Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/9bPvrb09NlzecEn5poTZc6TRTWE.roa
File: 9bPvrb09NlzecEn5poTZc6TRTWE.roa (raw, json)
Hash identifier: edOoF7fgtUNT46D3ezaKPCMj4SyMbf1ULvS9zx0k04c=
Subject key identifier: F5:B3:EF:AD:BD:3D:36:5C:DE:70:49:F9:A6:84:D9:73:A4:D1:4D:61
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 084A19EB
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/9bPvrb09NlzecEn5poTZc6TRTWE.roa
Signing time: Tue 26 Apr 2022 13:13:11 +0000
ROA not before: Tue 26 Apr 2022 13:13:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 2a0e:9846::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139074027 (0x84a19eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Apr 26 13:13:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5b3efadbd3d365cde7049f9a684d973a4d14d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:44:f0:66:97:5c:65:0e:7e:21:af:82:1d:
26:1b:37:56:9e:c0:a1:72:cd:8b:d0:71:90:47:47:
4f:a3:68:be:ea:a5:f0:f2:87:42:d9:24:cd:b8:a3:
22:d3:4f:16:6a:53:35:35:e6:79:69:15:7c:1e:e4:
91:b3:2e:6e:81:b0:03:61:2d:31:6d:cb:2c:63:69:
e4:f2:b4:6f:97:86:4f:65:27:ce:5f:30:8a:ba:de:
8e:7d:11:79:ac:a1:57:0b:c6:27:74:df:f9:5b:4b:
a8:f6:d9:06:b1:38:76:67:b6:08:e4:e5:e0:17:25:
a3:fe:f7:92:03:f2:75:35:00:9d:ee:57:a2:3e:7f:
ce:8a:4e:d0:41:5f:9a:78:13:06:4a:a7:fa:66:e0:
f7:15:fa:4e:16:2f:5d:6b:a6:92:7c:f7:6c:8a:96:
23:dd:0d:90:f4:60:66:d3:da:c4:a8:97:ff:06:00:
8e:6b:c7:07:8f:8c:e6:84:af:6d:64:be:82:80:83:
41:fc:a0:63:2b:a5:db:79:1b:68:96:86:1d:7a:aa:
56:be:8c:99:8f:cd:ef:54:a7:40:e3:9a:80:8e:a8:
91:46:44:ba:d9:48:2b:ce:7f:b2:69:a5:d2:0b:c3:
29:15:45:c0:60:a8:e6:fc:02:34:f9:1c:45:73:12:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B3:EF:AD:BD:3D:36:5C:DE:70:49:F9:A6:84:D9:73:A4:D1:4D:61
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/9bPvrb09NlzecEn5poTZc6TRTWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9846::/32
Signature Algorithm: sha256WithRSAEncryption
80:40:8f:1b:ac:10:a1:af:a9:cd:c9:85:3d:1a:84:8a:5b:c3:
62:c8:17:a8:80:eb:a3:3a:d0:b2:68:25:b1:10:f4:ae:b6:1e:
ed:90:c3:ad:3d:79:f1:ce:c1:60:72:dc:1f:d8:b2:4d:f7:fe:
98:d8:c9:d8:c2:68:ee:d1:bb:15:10:6c:47:e5:eb:e1:86:0c:
6e:5c:0d:8d:e5:59:d2:ae:5e:65:5d:4a:15:3c:93:88:82:e3:
69:07:c5:5c:5e:b5:64:0f:84:24:66:54:86:4b:46:2d:99:c5:
0d:27:ca:d3:02:4f:32:db:24:ce:5e:e3:fe:47:33:b8:d1:8d:
d9:33:bd:79:df:41:8f:55:0a:12:b1:5e:68:a3:a8:0c:78:2e:
7d:b9:3a:ff:2b:6b:68:20:f4:f0:93:42:28:3e:79:ac:1b:57:
94:f6:3e:e6:81:bc:6f:9c:0b:37:31:64:d3:92:fe:d9:96:ce:
7d:06:95:c6:4a:23:4a:8e:95:c1:f3:74:bd:c8:95:8e:4b:0b:
67:30:ea:47:6c:37:f4:f3:a7:ac:f1:e7:9c:bc:02:ab:e9:ee:
56:99:6d:69:d1:54:26:63:73:aa:6d:c1:7d:0c:8c:81:67:30:
ba:91:53:c3:31:93:bd:c0:cc:f6:74:f5:47:08:88:45:2c:3b:
93:6a:e5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org