Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/K6LFkMMr4L2MH_j5UPg42vBPy4U.roa
File: K6LFkMMr4L2MH_j5UPg42vBPy4U.roa (raw, json)
Hash identifier: Kptn9+qHhq/xJFXXIFIX6fWC0hV2Q6vv3HZxsVCna24=
Subject key identifier: 2B:A2:C5:90:C3:2B:E0:BD:8C:1F:F8:F9:50:F8:38:DA:F0:4F:CB:85
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0183141B08AC0A588B82065324E5D3B77563
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/K6LFkMMr4L2MH_j5UPg42vBPy4U.roa
Signing time: Tue 06 Sep 2022 18:40:59 +0000
ROA not before: Tue 06 Sep 2022 18:40:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204094
IP address blocks: 2a11:840:22::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:14:1b:08:ac:0a:58:8b:82:06:53:24:e5:d3:b7:75:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Sep 6 18:40:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ba2c590c32be0bd8c1ff8f950f838daf04fcb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:e6:90:a6:aa:9e:ca:32:e1:dd:e5:f4:2f:
19:3a:5e:8e:97:24:ca:fa:b1:ff:dd:5c:64:12:11:
19:c2:69:96:04:31:9b:33:82:6c:4a:d0:45:db:07:
e0:40:53:a5:eb:b0:34:18:ef:ce:cf:05:3a:d3:5b:
34:38:7c:4d:f4:a5:4b:f4:2b:d8:ff:ac:70:c5:e4:
c4:6e:c1:2f:a0:7f:4e:38:8e:9f:bc:46:dc:44:47:
ed:05:02:4b:54:71:a2:2e:c3:bb:2b:ef:bf:0c:4a:
20:a3:33:01:b4:43:f8:eb:0e:86:c1:7c:13:82:0c:
af:51:3e:2e:c6:37:f7:68:9b:f9:fe:f7:4a:d0:48:
2c:00:0f:f4:db:0e:83:c1:f4:4a:95:0a:ed:1d:68:
8d:5e:14:f6:3b:c6:c8:dd:34:31:16:3d:ba:68:b3:
f5:43:fc:e0:39:21:15:30:6d:2a:70:1c:09:40:b5:
79:30:63:f0:da:59:b0:48:25:13:01:f9:a7:b3:e8:
dd:84:e4:b5:2e:98:1c:f2:5a:45:dd:cc:16:96:2a:
4c:86:ca:e9:c4:12:15:a5:dc:79:44:4e:49:96:9d:
94:1d:e6:66:13:6c:dd:05:22:01:a5:1f:ee:d2:52:
a6:a1:b3:78:58:69:1d:81:42:06:5e:0d:78:2e:f2:
65:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A2:C5:90:C3:2B:E0:BD:8C:1F:F8:F9:50:F8:38:DA:F0:4F:CB:85
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/K6LFkMMr4L2MH_j5UPg42vBPy4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:22::/48
Signature Algorithm: sha256WithRSAEncryption
98:53:53:60:52:70:d5:7a:40:49:0f:2c:1e:98:9f:d1:6c:4b:
16:e1:46:db:86:e6:cd:99:e4:6d:9c:00:02:18:1d:43:40:0e:
24:0a:12:91:a3:5d:92:22:57:44:0f:5a:72:e4:f5:eb:31:5c:
95:8e:9b:30:ad:8a:6f:d9:e6:d4:dd:c1:cb:8c:49:0f:9b:46:
92:15:0f:1e:ce:a8:ac:ce:45:6b:39:41:87:67:00:58:38:8c:
06:03:d3:b0:70:26:b1:59:7c:3a:bd:4e:56:e6:d1:15:0b:36:
a9:ca:9a:24:34:55:03:94:f9:1c:93:9f:88:72:a8:78:2a:f3:
dc:52:59:cc:c8:6f:0d:f2:1d:a1:86:5f:e1:a1:ae:ed:b7:f7:
73:4d:6d:0f:6a:c0:11:26:32:61:05:7d:6c:64:49:20:20:48:
86:8b:80:d9:4f:cc:5c:ff:c6:0b:71:7b:d0:0a:10:43:e4:71:
c4:82:5f:5e:6b:99:5c:c2:3a:be:ed:a9:b2:29:96:ef:ad:0d:
27:ce:96:45:13:79:48:12:92:bd:c7:0c:2d:5b:94:cb:22:93:
ef:fa:da:46:4e:64:ab:52:c4:16:92:40:22:5f:db:55:79:e4:
e8:46:1d:0a:fb:87:18:0e:8e:7f:09:a8:60:b5:d6:ab:1e:11:
73:1f:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org