Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/grTYu__bT-y3Mp1SBwActqo4nhI.roa
File: grTYu__bT-y3Mp1SBwActqo4nhI.roa (raw, json)
Hash identifier: od5lBaRSwvXKfWGDnwJXdtL2pZGuVUp9c0+41o5zaIs=
Subject key identifier: 82:B4:D8:BB:FF:DB:4F:EC:B7:32:9D:52:07:00:1C:B6:AA:38:9E:12
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 0181D426EA404518270E29E5040FA1612FD0
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/grTYu__bT-y3Mp1SBwActqo4nhI.roa
Signing time: Wed 06 Jul 2022 15:35:28 +0000
ROA not before: Wed 06 Jul 2022 15:35:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204471
IP address blocks: 2a12:d8c0::/40 maxlen: 48
2a12:d8c0:ff00::/40 maxlen: 48
2a12:d8c0:100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:26:ea:40:45:18:27:0e:29:e5:04:0f:a1:61:2f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Jul 6 15:35:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82b4d8bbffdb4fecb7329d5207001cb6aa389e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:8f:3a:16:86:38:ba:98:d1:5e:ca:2d:68:
6a:65:53:b9:5f:60:a0:b5:72:fd:7a:f7:be:f6:0a:
dd:a5:57:84:1a:23:a4:db:16:bf:23:7f:72:c0:4b:
e1:fe:77:06:5f:39:e5:cf:57:5f:f4:da:aa:e7:de:
fc:82:6b:e0:97:16:0a:94:52:b5:55:f0:cb:d6:ba:
0f:1c:82:22:f0:3c:13:2d:84:50:89:f4:3e:d7:a1:
98:2f:db:bc:cd:43:0e:cd:79:d4:7c:c6:ae:da:d6:
60:a0:c7:0c:d7:b0:11:98:56:24:31:b0:85:45:f9:
5e:68:10:0e:68:71:34:3d:fd:41:3a:e7:28:5e:9b:
42:e3:b6:8e:7e:24:58:c2:ba:57:39:a9:aa:55:cd:
9c:35:ad:7c:bc:0b:7b:63:c3:e8:68:bb:cc:e4:bc:
ba:a8:47:7c:01:76:ca:14:34:b3:a2:a9:72:2d:e7:
2a:fe:45:bf:33:e5:28:df:e1:0a:2c:9a:2f:cd:ab:
3a:5c:a6:4c:e3:2e:07:28:e9:61:dd:7f:4c:e3:79:
c7:83:c7:e8:75:c6:f9:c3:06:0f:7f:e5:1e:cd:fe:
8d:a2:12:24:16:a0:c8:55:cc:d2:6f:48:1b:66:44:
a0:c1:a2:40:c1:a1:24:e3:d8:2a:ca:7f:9d:d0:4b:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:D8:BB:FF:DB:4F:EC:B7:32:9D:52:07:00:1C:B6:AA:38:9E:12
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/grTYu__bT-y3Mp1SBwActqo4nhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d8c0::/39
2a12:d8c0:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
9a:ff:56:39:c4:f1:db:d5:18:91:61:19:0d:32:19:39:b8:1c:
0e:d2:cd:e1:37:9d:16:e1:4a:f4:31:fe:71:dc:00:2d:91:42:
52:1c:0b:70:a3:18:a7:f1:f2:ed:5e:1a:a0:7e:d6:54:3c:fb:
85:8b:1e:71:67:22:ae:55:b6:54:f0:1f:2d:5a:28:d8:56:88:
05:87:a0:55:44:7f:10:03:0a:a8:80:05:ba:9c:00:0e:1a:c3:
c5:ae:46:79:ac:14:9a:aa:a1:4d:15:78:ad:31:8f:f4:16:05:
ea:a9:e8:62:19:19:89:3b:ed:04:45:7a:a8:a6:61:a9:93:22:
e6:be:0d:66:e3:80:81:98:22:4a:0b:28:53:e1:f7:23:4a:50:
69:9f:9c:7f:66:2d:6a:e5:4f:c9:e9:44:45:71:d4:69:0e:a5:
16:fa:f9:86:27:c1:6a:a5:2c:5c:f4:23:5d:8e:79:d0:83:43:
cf:77:13:8c:3d:0f:43:d5:3d:8b:f4:5c:1e:10:ed:a7:0d:f0:
94:52:12:46:3d:a0:02:16:bd:9f:8b:10:b7:d2:a9:cf:61:20:
2b:1d:d7:72:1f:0d:d2:c7:2e:7a:01:f4:2f:e1:e6:e2:84:1b:
df:b3:b9:72:25:08:4a:0d:3c:b4:54:4e:3b:4e:45:3d:38:63:
c5:79:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:16 2024 by rpki-client on console-fra.rpki-client.org