Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Eaij2soa-dBnjAN8X-lm51lz4h4.roa
File: Eaij2soa-dBnjAN8X-lm51lz4h4.roa (raw, json)
Hash identifier: YUlFbo5MIjJw2/kre9XWJkaGz9OqH6njU8BBv62ikjA=
Subject key identifier: 11:A8:A3:DA:CA:1A:F9:D0:67:8C:03:7C:5F:E9:66:E7:59:73:E2:1E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 9D277A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Eaij2soa-dBnjAN8X-lm51lz4h4.roa
Signing time: Fri 03 Jun 2022 04:14:20 +0000
ROA not before: Fri 03 Jun 2022 04:14:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208548
IP address blocks: 2a12:bec0:7400::/40 maxlen: 48
2a12:bec0:40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10299258 (0x9d277a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 3 04:14:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11a8a3daca1af9d0678c037c5fe966e75973e21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:44:d9:45:35:c1:a3:1f:89:97:17:d7:7a:
b3:cf:32:38:10:33:d0:a7:ae:91:4f:27:fc:8a:4d:
c0:c3:43:c4:3b:21:62:3b:a3:e5:bd:08:17:35:f3:
e9:65:d7:73:2d:c9:e3:26:cc:88:aa:94:61:c7:ad:
03:66:81:44:0a:fa:6d:dd:67:2b:53:3f:fb:11:56:
f3:3d:11:d3:ae:61:e5:b2:af:fc:a8:e1:1e:93:ef:
9e:0a:e1:e9:b9:ec:51:c5:63:c1:e3:6b:1e:9a:de:
43:34:f5:3c:3d:7c:a2:5c:20:97:12:af:36:7f:56:
2d:f1:c1:ea:2f:1b:f5:8a:4e:67:f8:72:7e:be:b8:
b6:7f:9f:d7:a2:e3:00:0b:1f:42:7e:45:6e:56:a1:
18:1b:e3:b4:70:a7:93:95:ea:47:b9:37:31:94:af:
79:3e:c4:d1:14:83:ae:83:a5:21:c4:b6:e9:27:f7:
81:fe:ee:79:75:11:8d:d1:53:41:08:a3:55:8f:f5:
2e:42:0c:84:09:02:55:8b:9d:68:18:32:b3:3c:95:
58:85:84:91:de:6a:29:af:3e:21:cc:6c:a2:14:2d:
ec:6a:f0:85:10:8b:0d:95:27:08:9f:d1:ee:19:b7:
ea:dd:0a:b3:8d:df:2e:26:62:39:75:f7:c2:bb:55:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A8:A3:DA:CA:1A:F9:D0:67:8C:03:7C:5F:E9:66:E7:59:73:E2:1E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Eaij2soa-dBnjAN8X-lm51lz4h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:40::/48
2a12:bec0:7400::/40
Signature Algorithm: sha256WithRSAEncryption
3e:02:f0:c5:bb:c3:60:9f:51:23:cb:0f:13:bc:91:e3:98:05:
68:7f:d2:39:d4:12:81:65:d4:1f:ae:96:60:1d:68:54:a4:d2:
0e:69:28:28:b6:4c:bc:fa:4a:c5:68:28:0d:8d:a7:f9:b2:06:
6c:3e:22:7b:33:31:25:5e:fb:6b:2f:fc:16:1c:4f:8d:db:73:
fb:08:69:f0:04:a4:42:ab:ef:ff:51:7b:97:92:ea:4b:cc:b0:
0f:23:41:8a:bc:72:43:4e:02:4e:97:75:f4:8e:f8:17:d3:10:
c3:a6:77:ea:e3:10:7e:8d:91:62:27:be:d2:d9:31:c4:6e:52:
82:df:fe:d8:1e:9c:3a:6e:74:79:27:a9:c6:35:24:f5:c7:2d:
14:7f:ee:23:f4:2c:e1:f5:2d:a5:be:1a:f7:94:a1:be:d1:fc:
2a:cc:70:bf:93:c7:34:2c:74:0a:46:d2:c0:01:1c:c1:5b:db:
d3:41:8c:70:4c:32:60:0f:85:aa:77:b0:92:de:69:ca:93:43:
67:08:eb:84:b5:36:c8:43:5a:f2:3e:04:1c:49:e9:df:27:dd:
08:7e:ec:5e:73:20:ea:8e:ae:31:2c:d4:c1:3d:ee:b7:db:24:
ce:0d:8f:37:05:ad:1a:93:e4:db:c4:1d:e3:6d:2d:9f:ac:64:
6b:66:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org