Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/f_m02Rae3yu-gAw-fP8DMSBbkVY.roa
File: f_m02Rae3yu-gAw-fP8DMSBbkVY.roa (raw, json)
Hash identifier: efHed9K+FINA6OLn4fPxPdYGfejf/EPwJocjFnD0iT4=
Subject key identifier: 7F:F9:B4:D9:16:9E:DF:2B:BE:80:0C:3E:7C:FF:03:31:20:5B:91:56
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 01A62537
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/f_m02Rae3yu-gAw-fP8DMSBbkVY.roa
Signing time: Wed 09 Feb 2022 08:34:12 +0000
ROA not before: Wed 09 Feb 2022 08:34:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 2a0e:da40:da40::/48 maxlen: 128
2a0e:da40:1::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27665719 (0x1a62537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Feb 9 08:34:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ff9b4d9169edf2bbe800c3e7cff0331205b9156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:0c:44:38:ca:98:e3:66:12:e2:f1:06:97:
05:27:4d:19:24:fd:d9:e5:a4:06:f2:a8:67:65:9d:
55:b7:57:5d:bb:fd:28:0b:23:66:a8:3a:dc:3b:c1:
3c:22:7f:7f:b1:35:84:ed:da:3d:37:72:99:79:8a:
5c:ce:a1:cb:ca:57:f0:45:e0:c7:f3:1f:18:e4:43:
35:fe:46:57:d8:ac:04:6b:99:9c:14:7a:1c:d9:c9:
6f:94:b4:ca:b0:01:c4:a1:b1:38:2c:84:7f:8d:93:
46:43:77:24:7f:ca:48:fc:69:88:3e:85:d5:6d:7d:
23:d8:9f:95:06:65:e9:ce:b5:1c:0c:6d:74:8f:ac:
80:cf:18:79:3f:0f:88:60:42:1f:40:67:e0:42:38:
37:a3:76:df:a4:24:6c:bb:42:ea:ba:59:aa:1e:e3:
7b:fe:67:ae:6b:fa:b8:64:b7:0c:e1:c3:4d:86:de:
1f:90:26:58:44:cd:18:a5:a6:d3:d3:14:3f:cb:42:
ac:0e:f3:c7:69:d1:f3:47:6c:b3:a9:b9:89:e6:96:
3b:ca:58:50:ae:1a:d2:75:93:ca:2e:53:76:92:bf:
e7:e8:5b:9e:58:fa:5d:c3:87:42:57:f4:21:90:72:
52:50:28:b5:d7:91:0b:f3:ee:6c:e9:89:a2:45:0d:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F9:B4:D9:16:9E:DF:2B:BE:80:0C:3E:7C:FF:03:31:20:5B:91:56
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/f_m02Rae3yu-gAw-fP8DMSBbkVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:da40:1::/48
2a0e:da40:da40::/48
Signature Algorithm: sha256WithRSAEncryption
8d:9d:bb:81:7a:3e:f3:75:53:1f:c1:8b:f3:6b:e7:1a:42:51:
9f:19:ed:80:c0:d9:5b:90:a7:10:88:84:ca:70:2e:f2:04:cd:
bf:c8:c5:7d:c9:5b:9f:00:f2:a9:e1:a4:2b:e1:80:f3:37:fa:
af:03:b7:27:8b:da:44:15:87:b9:24:61:21:5e:bc:90:a7:3f:
67:11:c5:b5:32:5e:e8:69:bb:97:8e:6b:b6:23:6e:89:c3:e5:
ea:37:8a:5f:02:30:c2:56:ce:78:5f:f4:23:15:da:88:92:91:
67:8d:d2:07:6c:d4:5d:20:4a:6d:99:ef:bf:3b:97:13:9c:55:
17:57:7b:f6:a1:d2:6f:e4:fe:a5:5e:a1:b7:47:77:1a:23:c3:
4b:e3:f8:eb:57:f0:18:52:94:2c:63:07:2b:47:02:c0:2a:1b:
10:6c:b9:28:8d:15:a2:6c:1d:23:4a:10:e6:c1:f9:e2:8c:c1:
39:a5:ce:3b:bb:57:e9:eb:10:53:c2:a5:e4:4a:ee:29:62:1c:
58:5b:a3:b3:82:ad:26:87:17:bc:44:5e:89:39:92:02:e1:19:
fa:eb:10:fe:fc:1d:71:f0:3f:26:60:dc:79:87:f9:78:37:d7:
5c:82:1b:a4:d8:1b:b4:43:82:7f:72:6b:88:cd:5f:c7:74:6d:
23:42:f4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:57 2024 by rpki-client on console-fra.rpki-client.org