Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/B5KAk2ntmECv5CUcAXgkOGXKNv4.roa
File: B5KAk2ntmECv5CUcAXgkOGXKNv4.roa (raw, json)
Hash identifier: HsnLv9OJ1EUdfp0uTZGn4EUEhbVmIAuZygS1FgnEPcU=
Subject key identifier: 07:92:80:93:69:ED:98:40:AF:E4:25:1C:01:78:24:38:65:CA:36:FE
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 02F665AC
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/B5KAk2ntmECv5CUcAXgkOGXKNv4.roa
Signing time: Sat 01 Jan 2022 16:03:37 +0000
ROA not before: Sat 01 Jan 2022 16:03:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142289
IP address blocks: 2a0e:46c4:2c10::/44 maxlen: 48
2a0e:46c4:106::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49702316 (0x2f665ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 16:03:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0792809369ed9840afe4251c0178243865ca36fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:39:ce:76:44:79:f4:24:e5:d4:e5:55:e6:
91:60:ce:e9:55:7d:26:bb:ac:58:31:19:27:6b:25:
1d:be:df:48:8e:9b:e1:43:92:93:f8:06:d8:6a:85:
5a:c2:27:89:28:f5:7e:49:c4:73:2a:36:72:02:02:
33:b4:f1:e7:38:94:64:ca:34:a0:03:0f:d9:ea:08:
0a:aa:8a:bc:1c:8c:ec:0d:15:a5:54:3e:fe:e0:8b:
f8:0e:59:15:47:d6:93:4d:20:fd:6d:c4:89:73:39:
07:bd:14:a0:e1:1d:0b:47:c4:f4:84:76:a2:a2:a7:
6b:fe:af:87:a4:21:18:2c:91:98:4b:68:97:9e:07:
75:d5:1e:99:db:a0:1c:02:82:a4:3e:5a:de:08:eb:
e8:b1:67:10:f5:4e:4b:3b:a8:9a:8a:2b:cf:d3:a3:
4f:56:15:56:d7:25:1c:07:30:77:32:bb:21:f8:a5:
2b:ad:8a:63:51:29:1b:1d:da:6d:9e:36:34:e7:95:
a0:ba:51:17:bc:8e:05:83:91:dc:72:30:eb:97:7c:
88:2f:c8:65:b2:21:fa:6c:aa:90:c4:d4:34:f0:0a:
6c:d6:cb:e3:a7:9b:19:8f:fb:06:bf:0a:42:65:54:
69:bf:40:85:21:0e:34:28:b5:32:64:d2:43:df:f2:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:80:93:69:ED:98:40:AF:E4:25:1C:01:78:24:38:65:CA:36:FE
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/B5KAk2ntmECv5CUcAXgkOGXKNv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:106::/48
2a0e:46c4:2c10::/44
Signature Algorithm: sha256WithRSAEncryption
6b:37:e1:77:20:c8:4b:82:b5:41:c6:ff:05:2f:b9:53:5c:9c:
c0:63:9a:c8:47:d5:ea:15:8c:5b:85:1b:c9:3a:e4:f3:d4:c2:
59:af:d8:59:20:da:aa:62:32:99:4a:ba:e7:65:85:46:3f:f4:
1d:89:fd:a2:5b:6e:c3:ce:41:d4:6d:d0:d1:28:57:b5:95:3a:
c7:33:8e:27:0a:b7:3e:52:48:4e:b3:e4:f8:57:77:4d:0c:69:
5e:e4:a7:39:b5:04:a0:b0:68:e6:c0:92:9c:a0:64:f7:ec:dc:
81:97:c1:07:42:01:f7:2f:77:e6:a7:16:bc:cd:2f:e2:79:a4:
ab:6c:f3:a6:d6:d6:d9:42:9e:03:9c:9e:41:04:6b:41:83:02:
6b:e6:60:f7:aa:75:6c:17:23:b6:f6:84:d6:4f:25:1a:02:82:
09:01:23:c9:e3:16:77:6e:6c:a2:3b:a7:56:9c:35:be:1b:ba:
21:65:5c:6c:01:dc:ec:52:65:7c:1d:a9:22:b6:1b:9a:1d:4e:
b4:4a:3c:84:54:ad:d4:e7:79:a3:51:ee:aa:41:8b:9b:70:f6:
d8:1c:07:c8:ef:b5:a1:9d:ab:3b:5a:d1:38:93:62:d9:f9:e2:
a2:c6:38:91:fb:f1:31:9d:42:9f:39:5b:c6:77:f0:2b:92:a3:
d2:3d:3c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:15 2024 by rpki-client on console-fra.rpki-client.org