Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/JOvY6yTxMvTf1o8fBI3gJ6avxvA.roa
File: JOvY6yTxMvTf1o8fBI3gJ6avxvA.roa (raw, json)
Hash identifier: 64M4Y99rs8eaJ/+vZ/Q7DxtBcWfREwakU5XKc/1Swp0=
Subject key identifier: 24:EB:D8:EB:24:F1:32:F4:DF:D6:8F:1F:04:8D:E0:27:A6:AF:C6:F0
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 089F3994
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/JOvY6yTxMvTf1o8fBI3gJ6avxvA.roa
Signing time: Sat 01 Jan 2022 02:51:50 +0000
ROA not before: Sat 01 Jan 2022 02:51:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51454
IP address blocks: 2a01:190:15f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144652692 (0x89f3994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 02:51:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24ebd8eb24f132f4dfd68f1f048de027a6afc6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:20:3c:d1:a1:29:4f:a3:da:91:dc:d9:85:
aa:eb:33:a8:bf:be:57:36:3a:9c:c2:33:aa:b5:e3:
de:38:48:ad:31:01:2f:cf:7b:9f:c0:85:2d:0c:01:
db:49:f2:1f:42:3c:a1:33:7f:01:9d:d0:b7:f4:25:
d0:f5:c8:7b:63:24:95:b4:3b:26:b7:46:c8:63:9a:
d5:c1:11:d2:99:e2:19:44:1f:5e:98:c0:c2:74:e5:
96:c3:f6:fd:9d:ae:01:c0:06:f6:20:a0:5f:0f:d7:
69:67:7c:b7:f2:2a:f3:94:70:47:74:ce:cb:32:fd:
ff:ef:37:a0:e2:dc:c8:6f:01:74:d5:4b:70:a2:c6:
65:24:50:47:59:8f:3b:95:9f:0a:09:6d:b7:30:94:
44:10:ed:74:c7:90:2c:58:4f:50:8c:96:18:02:47:
1f:e3:90:f5:f4:16:45:8a:4d:4b:c7:1b:c4:e1:72:
c3:d2:9a:b6:45:68:13:e0:a3:2f:36:fc:5e:a8:80:
e2:c3:ca:7a:da:79:67:04:23:9d:f5:3e:da:72:2a:
d1:13:98:3e:99:52:77:2a:e1:ab:3c:fc:b2:8d:25:
ca:9b:0f:46:c6:41:f7:4b:5d:9d:8a:88:79:cf:cc:
a9:2d:f8:74:f0:1c:e6:77:87:e4:e0:4a:56:f1:9d:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EB:D8:EB:24:F1:32:F4:DF:D6:8F:1F:04:8D:E0:27:A6:AF:C6:F0
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/JOvY6yTxMvTf1o8fBI3gJ6avxvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:15f::/48
Signature Algorithm: sha256WithRSAEncryption
da:d1:3c:34:2c:75:0a:bd:2c:ae:8a:b7:4a:91:a3:e1:f3:0c:
5a:6d:5a:f7:5e:1a:06:83:3d:7e:a3:43:72:ee:c4:47:8d:95:
3a:59:c8:6a:8a:55:58:ce:e8:35:26:f2:de:fb:e6:60:ec:fc:
35:10:e9:fa:b9:a0:cb:ca:5a:1b:ce:35:11:ae:6d:c9:40:b0:
36:65:a4:3c:80:e3:64:97:c0:a1:19:c0:c7:fa:36:b9:cb:9a:
b1:44:3c:15:ad:9f:59:53:55:3d:fc:80:d8:37:2f:53:01:88:
c2:9e:c6:7e:ae:2a:08:9e:1a:b6:9d:44:43:26:7d:fe:63:73:
39:b9:25:81:8b:8e:05:6f:9d:0b:37:98:55:e3:60:df:58:fa:
34:7e:40:70:ec:2c:9c:2b:31:8c:1a:4b:fe:fd:88:83:5a:55:
fd:c7:d7:c1:08:f3:57:86:dd:2b:2d:8c:46:a1:9b:10:c6:ee:
23:5e:6a:f6:56:98:bd:1c:f7:0b:1a:e8:b0:49:9e:7e:c1:27:
a0:00:76:9a:55:92:b8:53:68:c3:de:d8:21:18:d7:bb:d3:cc:
43:ee:c1:03:72:4e:df:88:08:67:a0:6e:8c:26:e8:87:2c:95:
4c:91:d6:37:a8:a1:3a:84:8e:2d:2a:04:c1:15:b0:00:1e:76:
84:7b:3a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:20 2024 by rpki-client on console-fra.rpki-client.org