7f:4a:98:4f:c7:41:b4:2c:24:fb:b0:fe:
28:51:ef:54:00:4b:b7:d6:96:7b:ea:eb:a3:0e:38:58:87:16:
84:ad:6f:f0:20:5e:08:9c:d5:31:e4:7a:d5:c4:1e:c1:82:77:
62:61:7c:af:35:35:d6:ce:1a:e5:7c:ae:54:b4:bf:8e:01:0a:
1d:4b:a7:2c:01:bb:01:75:88:4c:7e:c3:a7:32:ad:af:0a:81:
8c:f6:41:4f:81:d3:7f:12:d0:44:39:26:41:63:49:50:cd:79:
c1:e2:ec:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org