Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EUt9qmJb_37Goiwtb2PkLvKfJ4I.roa
File: EUt9qmJb_37Goiwtb2PkLvKfJ4I.roa (raw, json)
Hash identifier: iNYnbvalU7k1KllzvqwzkjuKLDm7yBtEJFdsTG2m9AM=
Subject key identifier: 11:4B:7D:AA:62:5B:FF:7E:C6:A2:2C:2D:6F:63:E4:2E:F2:9F:27:82
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: A8EA36
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EUt9qmJb_37Goiwtb2PkLvKfJ4I.roa
Signing time: Sun 05 Jun 2022 20:00:20 +0000
ROA not before: Sun 05 Jun 2022 20:00:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208548
IP address blocks: 2a12:bec0:7400::/40 maxlen: 48
2a12:bec0:40::/48 maxlen: 48
2a12:bec0:746b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11070006 (0xa8ea36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 5 20:00:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=114b7daa625bff7ec6a22c2d6f63e42ef29f2782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:60:be:8e:8b:fb:7d:e0:2e:6b:b0:9c:79:
b6:ab:0f:6d:9e:6e:95:0d:f0:37:be:24:d6:7a:e2:
23:71:c4:43:87:ba:3b:26:42:8b:ae:80:7e:a1:66:
a1:b7:3e:b9:9f:ae:b1:58:a2:b3:40:99:88:08:d1:
2a:3b:94:22:69:df:b3:7f:c0:de:f8:68:9c:a3:6a:
a7:30:25:15:56:55:7e:18:46:00:23:e9:e8:60:2a:
db:81:56:be:9e:34:39:f9:e7:e1:b9:4a:76:44:bd:
de:51:d9:ce:0b:89:70:0a:8c:fb:8a:f9:ca:56:66:
9f:00:dd:6b:b3:b9:b0:85:09:41:50:a6:50:f0:6d:
eb:d2:3f:75:b5:46:ff:4e:5b:04:99:70:4c:92:21:
61:6a:d2:b7:d5:b4:ae:69:39:03:d3:89:ac:d1:f3:
07:4a:2b:36:88:a9:9d:42:3d:f8:a5:d6:6c:7e:53:
05:66:e1:85:c5:00:e6:9d:11:32:d4:15:1f:a8:3a:
9d:33:76:12:c4:47:d0:4f:13:34:1d:da:03:fb:2b:
8c:91:60:b7:3d:67:2c:48:85:c2:4e:81:a8:a3:7f:
c2:9e:8b:f0:28:12:ed:5f:59:c7:08:08:d2:f9:77:
3f:b1:34:97:85:4a:ad:a8:f8:b3:90:5e:06:eb:fa:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4B:7D:AA:62:5B:FF:7E:C6:A2:2C:2D:6F:63:E4:2E:F2:9F:27:82
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/EUt9qmJb_37Goiwtb2PkLvKfJ4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:40::/48
2a12:bec0:7400::/40
Signature Algorithm: sha256WithRSAEncryption
b5:6d:f1:5f:62:e4:52:3d:8d:4c:a7:b6:1d:bd:54:5f:06:ad:
05:84:31:38:25:5a:fd:4a:db:f9:dc:9f:29:cc:7b:79:dc:34:
5d:a5:ee:bb:3f:05:f9:19:1b:67:cc:2f:86:33:5c:95:75:19:
75:6e:01:73:e1:57:9a:10:d0:79:ae:24:58:71:e9:c3:fc:3c:
e2:e9:8e:17:8b:be:dd:f8:cf:12:30:c3:50:19:95:6e:65:ed:
d5:00:0c:34:7e:ee:57:21:d0:d9:fd:75:80:0b:3e:88:3d:cd:
9f:87:b4:90:42:92:af:bf:bd:0a:35:98:b5:fc:d1:74:86:97:
93:08:55:5e:e6:91:bf:73:71:eb:c5:c9:21:73:0b:c5:16:98:
f4:3a:ab:bc:9c:48:5a:02:f0:cc:cc:45:f8:fc:30:cb:74:79:
c7:3a:b2:6a:d8:db:96:52:66:64:af:de:eb:b1:8f:92:c8:3f:
3a:24:36:eb:6f:98:03:1c:16:4d:49:0f:18:13:ad:19:91:24:
df:03:61:d4:54:9a:0d:82:98:c6:41:e5:21:02:ff:b8:99:d1:
4a:48:86:b2:87:42:23:45:dc:a2:82:33:2d:66:78:ae:5f:f6:
c0:69:87:ec:c9:93:a2:fc:b5:2f:55:74:34:4a:0f:8b:e7:3a:
5e:5d:b4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org