Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/1NaGFcBiXxffFMUpgaJbpBLrKLo.roa
File: 1NaGFcBiXxffFMUpgaJbpBLrKLo.roa (raw, json)
Hash identifier: xK/juSuZQnuP3lXz07FBg1MdC3wojylXJN2pmat//uw=
Subject key identifier: D4:D6:86:15:C0:62:5F:17:DF:14:C5:29:81:A2:5B:A4:12:EB:28:BA
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 06007A54
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/1NaGFcBiXxffFMUpgaJbpBLrKLo.roa
Signing time: Sat 01 Jan 2022 16:01:19 +0000
ROA not before: Sat 01 Jan 2022 16:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205148
IP address blocks: 2a0d:f407:100::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100694612 (0x6007a54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4d68615c0625f17df14c52981a25ba412eb28ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:70:67:04:5a:55:44:5e:b5:b9:44:1b:c8:
04:99:e3:be:36:10:7f:56:92:73:07:be:34:bd:a6:
81:58:59:6b:db:fd:32:c4:a8:ba:9c:b3:af:6d:ee:
15:5e:ea:47:28:98:0b:8d:ef:27:c0:cb:34:77:01:
61:ee:31:a4:26:85:ab:af:da:bd:e4:c2:4b:02:d5:
32:7a:a4:c5:a9:6b:85:68:89:68:e9:4f:5f:e7:e5:
be:dd:43:5c:55:20:f8:2f:8a:18:cc:86:6e:3f:bf:
0d:68:44:a0:a1:7f:5f:9a:2f:f0:63:cf:c5:26:b7:
f3:bf:0f:a8:10:7b:02:54:67:3f:45:3e:51:86:45:
f1:83:bb:7c:41:41:29:dd:68:5e:7f:f9:2f:05:b4:
f4:de:25:56:bc:42:d7:5d:8f:56:f8:bf:97:a3:af:
c4:ab:4d:65:5b:0c:6f:bf:af:c1:a7:b1:38:d7:a2:
72:94:31:51:d6:4e:2f:87:54:b2:a0:c1:26:7a:c3:
7b:ed:6b:7a:b8:bf:19:3c:82:2a:88:92:89:43:44:
ea:bb:06:b0:ba:ba:a5:2a:17:75:74:60:9c:ce:c6:
04:bb:66:f9:17:24:8f:53:8e:15:7c:db:8f:f7:60:
97:d1:8f:12:3e:b3:a1:72:53:df:74:9b:2f:af:93:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D6:86:15:C0:62:5F:17:DF:14:C5:29:81:A2:5B:A4:12:EB:28:BA
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/1NaGFcBiXxffFMUpgaJbpBLrKLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f407:100::/44
Signature Algorithm: sha256WithRSAEncryption
b4:17:96:4f:9c:8d:d3:68:45:b5:0c:fe:e6:bf:82:3d:fc:91:
69:3b:17:6c:60:a0:44:cd:3b:9e:5c:85:3f:50:1c:6d:72:43:
32:c5:c5:16:bc:6d:90:1a:02:da:ce:b6:af:26:fb:f7:9d:b7:
5b:4f:64:f2:9c:17:d8:a0:8f:7c:b4:d0:9d:44:49:3a:49:3c:
04:a3:dd:14:c7:8b:db:d6:91:c0:38:f4:48:b7:0e:b3:98:6a:
60:f0:7a:c7:a8:ce:1e:a9:93:c0:c2:6c:4c:51:29:7d:fe:a0:
33:49:2e:72:30:93:10:b4:06:9a:ce:1e:89:28:15:40:72:37:
7c:e8:51:6e:6f:43:f9:d0:e1:47:be:37:24:9b:63:be:f8:ef:
da:69:63:fa:b6:21:3d:04:31:57:d3:e2:f6:9a:7a:a1:a4:e7:
c4:9c:99:91:f5:d2:d8:3e:68:dd:36:38:e0:2d:55:3f:08:03:
21:4a:bb:c2:df:d2:6a:3f:37:ee:9b:1e:dc:23:c0:73:a8:76:
6d:c5:cf:86:5a:c4:59:54:35:f1:96:ee:48:be:77:81:91:cd:
8f:c5:23:d0:c9:4d:5b:af:35:96:ce:cc:01:36:23:57:d2:4d:
d5:da:13:81:29:67:8a:d5:c6:21:4e:12:d2:6b:82:af:83:04:
9b:3e:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org