Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/Gr0sAJ4beRCpoqn-iwaf9J_cGew.roa
File: Gr0sAJ4beRCpoqn-iwaf9J_cGew.roa (raw, json)
Hash identifier: FzrP/ZnpREFsYcDW20xuU+SEYQOezAiTK5dhHj43ox4=
Subject key identifier: 1A:BD:2C:00:9E:1B:79:10:A9:A2:A9:FE:8B:06:9F:F4:9F:DC:19:EC
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0183141B07CDFEDD1134EC2578AB2216BC48
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/Gr0sAJ4beRCpoqn-iwaf9J_cGew.roa
Signing time: Tue 06 Sep 2022 18:40:59 +0000
ROA not before: Tue 06 Sep 2022 18:40:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201924
IP address blocks: 2a11:840:20::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:14:1b:07:cd:fe:dd:11:34:ec:25:78:ab:22:16:bc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Sep 6 18:40:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1abd2c009e1b7910a9a2a9fe8b069ff49fdc19ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:69:2e:41:c9:c9:77:5f:7b:5b:f1:a2:17:
09:d6:4e:1c:60:ba:88:c0:38:f9:8a:69:60:15:9b:
06:54:15:d9:d4:bb:be:aa:c5:e4:c9:8d:4e:35:cf:
25:53:55:52:d4:6a:22:7a:c0:3a:c6:a2:75:40:18:
90:8a:0f:3e:c4:9d:60:7f:3b:46:6e:38:32:b6:0e:
56:37:c1:b1:a7:86:60:bd:07:ae:b1:74:d0:aa:6d:
20:f2:ce:fa:e1:d6:a4:e0:89:e2:f4:61:69:70:4f:
88:85:de:50:c2:ef:19:f8:85:63:b4:dc:42:10:59:
b9:5b:c5:8a:c5:87:cc:2f:76:8e:b0:5b:a0:6a:7f:
32:a3:9a:f6:21:b0:dd:e5:5f:3d:fc:7e:fb:9d:7e:
06:36:58:bb:68:a1:51:cd:9f:62:e5:b7:e9:8a:5f:
97:61:4c:83:b7:95:55:ff:f2:0a:63:cc:00:f3:5b:
f9:33:3f:90:60:bd:f3:2c:78:e4:c2:7e:c2:53:25:
c5:1d:b3:c8:87:3d:59:6e:b9:4b:fb:04:97:f2:f0:
c0:27:45:5b:ed:2e:06:eb:9b:39:ae:53:50:f1:a8:
39:4c:79:d6:63:b4:04:f7:8d:4e:7d:b5:75:10:d3:
94:2a:42:36:a5:eb:fa:64:59:bf:6d:40:8e:70:d0:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BD:2C:00:9E:1B:79:10:A9:A2:A9:FE:8B:06:9F:F4:9F:DC:19:EC
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/Gr0sAJ4beRCpoqn-iwaf9J_cGew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:20::/48
Signature Algorithm: sha256WithRSAEncryption
71:80:4e:e2:c9:4c:7b:3f:a6:1e:ee:d8:77:27:c4:12:68:26:
75:1b:78:b4:62:e5:6b:2f:b7:d5:76:9e:3e:eb:fa:7e:7b:69:
3d:e5:d5:bc:81:a1:91:e8:f5:d1:18:d1:d0:db:34:44:17:59:
02:09:42:5a:a6:c1:5f:87:53:98:7f:f5:b1:17:f3:94:2c:a4:
be:d5:a1:68:f9:82:b7:3b:5c:7d:4e:84:78:52:24:16:f4:a7:
d1:be:1d:d6:00:c4:5e:ee:96:6f:47:07:63:f1:4a:c7:b4:75:
ec:0a:4b:3a:f7:f5:54:3b:61:5d:49:30:82:9b:7c:28:d3:c1:
40:ff:88:80:25:a5:59:e4:2a:2c:43:dd:b7:34:ec:a6:e5:c5:
c1:b9:21:0c:40:c7:35:ca:75:42:f4:be:87:14:6e:6d:1e:84:
e3:32:e4:e5:4f:d4:da:5e:67:52:4e:60:73:01:b9:ca:db:79:
90:71:23:4c:fd:7f:44:c7:be:86:42:8e:c8:62:d5:da:9d:d6:
48:6e:87:58:8a:c2:34:e5:a7:e6:7e:e2:ed:0c:53:c3:94:be:
0e:cf:1e:c2:9c:b5:2e:2e:d0:ba:c6:e3:d4:0b:10:b6:cb:f0:
e3:75:87:12:48:24:52:cc:34:58:24:83:48:2a:ff:3b:80:3b:
8f:7f:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org