Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/stnfBGpZyjeZO4-hVXwRKMoQmpM.roa
File: stnfBGpZyjeZO4-hVXwRKMoQmpM.roa (raw, json)
Hash identifier: ettd0leuQnljA3ViQnximqOv4CpgTDXikuFs1eocHkw=
Subject key identifier: B2:D9:DF:04:6A:59:CA:37:99:3B:8F:A1:55:7C:11:28:CA:10:9A:93
Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial: 0632C859
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/stnfBGpZyjeZO4-hVXwRKMoQmpM.roa
Signing time: Sat 01 Jan 2022 10:01:23 +0000
ROA not before: Sat 01 Jan 2022 10:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46997
IP address blocks: 2a02:7080::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103991385 (0x632c859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
Validity
Not Before: Jan 1 10:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2d9df046a59ca37993b8fa1557c1128ca109a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:64:52:77:cc:d9:ec:e9:f7:d5:2c:e9:82:
40:62:76:f2:24:ff:95:f1:0e:28:61:38:a1:b6:7a:
b9:ba:ac:0d:e2:a6:10:ed:49:18:6e:94:6a:40:12:
38:fc:b4:60:1b:1b:77:86:21:11:4d:e4:c9:94:a0:
af:8b:58:25:7c:cc:de:0f:6a:2a:1b:1c:68:0d:0c:
d4:d2:a5:ad:a2:71:32:3e:27:80:e4:d5:05:9b:ae:
e7:aa:05:c0:b3:f5:8f:15:61:66:35:f8:4d:36:a1:
be:22:fc:41:ec:e7:ff:ea:17:ef:0a:2b:00:39:be:
ee:77:de:3f:dd:39:43:74:02:fe:49:57:ea:26:78:
8a:8f:3c:18:22:0a:40:44:59:8e:d6:b3:3a:8a:a5:
0e:48:e0:eb:83:e8:23:f7:6b:97:62:dc:83:49:58:
a8:66:04:2e:ba:b9:76:11:c2:ca:44:6f:d9:f5:c6:
9a:71:74:0a:cf:dd:04:a5:6b:04:bb:7c:4b:a6:c7:
50:93:b3:04:33:8b:ce:64:67:d0:c5:87:d2:cd:70:
02:80:20:c8:e5:ec:c3:81:aa:44:15:c0:c5:24:65:
26:39:9b:e9:87:b0:ca:ec:63:fa:72:3d:5b:89:de:
02:ad:58:c9:4d:8c:1c:2d:bc:d0:c1:54:b4:7c:77:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:DF:04:6A:59:CA:37:99:3B:8F:A1:55:7C:11:28:CA:10:9A:93
X509v3 Authority Key Identifier:
keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/stnfBGpZyjeZO4-hVXwRKMoQmpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7080::/48
Signature Algorithm: sha256WithRSAEncryption
23:fc:56:f7:d9:83:17:0e:71:bb:d8:d7:2e:3f:d2:8d:7f:75:
58:55:13:0c:a3:ad:0d:ac:90:a6:61:64:86:ee:06:7d:88:52:
80:e9:c7:0b:02:7f:5c:1e:58:c0:a9:ff:bc:59:8a:58:ad:b8:
1e:9b:18:1e:54:7b:74:8f:92:56:1f:74:f0:ac:f3:96:76:f9:
56:32:85:c8:f3:98:90:8f:89:19:b2:a6:87:c9:6b:9d:d0:c5:
20:19:e9:91:eb:86:a9:1e:b6:89:36:77:a9:e2:be:4c:73:a2:
c7:ef:56:5b:2d:8f:c6:a8:a7:b2:c6:b5:f4:8d:58:2e:f4:1a:
6f:f7:60:7e:42:26:51:31:f1:09:cf:58:a3:91:11:47:fa:f3:
54:f6:2e:7b:7f:ad:e0:de:71:91:ce:45:73:07:66:cc:cf:43:
86:51:16:9e:bd:9a:af:00:b8:47:c4:35:94:bf:53:76:40:60:
b4:23:2a:48:e4:45:30:8e:ea:88:cd:1e:04:2d:e9:ee:28:33:
f9:09:6c:dc:8b:12:de:19:f0:15:8f:ab:02:88:cd:84:67:3f:
b7:cd:77:74:1a:9a:8c:1f:d8:54:3f:a9:58:24:c3:cd:a7:dd:
fd:f2:81:08:a7:88:98:39:ae:38:c2:ef:bb:ae:bd:47:95:b1:
be:6c:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-fra.rpki-client.org