Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/f_EOkK-jWq6ciEpiHzaN9Y0er_4.roa
File: f_EOkK-jWq6ciEpiHzaN9Y0er_4.roa (raw, json)
Hash identifier: UBQw7AkukfzsnIksCakRdS07O1+2lMGgxRJypE4MxGg=
Subject key identifier: 7F:F1:0E:90:AF:A3:5A:AE:9C:88:4A:62:1F:36:8D:F5:8D:1E:AF:FE
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 060B7D9D
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/f_EOkK-jWq6ciEpiHzaN9Y0er_4.roa
Signing time: Sat 01 Jan 2022 16:01:28 +0000
ROA not before: Sat 01 Jan 2022 16:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212448
IP address blocks: 2a0d:f407:1017::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101416349 (0x60b7d9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ff10e90afa35aae9c884a621f368df58d1eaffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:b7:43:d9:e3:15:28:92:59:5b:03:57:fb:
84:a8:79:c4:71:d4:32:07:9d:45:da:60:a0:da:0a:
5b:2a:7a:67:a1:51:6e:85:c4:5b:d9:e2:6d:75:98:
a8:46:d5:1f:5e:cb:15:6a:22:63:fa:d8:cb:5a:61:
3e:48:15:86:82:40:22:e5:9d:e2:1d:e1:7c:cd:19:
ef:66:09:88:64:ca:b4:55:84:e9:6a:90:64:05:3e:
b4:f7:70:5e:ae:d7:ed:4b:13:03:21:75:10:1d:99:
f6:43:77:d0:ad:67:ab:da:d5:4b:10:23:e0:9c:c9:
e1:bc:79:51:86:2a:cc:a0:d4:f5:8b:68:2e:03:48:
2b:d0:ae:00:c4:9d:3f:f2:68:6e:8a:f0:fa:e7:3a:
9f:3b:ba:52:dd:29:d4:89:2f:7a:44:33:5f:34:dd:
24:ae:cf:a0:2d:0c:cc:c5:d6:e1:2e:fe:8c:5a:48:
2d:d2:c3:8c:fa:d4:eb:a1:67:bf:9f:96:8f:71:e1:
9e:7f:67:4d:e1:8d:bc:c2:ba:c3:fa:89:a3:cc:b2:
e8:df:df:13:fc:60:0d:cd:9d:4c:6c:20:37:9a:49:
70:54:d7:89:ce:b2:90:40:2a:fe:06:d8:05:d7:f6:
ca:80:fc:9e:e7:00:f1:b5:dc:62:92:af:32:70:73:
e9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F1:0E:90:AF:A3:5A:AE:9C:88:4A:62:1F:36:8D:F5:8D:1E:AF:FE
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/f_EOkK-jWq6ciEpiHzaN9Y0er_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f407:1017::/48
Signature Algorithm: sha256WithRSAEncryption
0b:86:61:9b:6f:77:d4:f0:2a:0d:3a:9b:45:78:d5:35:13:f0:
d0:ca:53:eb:06:e8:2c:6d:20:4b:a3:a7:8f:c5:3a:80:f1:38:
1d:ba:5a:3c:3f:93:c4:08:3f:02:f1:32:31:58:21:71:1a:ef:
ef:56:73:8d:73:d8:21:c6:69:19:53:f3:8a:24:92:8f:82:35:
8a:46:71:f4:7e:6b:39:a3:94:4e:12:9f:78:d9:5a:09:30:c5:
09:de:2e:28:d6:65:44:7c:95:82:71:32:c8:ec:3b:92:79:1f:
d7:3e:ec:ae:05:1d:1a:78:01:2f:71:c9:e6:d8:fa:56:82:51:
8f:81:96:51:64:18:bf:c6:ce:e6:a4:d2:49:52:9f:b3:00:62:
41:34:7f:ca:0d:c6:0e:5c:75:2c:fc:e5:8b:2d:a5:12:b5:06:
f4:5f:dc:ca:d6:98:18:3c:45:bc:7b:48:88:d0:61:90:87:f2:
49:6e:82:b9:ba:38:7a:ca:19:65:3f:18:cb:bc:a2:fd:5c:39:
01:89:2c:54:2f:ce:53:43:3b:a5:a5:2b:fb:59:a7:c6:17:6a:
92:15:83:1f:cf:98:22:cf:5a:82:14:cc:94:5c:3b:8a:2d:d8:
17:8c:cf:14:2a:d8:70:f5:f6:a3:69:61:f8:20:dd:f7:a2:4d:
9a:95:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org