Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/8kdaXpl6iL0lBB9efdkefqTwQeU.roa
File: 8kdaXpl6iL0lBB9efdkefqTwQeU.roa (raw, json)
Hash identifier: ok10kBxkJwADXXPTjgP3U1ITUfUjgRpeAOp5dLQXlfY=
Subject key identifier: F2:47:5A:5E:99:7A:88:BD:25:04:1F:5E:7D:D9:1E:7E:A4:F0:41:E5
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 3935EA1A
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/8kdaXpl6iL0lBB9efdkefqTwQeU.roa
Signing time: Tue 05 Apr 2022 14:00:35 +0000
ROA not before: Tue 05 Apr 2022 14:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59747
IP address blocks: 2001:148f:fffc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959834650 (0x3935ea1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Apr 5 14:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2475a5e997a88bd25041f5e7dd91e7ea4f041e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:cb:4d:c4:63:43:a3:ff:5b:80:a4:f8:7f:
a8:79:b6:6a:55:1a:0f:6d:c1:5c:7c:55:eb:73:41:
98:bd:b8:65:3a:04:ab:ec:a1:30:68:ec:5c:f4:52:
93:a6:60:51:71:a8:8a:b2:a5:57:81:8a:2f:b3:21:
0b:bc:bd:0c:f4:d2:81:70:83:e2:73:35:13:17:44:
e3:a2:7a:4d:f2:7f:4b:77:6e:98:1e:ff:4b:06:3f:
be:fd:4b:07:a3:b6:fb:15:89:66:45:19:07:8a:c7:
1a:c7:a1:b8:71:b5:e3:9b:d0:17:21:25:3b:65:5b:
59:cb:d4:83:72:f2:48:7b:cb:75:23:7a:81:25:d0:
67:f8:47:8b:bb:92:de:55:51:4a:48:35:fb:8b:a1:
44:f8:96:86:32:e8:10:b1:da:56:42:86:a0:36:fb:
89:b3:4f:45:b6:76:99:27:39:01:5b:86:4a:3c:26:
f4:ba:a7:77:6e:8c:31:c7:7a:e4:2c:32:a8:d5:de:
75:ef:06:b7:81:57:86:9c:8a:39:46:04:0e:eb:6c:
d2:a2:d3:e8:b1:95:9d:25:27:05:3d:60:de:45:7a:
70:b4:0a:69:69:b9:23:06:f4:ee:b7:13:b1:80:13:
5e:a1:df:06:25:08:99:4b:48:2f:52:76:9a:52:2a:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:47:5A:5E:99:7A:88:BD:25:04:1F:5E:7D:D9:1E:7E:A4:F0:41:E5
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/8kdaXpl6iL0lBB9efdkefqTwQeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:148f:fffc::/48
Signature Algorithm: sha256WithRSAEncryption
45:4c:75:a6:0d:88:dc:87:db:65:3b:8e:23:d7:15:46:7d:05:
40:6e:43:d7:75:97:da:53:06:8c:9e:8f:d6:21:d1:81:18:e2:
e9:59:2d:96:85:a8:a0:eb:8e:15:e1:ff:4a:68:cc:ff:10:1f:
bc:18:44:56:0b:d6:98:07:03:f5:22:4e:bc:97:50:aa:20:a8:
af:ea:0d:2a:ed:54:82:de:a6:dc:95:8c:96:8d:1f:df:6f:08:
05:6a:6c:29:89:71:78:24:67:9f:58:5d:ef:8e:17:6b:a4:3f:
40:6f:13:19:20:fd:67:ee:b5:36:20:4c:62:db:2d:9b:81:f9:
30:ae:c5:28:12:7e:32:e8:c3:6c:14:85:94:7f:7a:61:00:ac:
cb:c1:31:a4:5e:9f:0a:c9:13:c8:16:63:75:37:31:1a:1d:73:
17:67:ad:da:73:79:e4:29:7a:62:b3:86:31:ac:fe:54:d8:a1:
cd:cd:b2:3d:49:0e:de:ce:4d:0d:cb:c2:7d:6e:50:68:80:06:
8b:e7:ce:ba:6c:ab:37:eb:51:47:0d:c5:6f:a9:95:40:40:4a:
9b:a8:19:e6:4c:d1:f8:1f:3b:fd:63:cc:95:d4:48:51:38:38:
aa:2c:ae:5d:64:b7:43:bb:96:9f:1a:e0:12:32:f7:c1:c2:d3:
01:0b:48:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:54 2024 by rpki-client on console-ams.rpki-client.org