Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/ESxd__jteU-dCKnHkcoT-RUIwMc.roa
File: ESxd__jteU-dCKnHkcoT-RUIwMc.roa (raw, json)
Hash identifier: O46kG7qkunKksSd5CYFDEP040HhdEdi30P0jroOgax8=
Subject key identifier: 11:2C:5D:FF:F8:ED:79:4F:9D:08:A9:C7:91:CA:13:F9:15:08:C0:C7
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 0181CF8CA006A517457872772CE92A395543
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/ESxd__jteU-dCKnHkcoT-RUIwMc.roa
Signing time: Tue 05 Jul 2022 18:08:28 +0000
ROA not before: Tue 05 Jul 2022 18:08:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395747
IP address blocks: 2a06:98c0:1c0b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cf:8c:a0:06:a5:17:45:78:72:77:2c:e9:2a:39:55:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jul 5 18:08:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=112c5dfff8ed794f9d08a9c791ca13f91508c0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:dd:48:9e:bb:79:ba:3e:25:c0:27:1b:db:
d8:f1:b0:ed:42:ba:3c:55:cc:de:92:65:ed:e2:ee:
61:a6:3d:2f:d3:44:33:ea:8a:41:51:af:ca:51:4f:
24:67:05:79:3e:f9:f7:f6:81:28:4e:f9:98:d6:c7:
4d:91:3b:25:0d:05:0e:2a:36:d9:47:6f:7c:8a:eb:
59:fd:7b:09:c1:67:d3:b9:43:bf:eb:d7:74:12:61:
ce:71:6a:28:8e:d5:e8:a3:ab:2c:fe:da:52:d7:0d:
42:5b:d7:7b:a5:33:82:e0:c2:20:62:f6:0b:dd:08:
65:02:96:d2:d5:95:62:36:52:78:70:fe:5d:4a:c1:
9e:ce:40:bf:85:f2:3d:a1:ce:9a:dc:b2:d3:65:81:
01:c8:ab:87:4e:9f:e6:94:42:1c:b3:53:5f:3e:e6:
78:ea:31:39:aa:e2:e9:68:59:f1:e0:83:0e:b3:ca:
d8:58:b8:b9:eb:86:ae:ac:e1:18:f0:0a:d5:73:ad:
6e:b8:ea:5a:98:43:32:10:e2:f4:ae:e0:4b:26:58:
63:d5:7e:24:3b:4e:15:95:bf:50:6f:f3:65:65:df:
0b:79:28:05:7a:db:07:df:44:29:d0:da:cb:2a:c8:
3c:7f:e0:8d:f9:e5:63:94:59:87:ba:8d:3f:b7:05:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2C:5D:FF:F8:ED:79:4F:9D:08:A9:C7:91:CA:13:F9:15:08:C0:C7
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/ESxd__jteU-dCKnHkcoT-RUIwMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:98c0:1c0b::/48
Signature Algorithm: sha256WithRSAEncryption
71:50:b0:58:9b:33:f2:bb:85:9e:3b:ef:ad:6f:21:0e:2b:c4:
f4:54:a6:b6:8d:76:22:5b:aa:0b:4d:27:b2:17:64:60:f8:35:
66:9d:d7:51:56:88:a8:92:89:f6:11:f5:b2:a5:24:45:05:f7:
f9:07:dc:b8:f7:16:ad:0b:45:b4:be:ae:cc:7d:6c:7b:2f:70:
a0:53:bc:9f:cf:f4:ab:5d:ac:47:15:4b:b7:46:ca:c1:fb:fb:
db:98:75:b2:e9:f4:0d:b9:34:21:3c:f7:9f:87:d1:68:2b:bc:
4f:b9:2a:c5:b7:d8:7d:f9:05:e4:ef:47:66:e5:8c:4b:a1:f9:
85:44:05:57:65:f1:bc:5d:38:0d:d6:c8:e1:5a:0a:14:e8:31:
4c:d7:fe:07:8d:6e:76:01:0b:ab:9f:2c:f5:ca:59:25:44:da:
55:f1:95:b3:3e:9d:0a:97:8d:b4:45:5c:59:2c:df:f8:b5:1c:
9e:fd:31:25:c8:8d:79:a3:cc:30:ec:ba:db:06:da:e2:6c:82:
ac:d4:a2:ef:c1:a3:0a:06:25:e8:e5:e2:18:d9:9a:70:ac:6b:
a4:21:13:9f:61:fd:a8:fe:94:99:27:a1:32:d0:59:8e:94:87:
34:11:77:06:fd:a2:21:6b:cf:3c:72:1c:87:da:df:c1:e1:53:
e7:82:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:15 2024 by rpki-client on console-fra.rpki-client.org