Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/70YtLZUhFjdTnM7WtRp2RrcR54c.roa
File: 70YtLZUhFjdTnM7WtRp2RrcR54c.roa (raw, json)
Hash identifier: fbCFFn3QE8AfifivgxSXwdag8kvfs7QF/KKGe54RVFI=
Subject key identifier: EF:46:2D:2D:95:21:16:37:53:9C:CE:D6:B5:1A:76:46:B7:11:E7:87
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0FDAFF4D
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/70YtLZUhFjdTnM7WtRp2RrcR54c.roa
Signing time: Sat 01 Jan 2022 14:59:38 +0000
ROA not before: Sat 01 Jan 2022 14:59:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31798
IP address blocks: 2a06:e881:3200::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266010445 (0xfdaff4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 1 14:59:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef462d2d95211637539cced6b51a7646b711e787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:76:76:13:ff:8b:b4:f5:8f:ef:d4:ab:33:60:
38:88:c5:97:70:1c:bd:e6:4b:05:15:aa:0f:d4:d4:
48:22:42:26:b9:7c:c4:91:56:01:7d:b1:33:06:dd:
b9:5e:2f:f7:12:f0:ba:62:77:4c:e2:04:51:9d:c6:
df:e5:f6:db:34:27:a1:6d:74:bc:ca:55:0d:25:ec:
ec:0f:b0:ea:77:88:14:cc:19:0a:7f:4f:a5:4f:24:
8a:36:fb:48:60:39:a5:d9:ee:5b:f7:68:c4:98:c6:
95:47:d4:8a:84:9c:82:8e:29:26:4b:cb:b9:0e:08:
9d:0b:14:3e:14:e6:50:d2:a4:2f:46:12:00:03:7d:
cd:39:38:bc:3c:bc:e5:6c:6e:61:92:8f:a4:7b:97:
56:f1:b3:c6:c5:de:05:6c:0b:9c:18:a1:ac:75:90:
a3:66:85:01:c6:d8:07:be:9f:02:df:af:c3:9f:5c:
77:a2:24:ae:d7:d2:ba:e6:57:94:75:5c:16:35:25:
bf:b4:bc:ca:2d:11:70:2f:2c:9c:2a:c6:29:aa:96:
c0:6e:d1:ce:b1:b4:36:a1:c4:a3:ed:4a:fc:4a:c6:
5b:82:6c:78:50:19:e2:2e:10:97:48:b4:7e:11:d5:
de:9b:0d:7a:3e:9c:80:a4:41:12:90:f1:25:28:46:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:2D:2D:95:21:16:37:53:9C:CE:D6:B5:1A:76:46:B7:11:E7:87
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/70YtLZUhFjdTnM7WtRp2RrcR54c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:3200::/44
Signature Algorithm: sha256WithRSAEncryption
93:71:8b:2a:64:bc:27:97:6e:93:2e:d1:ea:4a:37:e4:22:fe:
88:66:6e:04:4f:f0:65:ef:be:9b:9c:f5:ed:92:36:36:0a:06:
73:fe:05:d8:68:bb:7c:b1:f5:e7:87:4a:cc:a3:22:b6:fe:30:
f6:1b:c5:d1:ec:ff:8d:bf:3b:93:e2:f5:3c:fb:41:86:64:03:
28:54:13:55:4e:1b:9a:7c:dd:83:8c:ce:46:d5:a7:b9:29:d2:
c9:57:c5:a8:bf:3f:24:fc:2b:e3:0c:7f:2a:20:86:d1:2c:d8:
9f:10:4c:c6:0a:80:a0:6f:b1:a4:d8:1e:9e:f4:01:bc:3c:07:
2c:80:7d:31:63:61:39:1a:89:31:ae:d0:62:18:36:df:12:10:
b2:e7:26:84:bf:39:be:f8:d1:c4:37:bf:17:56:6a:96:1e:aa:
e2:5c:b4:37:be:55:b5:d6:7f:22:27:aa:ee:51:1d:1d:14:13:
82:83:4c:fb:e3:51:87:2d:37:ea:37:5d:05:84:23:15:fd:13:
3a:b0:fc:64:16:ea:fc:85:35:2e:d9:da:db:32:7d:16:de:12:
7a:46:86:82:0a:d5:e7:6c:16:64:6b:4d:35:4b:31:52:4b:d6:
b9:60:42:12:0b:af:ce:d5:ce:37:01:dc:da:da:f4:da:e0:ce:
5a:b2:86:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:40 2024 by rpki-client on console-ams.rpki-client.org