Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/7PPYMGDWLjw4LyfMGS5J9xKEN14.roa
File: 7PPYMGDWLjw4LyfMGS5J9xKEN14.roa (raw, json)
Hash identifier: 72b+92jHyOLS+uB3qnxhIn/MOP6n+ovq4ytzMW21G7A=
Subject key identifier: EC:F3:D8:30:60:D6:2E:3C:38:2F:27:CC:19:2E:49:F7:12:84:37:5E
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 088DB503
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/7PPYMGDWLjw4LyfMGS5J9xKEN14.roa
Signing time: Sat 01 Jan 2022 04:59:14 +0000
ROA not before: Sat 01 Jan 2022 04:59:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20853
IP address blocks: 2a0a:2307:f000::/46 maxlen: 48
2a0a:2307::/47 maxlen: 48
2a0a:2306:f000::/45 maxlen: 48
2a0a:2306:e000::/45 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143504643 (0x88db503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: Jan 1 04:59:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecf3d83060d62e3c382f27cc192e49f71284375e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:b4:9d:4a:5b:f5:25:79:b5:08:66:1c:8c:
0d:26:ea:a0:de:4f:44:c0:60:ea:ab:a1:a0:96:52:
c3:0e:17:4c:29:80:4b:0b:ea:be:f5:b6:62:a5:43:
4e:6e:34:2f:be:cc:34:f8:8d:4d:f6:50:e0:a5:99:
58:0a:1d:9e:74:02:35:71:6e:f9:24:f0:ee:02:a8:
86:9f:41:ac:c5:5a:41:a1:f0:15:7e:78:b7:ba:59:
fa:da:13:2c:93:b8:3b:f1:2b:76:11:c1:bc:e5:72:
d8:86:6b:bb:cc:11:1d:8d:62:e9:f3:43:9d:3f:5a:
46:0d:b6:87:98:92:bd:e1:bc:5a:0a:56:02:7e:d7:
0c:d4:09:39:fa:19:d2:b1:17:6f:12:ac:e3:f1:d0:
11:e4:83:13:9f:09:df:ce:a2:72:df:35:2d:8b:aa:
0f:49:5c:e2:d4:a1:db:32:47:33:9b:9d:61:ac:7c:
87:e4:03:08:98:28:bd:1d:c0:08:a9:59:a1:b5:56:
6d:9a:b7:69:f4:04:e8:fe:6a:bd:e6:61:95:41:e2:
99:84:81:52:c5:f3:cf:f0:d8:97:b3:06:bf:3d:0c:
54:d0:ee:aa:c2:08:4c:6b:d1:4a:2e:e0:5e:be:fd:
38:11:cf:b6:e5:70:70:8e:6c:c5:a1:34:44:82:dd:
4c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F3:D8:30:60:D6:2E:3C:38:2F:27:CC:19:2E:49:F7:12:84:37:5E
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/7PPYMGDWLjw4LyfMGS5J9xKEN14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2306:e000::/45
2a0a:2306:f000::/45
2a0a:2307::/47
2a0a:2307:f000::/46
Signature Algorithm: sha256WithRSAEncryption
0b:bc:76:a0:5a:09:ea:98:c8:f3:4b:03:6a:84:26:e6:bf:57:
88:d4:40:23:5d:8d:27:16:46:75:03:5b:85:a9:99:ae:28:66:
4a:e5:de:2e:a4:bb:a6:b7:e1:cf:38:5e:76:5f:a3:4a:49:40:
e4:ce:aa:00:bb:6f:5b:bb:b1:74:22:10:ee:7b:98:c7:f0:7c:
eb:62:5d:b4:29:b6:a8:e6:ae:29:ad:15:d7:82:d3:9d:3e:ea:
d9:ef:56:23:b7:73:b4:06:a4:79:de:81:37:25:2b:26:fd:b2:
8c:b6:47:84:ef:f4:30:74:79:e3:ea:65:3f:62:9c:e0:dd:f2:
21:ea:6e:a8:f4:79:03:8f:66:02:36:a9:32:c4:d0:8b:d5:77:
89:18:1e:9d:30:84:d7:14:f7:fb:e7:91:9f:7d:c7:72:02:a4:
c1:2e:d7:fe:01:6f:cf:8c:f9:75:65:04:63:5a:ac:bb:a6:74:
1a:6d:0c:03:77:da:24:9e:56:c6:6f:fa:7b:87:60:ad:0e:4c:
b1:65:d1:3b:72:82:36:51:ed:e5:b7:e9:17:32:b2:d7:49:b3:
3c:c1:e0:12:c0:08:2a:67:fe:2e:61:95:cb:20:ad:e6:e8:2c:
62:05:c6:4a:b6:e3:a9:fb:3c:b6:9f:bf:64:60:c9:80:a6:13:
2d:64:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org