Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/q2jxrn4_LcPsQ-uxGBeTe8Ut85I.roa
File: q2jxrn4_LcPsQ-uxGBeTe8Ut85I.roa (raw, json)
Hash identifier: 1FlKyQCN9/vwS6wcsOnyzKpIhGd9GWx0zABKURyfKiE=
Subject key identifier: AB:68:F1:AE:7E:3F:2D:C3:EC:43:EB:B1:18:17:93:7B:C5:2D:F3:92
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0FF8765D
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/q2jxrn4_LcPsQ-uxGBeTe8Ut85I.roa
Signing time: Sat 01 Jan 2022 14:59:54 +0000
ROA not before: Sat 01 Jan 2022 14:59:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213086
IP address blocks: 2a06:e881:7400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267941469 (0xff8765d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 1 14:59:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab68f1ae7e3f2dc3ec43ebb11817937bc52df392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:62:8a:24:0c:db:b0:fc:d0:20:c7:fd:23:
8d:92:8e:ab:b2:fd:e7:80:f9:fc:6b:50:bd:6a:30:
67:ae:46:9d:01:bb:e1:ca:2f:73:4b:4e:25:ed:7f:
24:6b:f9:1b:34:76:a4:5f:4d:41:47:51:59:80:4e:
c0:39:50:ef:b9:7a:d1:1e:2d:19:58:3c:5b:aa:af:
cd:e6:59:ea:fd:98:1b:b0:b8:c3:58:ae:65:c9:04:
1f:d3:14:f1:fa:b5:41:c0:11:63:8c:e1:f9:de:fb:
40:50:ba:77:92:7d:c4:f6:ea:63:7a:1c:61:80:d3:
51:d8:bf:9b:e0:ad:bf:45:12:64:7f:96:e6:e8:a9:
e7:68:cc:b0:99:a8:5f:c4:5b:02:20:0a:ba:54:22:
d9:53:90:6d:92:14:a5:60:39:88:c5:5e:1b:2a:12:
31:9f:64:05:e4:54:84:66:0e:45:68:a2:6b:30:fa:
f8:e4:6b:9b:93:8b:28:7a:97:16:a8:83:e3:36:83:
24:d8:e9:bf:cf:36:a7:ad:7e:d4:1b:b6:69:ec:08:
1e:15:bd:e2:47:e7:60:24:95:75:eb:10:f6:67:7f:
b8:d4:ab:0f:7a:3f:2f:d7:ac:b3:a3:c3:9d:b5:21:
fa:31:fc:36:a6:c9:81:d7:f9:c8:07:28:29:21:76:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:F1:AE:7E:3F:2D:C3:EC:43:EB:B1:18:17:93:7B:C5:2D:F3:92
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/q2jxrn4_LcPsQ-uxGBeTe8Ut85I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7400::/40
Signature Algorithm: sha256WithRSAEncryption
7a:6d:17:d1:d9:a4:0d:df:26:9a:00:9a:13:2f:5c:3b:47:bb:
73:0d:3c:91:96:20:17:12:1e:85:24:a2:74:95:82:12:d5:d1:
6d:1a:2b:b0:8d:18:d0:57:06:c1:9b:66:cf:fd:1d:08:ce:f4:
9b:b6:6d:69:bd:e3:13:34:1e:f2:02:6f:0e:9f:53:7e:93:7c:
52:ee:ed:b4:af:cc:97:87:d7:0a:54:cb:ed:de:03:d4:4c:5c:
c4:df:81:e1:ca:2c:a3:20:fa:39:47:63:b7:82:47:f5:04:26:
76:c1:ca:e0:ee:19:7d:9a:5b:7b:86:f8:7a:79:15:dc:e4:94:
e3:04:5a:66:78:04:df:24:fd:d9:c9:43:1f:f8:8a:f8:06:0e:
3f:ff:65:f0:47:60:f5:ff:69:27:c7:41:b1:b1:57:17:18:7b:
61:e9:11:6d:6f:a3:af:70:3b:8e:52:7e:10:37:fd:4e:73:98:
1b:95:60:f6:97:5d:ff:e5:88:7c:75:9a:d8:9f:2d:6c:d0:2d:
16:f8:68:3c:cb:1c:6c:b0:dd:a0:a7:b9:57:20:33:96:67:0d:
7c:5e:e7:cd:a9:35:61:bc:0c:09:21:6c:62:2a:23:03:6b:aa:
e9:35:13:1f:0d:a2:65:6c:fe:39:4d:10:12:15:27:6e:cc:b5:
eb:80:a3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-fra.rpki-client.org