Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XE7HTRSGtKeSWVy9ESDbm_FEjLY.roa
File: XE7HTRSGtKeSWVy9ESDbm_FEjLY.roa (raw, json)
Hash identifier: Lz/21jRYFKiOui7f0FxwZpAHuLapzAMX9QmxFgucQC0=
Subject key identifier: 5C:4E:C7:4D:14:86:B4:A7:92:59:5C:BD:11:20:DB:9B:F1:44:8C:B6
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19DA0D4F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XE7HTRSGtKeSWVy9ESDbm_FEjLY.roa
Signing time: Sat 01 Jan 2022 15:56:43 +0000
ROA not before: Sat 01 Jan 2022 15:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39351
IP address blocks: 2a07:e341::/32 maxlen: 32
2a07:e340::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433720655 (0x19da0d4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c4ec74d1486b4a792595cbd1120db9bf1448cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:62:cf:66:d9:a8:8c:10:36:b2:d2:26:e0:
d2:9c:ff:16:a8:37:48:3c:c0:ef:86:ea:84:d5:00:
94:29:c4:7b:5a:9d:67:76:a0:7e:d9:c5:66:20:14:
b4:23:13:62:fc:42:bb:49:a7:33:53:92:3a:8c:b3:
36:67:bf:f8:0f:db:ed:9e:51:17:0a:e6:82:c3:c0:
01:e3:fd:57:d8:56:a3:9a:fe:ab:19:b9:02:16:3b:
35:94:4e:ab:b4:5d:2e:ba:16:e1:d1:b5:1a:87:64:
42:16:eb:76:ec:a1:74:0b:6f:30:93:1e:55:3c:03:
6b:04:45:51:f7:cc:74:09:d5:01:be:2e:a1:ba:37:
b9:e0:d1:fb:38:e9:8d:78:28:a7:97:10:9d:c9:19:
69:80:da:fd:4b:a5:ff:bd:62:d2:7d:d9:f4:f6:a4:
ce:11:38:ef:ae:33:be:27:72:b7:7e:16:b0:e8:de:
b3:e7:01:0f:76:17:11:b1:09:3b:8d:ff:20:3b:10:
ec:8f:a2:53:34:4f:88:eb:c4:33:2c:bc:02:20:32:
49:62:18:25:69:36:e4:c7:da:dc:cb:47:03:58:ff:
d1:8e:25:9d:a9:27:55:8a:a3:49:4a:d2:95:f4:1e:
92:02:7a:06:b7:fd:19:df:47:89:68:85:76:e8:69:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4E:C7:4D:14:86:B4:A7:92:59:5C:BD:11:20:DB:9B:F1:44:8C:B6
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XE7HTRSGtKeSWVy9ESDbm_FEjLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e340::/31
Signature Algorithm: sha256WithRSAEncryption
8e:52:97:40:76:40:0a:b6:af:73:ee:86:ed:ee:30:ad:48:dd:
f3:0e:96:c5:4a:c6:fe:d7:b2:04:54:89:5b:c3:66:5f:a1:2c:
60:57:75:d5:3d:3d:b3:2b:4a:03:0b:d3:48:08:21:fe:32:80:
2b:4d:f0:19:86:8a:d5:42:3a:f4:37:b7:26:7c:88:8b:5e:c5:
b6:d4:33:61:7f:24:ba:ad:d8:5e:1b:60:f0:b5:8a:ac:81:55:
13:6e:2f:31:00:d3:11:7b:27:01:3d:69:82:f5:4b:2d:9a:4d:
71:2f:38:59:f0:ef:3a:dc:b8:db:52:c1:74:ba:d0:7a:ed:d8:
5e:dd:5f:24:99:ef:81:62:30:92:fa:9c:b7:07:16:a2:3b:56:
79:d5:bf:9e:c1:f0:07:dc:fe:92:c9:90:52:af:66:c9:4e:ac:
38:23:df:0f:19:f1:be:e1:35:27:cd:05:d8:a8:8b:e5:fe:e4:
8f:01:79:fb:de:7e:3c:91:e1:ed:5e:f9:28:60:ff:9a:9b:1a:
f8:5e:df:d2:88:10:c1:bf:0e:1f:50:de:cc:ba:5e:ab:db:8d:
f2:4d:9b:7a:18:f7:be:c7:f6:9f:aa:76:2d:14:76:33:00:2c:
4a:99:f2:fb:02:7d:ce:d5:46:05:99:67:9a:1c:df:a2:4f:92:
da:c7:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:51 2024 by rpki-client on console-ams.rpki-client.org