Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/hi4A04W5igJptM3X4gjrtGbkF6s.roa
File: hi4A04W5igJptM3X4gjrtGbkF6s.roa (raw, json)
Hash identifier: 9bypiJDik730szIbE585PpBJTEgT+Pp8GnQeezqV0AA=
Subject key identifier: 86:2E:00:D3:85:B9:8A:02:69:B4:CD:D7:E2:08:EB:B4:66:E4:17:AB
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 04318EF2
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/hi4A04W5igJptM3X4gjrtGbkF6s.roa
Signing time: Tue 19 Apr 2022 20:28:36 +0000
ROA not before: Tue 19 Apr 2022 20:28:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201178
IP address blocks: 2a09:9d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70356722 (0x4318ef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: Apr 19 20:28:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=862e00d385b98a0269b4cdd7e208ebb466e417ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:32:72:79:14:dd:10:e8:1e:70:c2:be:5c:
47:5d:55:70:a0:c9:e2:98:d1:1b:a7:da:ee:a5:21:
3d:f6:9b:91:67:50:60:7a:c9:83:5a:9e:d3:3a:c8:
17:50:74:f5:9d:ce:a7:c7:7e:ad:9b:06:48:dc:92:
8b:74:0f:25:3f:04:71:46:23:06:64:d5:dd:7e:50:
ec:2a:07:81:1b:e1:33:88:db:fb:e4:bf:92:f3:4f:
15:22:47:de:1f:13:f0:a9:63:30:98:a8:23:f5:a0:
23:63:64:ef:77:78:b5:b0:8e:6e:1f:62:f9:e4:37:
fb:89:9e:e5:01:65:44:7b:a8:dc:4e:36:a1:bb:64:
cf:65:f5:33:2a:44:d5:82:52:06:67:e7:08:e9:f3:
93:6e:9b:60:c6:3a:c3:77:fb:43:6a:0d:85:02:2b:
02:6e:b8:66:78:2e:c1:75:56:d3:aa:12:d3:be:bd:
68:87:00:b3:63:af:80:b7:ba:25:cc:32:d3:83:f0:
92:f8:c2:f7:7b:2b:e3:c0:10:ac:8a:ea:3f:49:50:
80:8b:bf:99:b5:81:b2:96:0c:b4:98:38:32:ff:24:
9c:7e:16:3b:4a:ab:2f:86:b4:ef:0c:c2:33:90:54:
c6:55:fa:a8:e3:89:c0:83:e6:d6:98:03:00:dd:2e:
d6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2E:00:D3:85:B9:8A:02:69:B4:CD:D7:E2:08:EB:B4:66:E4:17:AB
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/hi4A04W5igJptM3X4gjrtGbkF6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
95:15:d6:ff:28:5a:07:b6:6b:e8:d2:b7:64:e7:5c:07:cd:b8:
de:a2:fb:83:a0:31:8b:30:a7:0f:92:88:5b:56:77:cb:a1:09:
7b:6d:c7:fd:f0:62:78:da:91:3c:52:2b:83:ea:32:71:be:cb:
29:47:e6:3d:34:c2:72:b7:39:40:90:b9:e1:aa:8c:ca:90:79:
cc:68:e2:5b:32:a7:10:f7:70:cb:74:33:97:94:f0:5c:b2:1f:
2c:0c:4f:1d:96:7b:c8:9e:33:f7:c6:32:8b:63:8a:73:e3:18:
fd:e2:92:16:46:21:0c:df:1d:7d:0f:21:ce:ce:82:a2:00:de:
2b:80:1f:68:e5:4b:9c:ac:e9:9c:d3:37:f5:89:d5:52:13:76:
9e:0d:5d:60:39:2d:b6:4c:d2:fb:48:71:5c:7d:f9:e7:3e:60:
13:63:bd:d9:07:c0:7a:ca:f0:9f:db:fb:59:7a:33:cb:7b:94:
3e:93:ad:f5:4e:89:5d:ec:19:dc:04:cd:e5:cd:54:80:68:a0:
f1:f2:9a:b0:da:25:25:72:e1:9c:b4:7a:aa:31:f2:17:0c:5e:
74:96:4c:54:95:5f:8a:42:88:16:ab:7d:0f:18:22:6f:d6:45:
46:86:f2:ab:5f:5e:9f:d2:0f:d7:0e:47:3a:45:11:cf:23:8e:
6c:5d:8b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:45 2024 by rpki-client on console-fra.rpki-client.org