Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/lDyLAVhc__0n08Idus79KFsyueA.roa
File: lDyLAVhc__0n08Idus79KFsyueA.roa (raw, json)
Hash identifier: oUhkWwWu8LzZOcK49SAH4nGXLIAS+uUF0omX+BbMf7g=
Subject key identifier: 94:3C:8B:01:58:5C:FF:FD:27:D3:C2:1D:BA:CE:FD:28:5B:32:B9:E0
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 082018D8
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/lDyLAVhc__0n08Idus79KFsyueA.roa
Signing time: Sat 01 Jan 2022 06:56:00 +0000
ROA not before: Sat 01 Jan 2022 06:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212997
IP address blocks: 2a0f:5707:aab1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136321240 (0x82018d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 06:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=943c8b01585cfffd27d3c21dbacefd285b32b9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5e:57:a1:b6:5c:7f:89:65:ed:28:8e:ee:8b:
c4:b4:a6:c4:1a:5e:f6:e4:21:82:b2:97:67:67:ab:
31:56:e7:18:f3:76:2d:80:c7:be:55:d5:7a:ee:e0:
0e:39:9c:a8:6d:2c:61:97:a4:8a:94:76:c5:60:95:
1b:57:b1:8b:0e:8a:2b:11:b0:8e:75:75:0a:db:75:
1d:b2:28:d2:96:6b:5a:76:e8:76:1e:8b:19:9f:a9:
4a:18:71:3c:b5:10:67:5e:ea:b0:b6:3c:be:26:a9:
f5:45:a8:6c:d2:f0:06:45:38:0b:dc:e7:e2:07:18:
36:29:4c:f6:f8:cb:f7:5a:5c:b6:5e:7a:f1:c9:de:
eb:da:e9:55:7c:63:f8:ad:a8:7e:90:08:ba:83:be:
3b:b0:35:59:f9:a5:32:d2:e5:17:f1:3e:ab:0d:ab:
35:6c:1f:80:ee:b2:c9:bc:44:9c:61:a0:84:25:07:
1c:6b:68:98:33:e8:ef:e4:f1:86:a6:76:3d:cc:c4:
be:db:81:26:32:0b:5c:c0:7d:4d:84:c5:6c:5a:41:
23:6f:8c:69:3a:84:e5:29:3a:86:a1:aa:75:6c:7d:
e4:b8:37:73:c1:cf:8e:a5:c5:3d:47:7f:1d:16:41:
4a:51:fe:37:08:d6:e9:bc:64:d5:39:20:cc:97:e6:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3C:8B:01:58:5C:FF:FD:27:D3:C2:1D:BA:CE:FD:28:5B:32:B9:E0
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/lDyLAVhc__0n08Idus79KFsyueA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aab1::/48
Signature Algorithm: sha256WithRSAEncryption
06:6b:35:f9:2d:36:02:16:2c:b9:9e:7d:79:f2:c7:20:a9:0e:
f1:78:3d:25:d7:d0:06:7c:7c:0e:55:2e:0d:07:25:de:20:27:
bc:ad:38:2e:57:dc:16:bf:e6:06:f0:d3:84:84:23:ec:c3:02:
f5:25:ef:95:62:3b:1f:51:0a:f2:b0:75:f8:9c:ce:90:0a:63:
14:09:50:f0:6f:30:d0:5b:bb:bd:21:ac:b2:d4:46:90:a1:f3:
6b:fc:81:ab:42:e3:00:a4:ea:47:7e:9b:06:3b:22:43:c6:58:
27:89:04:80:f3:50:86:ac:8b:a5:9d:10:57:63:a6:e3:e9:e6:
39:a8:54:ef:a4:02:03:ad:2f:1a:e5:c9:f2:3f:56:a8:15:38:
fb:63:16:ff:4f:11:9f:65:98:6d:82:06:c9:70:99:0a:f8:51:
cb:1f:15:8b:a9:6f:a1:42:ae:cc:81:29:55:2c:f9:97:ad:03:
f2:60:3a:53:67:6e:21:44:1d:bc:83:5d:3f:a8:00:63:18:ed:
18:b9:e5:65:c3:f3:94:a1:65:59:38:58:5f:91:b5:f2:10:00:
68:32:67:33:64:d5:c6:aa:74:98:47:dd:94:c1:f9:9b:b6:c2:
2d:4c:0a:1b:cc:23:07:97:d7:92:16:03:24:99:a0:9a:32:16:
08:2d:ab:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org