Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/ecEASx4Cn58JEQzQe58fOp_W1kI.roa
File: ecEASx4Cn58JEQzQe58fOp_W1kI.roa (raw, json)
Hash identifier: 8H41Q9fT6tWuPKaqfoKqAATAVtP7JUY+n5UakBzuRUs=
Subject key identifier: 79:C1:00:4B:1E:02:9F:9F:09:11:0C:D0:7B:9F:1F:3A:9F:D6:D6:42
Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial: 0183141B01667FB50D7ECB4FFA5BA94ABBE4
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/ecEASx4Cn58JEQzQe58fOp_W1kI.roa
Signing time: Tue 06 Sep 2022 18:40:57 +0000
ROA not before: Tue 06 Sep 2022 18:40:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30900
IP address blocks: 2a11:840:27::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:14:1b:01:66:7f:b5:0d:7e:cb:4f:fa:5b:a9:4a:bb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
Validity
Not Before: Sep 6 18:40:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79c1004b1e029f9f09110cd07b9f1f3a9fd6d642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:a9:63:cb:25:31:6e:20:7c:82:0b:a9:81:
07:8b:c0:87:9f:95:3b:68:91:82:ff:af:d7:ad:f8:
a0:0a:eb:ce:77:1f:87:a9:86:bf:02:4b:6c:3e:f3:
53:e0:5e:b5:16:fc:c5:d5:d0:8b:1e:89:d8:3c:f1:
2e:78:ec:01:41:19:3d:8d:bd:da:12:97:e9:1f:cb:
4b:a7:38:30:16:74:71:ca:0a:2f:99:23:97:0a:4f:
eb:e7:18:df:70:2f:8e:0b:72:44:36:15:15:3e:0e:
3d:95:9a:1b:b8:f4:0b:f2:3a:78:d0:f4:26:1c:ac:
b2:81:85:81:45:91:6a:41:62:c9:52:e0:a8:2f:d7:
6e:d1:37:12:4a:aa:a2:d5:a6:88:40:1d:74:59:d8:
08:c2:d9:7c:1b:cf:f5:33:97:ad:b3:e3:69:e3:08:
14:7e:63:13:fe:51:46:a1:e0:e4:60:d5:f7:e5:6b:
04:5a:aa:f7:7c:8e:48:34:1f:16:7b:9b:d9:a2:01:
ec:8c:6e:03:19:32:1e:28:f4:9b:af:67:c6:5d:b1:
2b:b3:93:03:2b:82:cf:67:c8:51:5d:5d:71:74:ed:
92:3f:99:46:a7:f3:e4:4b:68:2c:fd:91:5e:e3:5b:
ba:cd:81:a4:2b:8a:ca:81:60:65:3d:46:ed:94:3f:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C1:00:4B:1E:02:9F:9F:09:11:0C:D0:7B:9F:1F:3A:9F:D6:D6:42
X509v3 Authority Key Identifier:
keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/ecEASx4Cn58JEQzQe58fOp_W1kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:840:27::/48
Signature Algorithm: sha256WithRSAEncryption
8f:ab:0f:2f:2a:5f:8e:a5:3a:0e:86:20:09:07:1a:bb:aa:b9:
7d:1a:ff:df:47:77:c7:48:58:d1:76:03:c1:1b:d8:5b:ec:fc:
d1:33:f4:a7:dc:c2:ea:94:fd:64:6d:b9:df:12:6a:74:53:b9:
70:d5:23:46:5f:ec:b3:9c:a3:90:33:6e:d8:60:92:8e:db:ef:
9b:af:c0:ef:b9:a0:7f:35:b8:ed:d9:c5:32:33:d9:7c:a7:93:
13:c1:49:4d:a3:9e:9d:0b:8a:09:49:11:58:32:c5:28:60:82:
72:e5:02:04:81:a1:7c:8e:b9:71:b4:58:91:ba:7e:20:b1:33:
69:82:46:3d:3f:47:3d:22:e4:f1:29:7e:ad:b5:42:25:37:24:
64:41:0e:2d:d5:b9:ac:99:3b:eb:15:39:f4:26:21:be:fa:1c:
0f:55:ef:2a:e8:d9:57:7a:0c:ec:af:bc:0b:36:d2:5c:99:75:
87:64:d9:95:a7:0a:a1:cf:00:dc:61:fa:9b:e8:ca:b1:fe:8c:
b1:69:1b:34:9c:ca:ab:4f:cd:ce:30:cc:e7:19:29:3f:0b:b9:
e8:33:38:7a:0c:38:91:12:d1:0a:04:cc:0f:46:32:a5:e1:86:
f4:ec:b3:25:69:85:e2:a5:27:89:63:9e:cb:02:5f:6e:49:de:
e1:ca:21:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:20 2024 by rpki-client on console-fra.rpki-client.org