Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/mF13NhIHf8HnOg1FnjYgogJPU_8.roa
File: mF13NhIHf8HnOg1FnjYgogJPU_8.roa (raw, json)
Hash identifier: 1vC7vuej/AsNB9G7hU6IhpIQ0888Fop/gs8BKG5EM+E=
Subject key identifier: 98:5D:77:36:12:07:7F:C1:E7:3A:0D:45:9E:36:20:A2:02:4F:53:FF
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0FDADA7A
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/mF13NhIHf8HnOg1FnjYgogJPU_8.roa
Signing time: Sat 01 Jan 2022 14:59:38 +0000
ROA not before: Sat 01 Jan 2022 14:59:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:e881:7700::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266001018 (0xfdada7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 1 14:59:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=985d773612077fc1e73a0d459e3620a2024f53ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:62:ed:51:14:fb:c5:ec:87:21:eb:73:53:
f1:a7:db:6b:e3:b8:ac:6d:e7:a3:9f:27:c5:41:bb:
4c:90:e4:3c:2e:d4:fa:a7:cb:2b:e3:11:2c:77:d9:
2c:32:b1:40:8b:3b:1a:40:ab:ff:dc:4a:01:ad:00:
e4:48:9a:61:f7:bd:91:44:29:b6:65:66:a5:30:33:
8a:2e:7f:f1:a8:ec:d3:c1:45:fb:b5:62:64:af:a2:
44:68:70:1d:db:63:08:73:0f:a8:b5:62:f0:20:a3:
a3:af:7c:42:98:c5:ab:03:f2:d2:61:c4:a9:f9:54:
ac:34:92:97:35:b4:85:97:67:02:9c:d6:7e:da:31:
b6:8f:3d:b7:e3:d7:39:bc:30:1f:20:dc:8b:4e:98:
a3:9c:b7:70:db:06:70:84:4c:20:ef:f4:d9:29:52:
b6:f3:e6:b5:24:d8:b4:a4:8f:b8:85:bc:0c:a5:56:
7a:57:69:12:50:6a:46:e0:e5:bc:3e:dd:27:0b:ba:
eb:7d:eb:c6:da:b6:a5:3e:e4:7b:8e:8e:c9:18:66:
7d:28:a8:d5:e6:ec:64:43:7d:29:e0:30:5c:18:89:
5e:2d:ce:52:a8:c8:67:ca:c3:c5:85:d0:2c:eb:71:
6c:3b:35:65:3c:c9:af:3e:b7:3f:a4:a8:db:17:72:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5D:77:36:12:07:7F:C1:E7:3A:0D:45:9E:36:20:A2:02:4F:53:FF
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/mF13NhIHf8HnOg1FnjYgogJPU_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7700::/40
Signature Algorithm: sha256WithRSAEncryption
79:8c:87:95:3f:a5:e4:3a:25:51:65:fb:e0:f2:1e:7e:52:a6:
75:ce:3f:0d:ed:2e:c9:eb:30:92:65:a6:ec:e4:58:a8:32:27:
2a:8e:4c:04:e1:a8:bb:b0:0c:29:18:86:fb:82:a3:a4:e1:92:
4a:1b:08:0c:5f:de:26:d8:01:9a:a5:dc:72:f3:f4:97:65:c6:
ea:90:34:29:fd:77:50:3d:1d:3d:37:8c:da:4b:fd:a6:09:6e:
9c:82:b9:2c:7a:47:cc:40:b4:30:be:48:cc:85:3b:a5:f4:92:
f3:36:12:4c:78:f7:ab:73:70:13:23:cf:fa:2a:12:89:3c:f4:
2b:ac:0b:ac:bb:6f:99:37:1d:ff:d7:81:90:1e:aa:e1:60:00:
5e:45:a5:50:1c:1d:3d:db:cf:b2:2f:89:ef:90:59:84:53:72:
a9:36:5c:b1:61:3f:e0:88:f7:fd:1a:b5:88:5e:c0:79:c3:02:
ac:27:21:a9:9a:40:33:f6:8b:19:0b:fd:3a:8c:79:cf:dc:9c:
9c:b5:4f:3c:7a:a8:eb:4f:c7:de:6b:f0:ff:ba:53:d5:a9:51:
ef:ed:4a:50:d8:7b:4e:6d:b2:86:45:a0:c2:be:9c:79:85:e8:
22:47:38:3b:42:b3:45:5a:a8:f9:47:4a:9c:c8:22:9c:86:7a:
3e:36:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:40 2024 by rpki-client on console-ams.rpki-client.org