Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/C9gxn2l0SOvtHs5vs_2rXNCYkmM.roa
File: C9gxn2l0SOvtHs5vs_2rXNCYkmM.roa (raw, json)
Hash identifier: VmjEy5Pb3PreKwur95VkvnC9VXZilDebfij99pAvEj8=
Subject key identifier: 0B:D8:31:9F:69:74:48:EB:ED:1E:CE:6F:B3:FD:AB:5C:D0:98:92:63
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0183141AFFE97DEC60FB6A356D41625543A6
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/C9gxn2l0SOvtHs5vs_2rXNCYkmM.roa
Signing time: Tue 06 Sep 2022 18:40:57 +0000
ROA not before: Tue 06 Sep 2022 18:40:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 11831
IP address blocks: 2a11:840:31::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:14:1a:ff:e9:7d:ec:60:fb:6a:35:6d:41:62:55:43:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Sep 6 18:40:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bd8319f697448ebed1ece6fb3fdab5cd0989263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:5b:51:53:fe:36:e4:ee:a9:ee:90:d9:6a:
de:57:74:ee:83:17:79:91:8d:10:56:d1:8d:5b:98:
61:87:d1:34:48:d5:8d:b7:3c:b9:11:16:0f:59:72:
be:5b:24:d0:0f:0f:87:e4:ba:ac:79:6b:1f:9d:a1:
79:b5:16:8a:3c:1f:14:a1:4c:69:57:7c:05:12:a6:
0c:8c:58:91:24:91:37:c4:17:30:7c:ad:5c:30:12:
57:19:a4:62:e5:d2:e6:87:71:2c:96:d5:81:55:80:
2f:4a:de:b5:db:67:20:e3:b8:77:26:0f:cd:8f:2b:
a9:ba:19:5d:d9:be:49:11:38:c5:04:2c:1f:9e:e2:
7e:b5:63:7c:0f:fe:ff:4b:71:44:4b:7f:21:cb:ed:
b9:e3:f5:d5:62:ca:74:13:09:86:bb:0c:7b:3a:8b:
89:8f:bd:45:fc:fa:43:73:e8:27:dc:e2:e7:e7:2c:
dc:8c:48:7e:1a:fe:3a:62:49:6c:c6:a7:db:a4:3d:
2d:71:59:6d:6d:6d:26:dd:61:01:00:b8:40:28:76:
ed:54:72:1f:25:e9:04:b9:71:b7:1c:66:63:ee:e5:
39:96:0b:77:81:21:a4:12:d6:13:4a:ea:0d:bf:61:
c1:21:b0:26:87:0c:47:45:67:27:a8:82:34:6c:55:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D8:31:9F:69:74:48:EB:ED:1E:CE:6F:B3:FD:AB:5C:D0:98:92:63
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/C9gxn2l0SOvtHs5vs_2rXNCYkmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:31::/48
Signature Algorithm: sha256WithRSAEncryption
8d:c8:0e:e1:f1:c7:a8:bd:86:4d:3b:e4:b9:cb:85:83:df:a2:
75:41:c5:3b:88:b0:f8:34:3a:2b:c3:c2:4b:85:27:8f:25:34:
62:66:a9:72:16:fd:47:80:38:3d:85:98:bc:1a:24:9f:c2:d6:
6e:13:f0:e8:ae:b9:29:d8:5c:69:7c:1c:a6:4d:84:e5:ec:08:
e3:0b:13:61:dd:14:6b:89:47:66:e5:cf:38:f9:e8:10:bd:ea:
11:af:bc:1e:1a:c9:54:f9:af:cf:af:21:28:36:05:0f:3e:9c:
58:e4:b6:38:76:eb:88:47:80:73:01:28:e2:ed:eb:0c:71:c5:
0e:7c:0e:f4:1f:2d:63:b4:44:c6:63:b5:94:1a:0f:41:8b:6f:
e0:b9:9d:48:29:01:38:5f:b0:26:75:fd:14:65:c6:bd:18:62:
9e:c2:ce:50:06:6b:7a:58:87:3a:1b:cc:bd:52:4a:f6:4c:87:
61:d9:2e:ba:e9:83:9c:c1:7f:67:2b:4f:75:ae:b6:f0:00:0a:
e5:e0:48:53:5c:83:76:56:ad:f8:57:31:d1:e0:cc:9c:3c:52:
f9:14:a7:02:19:c9:bf:5f:0c:f7:8c:02:ad:cf:cd:04:35:40:
2d:59:dd:5d:a1:8f:7d:9b:1c:88:d7:0c:2e:cd:c7:4e:4e:f2:
5e:c3:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org