Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SIJ6piXvxZ1KOFTaYQ6LJ4b5i9w.roa
File: SIJ6piXvxZ1KOFTaYQ6LJ4b5i9w.roa (raw, json)
Hash identifier: BKKJf1vhRqWjEErsfCSxnsihXpnPVdbarP/Y2WwSQHQ=
Subject key identifier: 48:82:7A:A6:25:EF:C5:9D:4A:38:54:DA:61:0E:8B:27:86:F9:8B:DC
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16ECFEFB
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SIJ6piXvxZ1KOFTaYQ6LJ4b5i9w.roa
Signing time: Sat 01 Jan 2022 12:01:45 +0000
ROA not before: Sat 01 Jan 2022 12:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210226
IP address blocks: 128.0.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384630523 (0x16ecfefb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48827aa625efc59d4a3854da610e8b2786f98bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c7:a1:48:a5:17:ec:47:24:84:0a:89:fc:1b:
11:4f:70:9d:b3:b2:9a:ad:68:ca:ea:09:bd:97:ad:
35:93:88:44:7c:91:f2:e7:e7:f0:81:23:42:67:75:
8a:ad:fd:a0:28:84:e7:3d:15:fb:33:d9:11:81:8a:
59:5a:90:79:d6:39:0a:1c:88:c0:b7:61:72:62:72:
4c:93:8d:da:9f:0e:50:23:ae:ea:25:26:0b:b1:b5:
0a:da:97:f5:09:89:67:f5:9a:13:b3:6d:41:fa:b3:
b3:e0:b7:9d:cb:98:4c:34:ce:65:a4:89:13:0d:c9:
39:19:81:96:10:94:16:cc:20:b5:56:57:4b:cf:38:
71:80:25:40:88:68:4e:be:ba:56:c2:b1:f4:a2:9b:
70:9f:be:66:f1:db:be:9c:b9:e0:d5:c3:4f:83:27:
7c:2a:72:00:9f:07:71:60:4e:7c:ec:30:45:0e:63:
23:a5:6e:5e:eb:ec:95:79:67:85:5a:a3:72:e8:0f:
8b:e3:06:b3:f1:21:d6:0a:38:9a:42:0a:48:89:b8:
1f:6c:bf:de:a4:f4:c2:10:d0:f4:86:0f:9f:30:30:
35:ad:7c:59:a2:92:08:4c:92:d2:12:5e:0d:d7:d9:
7c:0d:d3:b8:52:fa:d6:5a:b1:c8:e7:96:82:e4:5a:
fc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:7A:A6:25:EF:C5:9D:4A:38:54:DA:61:0E:8B:27:86:F9:8B:DC
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/SIJ6piXvxZ1KOFTaYQ6LJ4b5i9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.65.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9a:a0:61:4a:3d:a9:e1:02:0f:9b:df:bc:6c:43:69:83:1d:
ed:7d:ec:a8:d4:c8:d2:b8:fd:d8:8e:8a:e5:63:5b:ad:8f:59:
4c:12:be:4b:4a:35:92:cc:08:b3:c6:f8:2f:86:48:3f:c6:ad:
14:91:b5:ff:e8:b6:ec:3c:11:4f:bb:98:5a:23:a2:7f:89:98:
d3:0d:4b:a3:cb:0e:c0:44:69:63:9d:7d:93:01:76:3d:f6:e6:
07:b6:4a:73:b4:93:12:6f:32:8f:77:f1:e1:f9:dd:08:2d:e4:
f6:84:f2:15:10:f7:bb:b2:1b:1d:a5:8d:3e:3b:1a:be:65:24:
1d:19:7f:a5:20:be:1d:a0:31:51:ff:ad:81:f1:ca:86:e4:e5:
b5:d4:39:a1:92:63:19:5f:c4:9e:57:63:6f:12:9a:56:24:52:
26:04:e6:e3:34:9e:1b:99:d2:2b:85:4a:e2:5f:0e:9a:5c:76:
02:9e:cb:1b:02:c0:68:23:24:16:ae:41:9e:23:77:04:f8:35:
de:cf:b2:3a:3b:7f:a8:b1:2c:95:ad:a1:c4:15:e4:67:ae:29:
2e:da:7b:eb:6f:c4:1a:8f:8b:cc:76:9a:b6:5b:90:d5:e3:a9:
7d:02:49:27:fe:2e:20:e4:b1:66:94:56:2b:99:41:28:50:00:
16:64:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org