Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/23OozTftwDtQlHSHqvld8JVxTSQ.roa
File: 23OozTftwDtQlHSHqvld8JVxTSQ.roa (raw, json)
Hash identifier: qvXzJ0yvnEODMhq0cGLoQfRuOhMPjlqL+lRDduI3ysw=
Subject key identifier: DB:73:A8:CD:37:ED:C0:3B:50:94:74:87:AA:F9:5D:F0:95:71:4D:24
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0814EBF3
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/23OozTftwDtQlHSHqvld8JVxTSQ.roa
Signing time: Sat 01 Jan 2022 06:55:55 +0000
ROA not before: Sat 01 Jan 2022 06:55:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210887
IP address blocks: 2a0f:5707:abc0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135588851 (0x814ebf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 06:55:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db73a8cd37edc03b50947487aaf95df095714d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:ee:ba:ff:df:24:8e:53:48:9c:79:35:e7:
d6:c7:4d:f8:79:78:8c:41:53:7b:aa:fa:f8:52:50:
38:cd:93:e7:fc:52:1c:d0:03:69:b2:6b:fb:3b:75:
a8:c7:82:10:0e:08:51:1e:d0:2c:88:6f:14:5f:8e:
79:05:23:f4:47:72:13:40:27:c9:90:7b:65:05:55:
17:05:95:ec:62:eb:69:0a:21:4a:0d:99:64:16:8c:
11:e1:09:56:a7:9c:e3:9c:6e:de:4f:6c:ad:2c:fe:
9b:c5:b4:a5:4f:d8:fd:62:1f:97:32:50:f6:2a:2d:
a2:5f:98:12:03:ba:76:c6:d6:e5:2a:aa:57:a6:b4:
76:67:25:34:d2:05:98:c8:03:53:2a:26:85:09:c2:
72:a0:a5:28:b5:4c:9f:45:02:31:61:83:81:3f:3d:
9c:40:5f:6c:02:66:b9:9b:46:d4:ef:fc:a2:2b:4d:
1c:fd:a4:6a:26:dc:e7:4a:1e:ec:18:c4:f0:58:dc:
e8:c3:50:1b:78:b6:4e:2c:ef:30:bb:ba:78:9f:fe:
37:3a:43:87:cf:54:44:7b:77:60:42:93:66:b7:57:
4d:53:57:3b:e9:94:b6:56:50:17:6d:0f:f3:fe:b2:
7d:fd:92:2f:87:2d:3a:aa:16:7d:e5:76:d9:9d:65:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:73:A8:CD:37:ED:C0:3B:50:94:74:87:AA:F9:5D:F0:95:71:4D:24
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/23OozTftwDtQlHSHqvld8JVxTSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:abc0::/44
Signature Algorithm: sha256WithRSAEncryption
7b:50:53:74:58:99:c8:1f:1d:1b:8c:94:31:63:6c:c0:af:27:
98:a0:23:b2:79:d5:53:59:b6:c1:67:a6:ea:7e:3e:4c:48:c5:
b0:4f:0c:c6:87:10:a1:17:8c:ed:3d:ff:0e:38:1f:a2:c5:6b:
84:92:73:b3:2a:1a:49:6d:dd:0a:ff:2a:cc:78:52:c1:5e:01:
ca:e4:89:eb:42:69:ba:8a:88:5b:3e:f3:ea:c8:21:92:c7:1c:
a2:1b:e0:8b:50:a2:90:c5:94:70:66:06:f6:de:c6:19:91:d7:
ca:69:dd:9f:2b:eb:4f:86:5f:75:96:de:2e:19:95:a9:a4:6a:
2c:cc:c6:17:b9:c5:26:3d:be:82:7e:ca:a7:4a:4d:ee:07:7d:
9d:67:c9:cf:c5:1e:9e:08:9f:6f:74:01:aa:23:63:9e:64:2a:
a2:64:15:42:c2:2e:59:78:ff:4a:f0:ca:e8:f2:1c:4e:27:bc:
97:93:f4:f1:04:1e:72:ec:b3:ab:12:34:64:a6:3b:92:5a:7c:
ff:af:4c:69:fb:a3:fa:24:2f:f9:3e:a8:19:08:4a:ca:30:e5:
14:be:f3:5e:fe:21:25:e4:d2:87:c6:0b:07:3c:73:77:0e:92:
b4:3e:30:c3:d4:61:ed:37:6d:52:3f:bb:c3:38:94:84:5d:c6:
79:06:d9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org