Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bINLcUnODt4k9vB1hQka1VDzawQ.roa
File: bINLcUnODt4k9vB1hQka1VDzawQ.roa (raw, json)
Hash identifier: lSt2ZT2nScfT9ep1GunT+Vust3Wy2eIfBTGKrRgl7bM=
Subject key identifier: 6C:83:4B:71:49:CE:0E:DE:24:F6:F0:75:85:09:1A:D5:50:F3:6B:04
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01840781B69E3AD4D24717011AEDFC5CACFB
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bINLcUnODt4k9vB1hQka1VDzawQ.roa
Signing time: Mon 24 Oct 2022 01:00:52 +0000
ROA not before: Mon 24 Oct 2022 01:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52041
IP address blocks: 2a12:bec0:7000::/48 maxlen: 48
2a12:bec0:b00b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:07:81:b6:9e:3a:d4:d2:47:17:01:1a:ed:fc:5c:ac:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 24 01:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c834b7149ce0ede24f6f07585091ad550f36b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:44:ae:35:96:d1:19:12:3f:e8:8c:c5:30:
e8:0a:2b:1b:18:7f:ab:d6:71:74:e4:16:c4:b3:d0:
51:3a:22:64:00:4f:3b:62:46:ce:97:82:82:01:f5:
04:3b:4a:50:7f:80:f2:6b:ce:83:73:85:52:0d:b0:
b0:ab:14:ac:59:b8:e1:0f:37:74:b6:45:ea:fa:ef:
74:30:8b:e8:f9:0e:42:27:a0:a8:be:50:c9:76:22:
8f:94:be:fb:c0:16:a9:f0:62:4a:e9:94:47:95:c9:
a9:f5:fa:7d:28:cf:78:15:7f:97:49:57:61:19:f6:
c6:f1:fa:bd:b2:de:37:53:84:26:9f:ba:dd:fd:17:
65:6a:60:a6:a0:33:78:d8:13:2a:4c:f9:c1:a2:82:
ab:ca:c7:c3:7d:de:79:ad:ea:dd:2c:58:fd:1f:f5:
24:d4:36:be:c3:ac:ee:60:7d:f3:f8:d6:f6:49:ea:
84:7e:c1:05:42:00:fe:29:51:a3:af:14:32:63:a0:
54:3a:30:ef:2f:04:32:e2:52:e2:a4:23:89:4f:35:
47:8b:7d:db:3e:12:17:98:06:b6:a8:dc:a7:47:82:
e3:17:c2:ae:4a:30:5e:2d:1b:d2:4d:29:41:e1:4b:
80:5c:26:27:c4:2c:b0:67:4d:ae:88:90:1f:0c:b1:
e0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:83:4B:71:49:CE:0E:DE:24:F6:F0:75:85:09:1A:D5:50:F3:6B:04
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bINLcUnODt4k9vB1hQka1VDzawQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:7000::/48
2a12:bec0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
23:2e:48:a7:f8:d9:c4:86:bf:cb:19:1c:b7:90:d5:12:71:32:
9b:c6:ad:a6:a9:6a:6f:6a:2a:7e:43:88:b1:c3:a1:1c:a1:c5:
c8:16:53:58:4b:72:b6:20:55:ca:d7:90:49:fe:a5:a4:6b:0a:
81:ad:b8:16:d6:e2:59:f7:ef:1c:9c:69:5e:91:ea:93:98:03:
38:e0:af:21:96:34:c3:6f:b1:63:c2:de:90:39:ce:1f:73:cb:
4c:63:d0:3a:05:ec:bb:82:20:dd:19:22:bc:47:54:3f:cb:a8:
40:99:43:54:17:b8:22:4b:19:c3:eb:25:fd:f2:90:37:5d:68:
f6:57:21:56:07:b1:5e:95:60:6b:16:3a:93:a3:02:44:60:c4:
d4:5d:69:b1:bf:e6:e1:e3:26:9f:8b:d8:14:6e:b0:dd:27:2a:
6a:be:39:c2:06:b3:b8:de:e3:c1:47:5f:2c:ea:d4:ca:b3:79:
4c:de:f4:75:04:0f:52:48:83:93:72:13:b7:f5:5b:5c:52:81:
bd:ff:2e:1a:c3:46:a3:5e:c0:e7:63:03:69:4b:de:4b:72:c3:
f2:79:02:00:6f:90:7b:97:ec:f3:ed:38:48:c1:b8:f1:0a:af:
3f:bc:fb:74:41:9d:65:2c:28:52:22:ea:d4:2c:f5:b3:a1:21:
b6:98:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org