Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/szzY_AqlommDQ4QV0VCJvz21kpg.roa
File: szzY_AqlommDQ4QV0VCJvz21kpg.roa (raw, json)
Hash identifier: FoNBbs3fYSgPf2mm2D3n/QOzU1gKntPCWclTC3Ecgjg=
Subject key identifier: B3:3C:D8:FC:0A:A5:A2:69:83:43:84:15:D1:50:89:BF:3D:B5:92:98
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0603C9DC
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/szzY_AqlommDQ4QV0VCJvz21kpg.roa
Signing time: Sat 01 Jan 2022 16:01:22 +0000
ROA not before: Sat 01 Jan 2022 16:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210281
IP address blocks: 2a0d:f407:1033::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100911580 (0x603c9dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b33cd8fc0aa5a26983438415d15089bf3db59298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:25:ac:89:50:c3:ed:1d:2c:32:61:7e:05:
6f:28:f4:02:1a:eb:fb:42:b0:e0:0d:9b:41:71:d2:
03:61:f8:90:83:b3:df:2f:c3:94:c0:79:4d:48:26:
39:1a:f9:df:36:ba:b7:14:57:39:55:24:42:49:4a:
0f:32:83:00:5a:10:d8:45:2e:aa:64:f3:d2:e6:c3:
38:58:6d:da:2e:dd:d0:b1:50:4c:c6:42:a5:e8:a4:
66:92:26:7a:5f:18:f0:c2:34:97:51:a2:f3:d8:2b:
83:91:28:ad:c0:d9:5a:f1:a7:c4:30:3b:f0:a7:0a:
71:07:a1:8d:ca:14:8a:21:4d:b7:d0:15:aa:a0:03:
4d:ec:73:94:38:ee:c9:f9:33:7e:05:6a:57:bd:ac:
32:77:d0:7d:16:54:cd:bb:a2:b8:11:b1:fc:81:4d:
12:66:94:21:24:b5:dd:ab:f2:a2:e0:ac:ff:6e:55:
ed:8b:e0:03:b7:cf:14:35:39:fd:73:bc:dd:c1:ee:
dd:c2:d2:31:c0:79:6c:28:c0:ad:46:ee:85:87:4a:
b5:cf:52:e7:79:83:d2:41:72:df:f1:70:c6:47:30:
1a:04:d4:18:bd:8e:ff:b1:19:b2:67:c9:e1:9b:ae:
bb:28:bb:98:39:fb:92:36:27:81:62:2c:25:3a:92:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3C:D8:FC:0A:A5:A2:69:83:43:84:15:D1:50:89:BF:3D:B5:92:98
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/szzY_AqlommDQ4QV0VCJvz21kpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f407:1033::/48
Signature Algorithm: sha256WithRSAEncryption
59:d7:8f:d2:b9:72:32:46:7c:c2:bb:fa:f4:c4:60:51:97:ac:
b6:5c:18:97:0a:5e:41:2a:24:f1:43:1d:f7:42:72:3c:a6:08:
12:da:2a:67:b7:66:f4:aa:66:14:83:b1:45:be:a2:d9:fe:3b:
05:c9:59:e9:7e:aa:1a:58:5b:d2:52:ce:90:a1:33:b0:58:29:
02:c8:0a:dd:9e:18:9b:48:51:c8:d2:ed:45:fc:f6:01:fa:63:
61:ba:02:e7:c4:a3:c2:d3:b6:b1:fc:3d:b5:62:c0:e2:a7:15:
40:2e:24:20:ad:aa:ef:19:c0:ab:d4:6c:5f:09:94:27:c1:bf:
5a:e0:57:fc:82:4a:55:a6:83:18:3e:d2:6a:2d:a3:f3:95:6f:
1f:9a:02:e2:27:19:e1:f1:03:f7:75:20:fc:a1:81:3e:91:5a:
f5:13:be:dd:f8:32:59:30:ef:d6:ae:15:ec:bd:0c:17:7b:92:
18:b2:03:58:6d:47:51:93:73:af:37:75:da:b1:c9:65:18:81:
c6:04:67:b8:44:d1:93:84:6f:85:ef:04:ae:71:c2:2e:06:af:
c6:99:00:06:43:0d:4f:67:21:65:fe:58:03:20:71:4c:3a:4b:
f7:30:62:6b:67:be:46:fc:a9:26:cb:db:33:3e:69:e0:33:e4:
18:e5:65:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org