Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Srdby5f6F5SpRieibvoRaC6wgYE.roa
File: Srdby5f6F5SpRieibvoRaC6wgYE.roa (raw, json)
Hash identifier: 6eWjFWripxF/ym3Oj0m1XKDikfK9ixqcdfbVTR+w9pc=
Subject key identifier: 4A:B7:5B:CB:97:FA:17:94:A9:46:27:A2:6E:FA:11:68:2E:B0:81:81
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 0198B2AA
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Srdby5f6F5SpRieibvoRaC6wgYE.roa
Signing time: Fri 11 Mar 2022 15:04:02 +0000
ROA not before: Fri 11 Mar 2022 15:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212144
IP address blocks: 2a12:7700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26784426 (0x198b2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Mar 11 15:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ab75bcb97fa1794a94627a26efa11682eb08181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:6a:ec:27:fe:71:02:d9:d5:9e:00:c0:0b:
d5:22:e5:26:db:8f:e0:10:cb:90:89:31:a2:fb:d4:
1b:57:67:76:d6:ef:91:2c:11:44:81:61:02:cc:74:
28:e4:12:31:9a:70:fc:52:a6:91:7e:68:7b:bd:a6:
62:da:50:95:92:0a:99:6b:15:8b:04:b1:1e:2b:04:
37:4c:67:a0:1b:f3:68:37:14:aa:c1:f4:fa:95:dc:
74:02:48:8d:e3:d5:cf:ee:0c:59:f0:4d:60:0c:22:
ef:24:f3:0f:4d:50:3d:57:06:a3:34:09:11:04:59:
a4:79:38:4f:4c:d9:c4:8d:3a:ba:93:25:ae:64:2c:
4e:e3:c0:26:11:07:f8:e9:c1:05:a9:8c:fa:e8:14:
df:3b:d3:21:7f:40:ed:22:a7:05:7c:09:18:61:7f:
66:42:a8:49:f6:cf:18:4a:bd:57:07:ca:3d:e9:a6:
e3:4c:99:e0:39:f5:e9:b1:34:b3:93:a9:8b:f0:24:
37:8f:53:68:11:9a:5c:0e:b3:cb:a0:85:a1:46:19:
76:64:fe:78:b9:ab:1a:72:a9:aa:5e:1e:8d:75:7a:
e4:bb:1f:79:94:f0:f7:86:ec:06:81:16:9a:7a:18:
ee:96:0d:95:2b:8a:13:ac:81:a4:7b:dd:9d:6e:26:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B7:5B:CB:97:FA:17:94:A9:46:27:A2:6E:FA:11:68:2E:B0:81:81
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Srdby5f6F5SpRieibvoRaC6wgYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7700::/29
Signature Algorithm: sha256WithRSAEncryption
41:7e:05:d2:6c:e4:a5:94:04:da:bb:43:6b:5a:ba:4c:f5:9c:
21:2d:c6:58:76:1c:02:97:bb:0f:ac:5c:eb:9e:2f:bd:70:f5:
39:7c:a3:5e:12:89:30:2a:e8:fc:d1:52:4d:b2:18:89:ab:58:
20:2f:1b:06:7f:77:42:6c:17:ad:a9:ed:de:44:a9:d5:43:ad:
f7:4d:bc:70:f0:14:8f:30:4f:44:15:4c:81:4e:b1:51:c3:ca:
8d:ff:0f:c9:f7:16:65:28:72:5e:87:d9:a1:44:66:6e:14:ca:
30:b0:0a:76:0c:72:3d:cc:f5:d3:98:78:f9:89:07:b5:03:58:
f5:1b:9e:81:04:42:66:86:6c:22:dd:a5:6c:5a:31:ff:73:52:
f0:6a:48:5f:a7:dd:9d:11:26:69:85:99:16:cf:da:8c:67:28:
5d:0d:35:b1:20:ce:37:d9:0f:af:d5:a3:3c:57:20:6c:28:10:
9f:73:6f:81:94:c0:66:bf:ed:ea:d8:0d:56:2a:68:e8:54:4d:
a8:89:eb:87:75:5a:d4:09:1d:14:ee:8c:92:28:fd:dd:f9:95:
75:60:53:20:27:a1:1b:78:fa:7a:64:7c:39:38:43:95:23:14:
15:82:4a:ca:71:71:b1:35:ae:81:76:26:de:1d:45:00:07:b8:
e8:10:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:35 2024 by rpki-client on console-ams.rpki-client.org