Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/vbUlG7_Gj4p0FqEoR5RZXt9LE70.roa
File: vbUlG7_Gj4p0FqEoR5RZXt9LE70.roa (raw, json)
Hash identifier: 1BwGqEEpPo4fUtg6QktvzDY+qflDhUk8MgJ0o+5Vjrs=
Subject key identifier: BD:B5:25:1B:BF:C6:8F:8A:74:16:A1:28:47:94:59:5E:DF:4B:13:BD
Certificate issuer: /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial: 1B181511
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/vbUlG7_Gj4p0FqEoR5RZXt9LE70.roa
Signing time: Fri 11 Feb 2022 13:00:37 +0000
ROA not before: Fri 11 Feb 2022 13:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 2a07:cc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454563089 (0x1b181511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Validity
Not Before: Feb 11 13:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdb5251bbfc68f8a7416a1284794595edf4b13bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:af:8c:69:8a:29:cd:27:83:59:15:da:0b:
5f:26:d3:c1:92:0c:46:34:3d:43:bc:83:f0:87:5d:
bd:05:ce:53:b0:6c:a7:de:03:62:3f:a8:07:37:d5:
30:db:38:83:3a:6c:bc:5a:a2:8e:13:18:06:eb:b9:
69:5a:16:86:49:01:88:74:3a:24:43:85:ce:bd:f9:
c8:fe:79:b0:04:ed:35:9f:27:1d:b3:f9:6b:99:f6:
2a:ba:7b:e7:07:53:e0:08:30:ef:ab:7f:51:57:06:
10:13:f0:4e:26:c5:10:29:0a:b5:14:40:28:49:a5:
f2:8b:53:aa:26:43:20:b2:45:94:d7:35:b7:05:b3:
b8:cf:d9:7e:21:81:aa:9b:18:04:c7:63:66:f0:61:
60:3d:ad:1b:4c:e3:ba:31:74:07:4c:f2:60:09:46:
d3:4f:ff:dd:1a:c3:ac:67:0d:60:2d:3f:75:e5:10:
a9:35:71:f6:66:73:c1:16:1d:fc:6b:22:95:6e:f8:
89:d7:72:ab:2e:6c:b3:a7:41:df:9d:4c:07:2f:34:
77:8e:09:a6:b1:e5:52:4c:3f:62:4d:8c:45:24:ad:
4e:ed:bd:5c:92:b6:05:92:be:3a:36:40:17:c1:cb:
ab:d8:ac:e3:fb:1d:02:7f:66:c2:eb:f5:87:db:df:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B5:25:1B:BF:C6:8F:8A:74:16:A1:28:47:94:59:5E:DF:4B:13:BD
X509v3 Authority Key Identifier:
keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/vbUlG7_Gj4p0FqEoR5RZXt9LE70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
95:64:31:2c:a7:b0:ec:d7:e3:3d:d4:b9:32:e0:a3:b9:b7:af:
fd:0d:eb:b4:f7:bb:4c:64:07:48:bb:7f:97:7b:3d:65:56:7b:
bc:9b:bc:35:04:9e:55:d9:ca:4c:d8:d3:53:a0:72:ff:7d:15:
28:f8:ea:33:3b:3a:9f:e7:53:c5:73:2f:40:fb:a6:3d:b9:71:
2c:d6:59:c1:83:c9:f8:f7:1c:2c:12:1e:c4:dd:74:4a:76:92:
bf:ba:37:c4:28:f4:00:09:35:a8:95:88:e9:e7:67:3f:99:e8:
65:ad:75:0d:6d:f8:84:ed:e0:fc:84:2e:ea:8b:a5:9f:12:b2:
e9:0e:8f:84:99:ae:d3:d7:5c:db:8b:73:11:55:0f:73:ab:74:
9b:1b:74:28:d0:5c:65:03:62:c7:de:14:da:07:e9:a4:18:15:
7e:7b:78:e9:75:e6:e5:4d:d8:93:73:3e:43:b3:09:25:96:da:
3a:fd:9a:1c:c3:47:5e:26:46:9b:ae:ea:ec:3d:50:c4:0f:8b:
62:7e:db:d5:2b:79:50:b3:77:0d:8c:29:16:77:aa:07:32:bb:
0e:00:71:66:c8:a5:51:89:cc:10:a7:80:f8:d6:98:34:22:7d:
70:03:c1:fd:71:a5:19:c7:43:7f:70:14:0b:0c:22:91:9a:d3:
cf:97:af:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org