Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/LeBc9KgXYcUytPxkuF2pIZR8E_w.roa
File: LeBc9KgXYcUytPxkuF2pIZR8E_w.roa (raw, json)
Hash identifier: nQPjOZLddFG7rYGsy2xNrVsuc5rIAPS4lzfqBtYtLv4=
Subject key identifier: 2D:E0:5C:F4:A8:17:61:C5:32:B4:FC:64:B8:5D:A9:21:94:7C:13:FC
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 2D16CD
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/LeBc9KgXYcUytPxkuF2pIZR8E_w.roa
Signing time: Wed 04 May 2022 12:54:16 +0000
ROA not before: Wed 04 May 2022 12:54:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212125
IP address blocks: 2a06:89c2:3003::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2954957 (0x2d16cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: May 4 12:54:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2de05cf4a81761c532b4fc64b85da921947c13fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:a2:12:8e:41:12:14:ba:d1:70:d9:bd:cb:
bb:da:17:d4:6a:5c:02:bc:36:ce:10:d8:fe:9a:2c:
4b:1e:01:f0:d5:f3:54:e3:d9:04:70:bc:49:ad:1b:
d0:f0:f5:49:aa:23:63:e5:45:b7:ca:98:f8:c4:9b:
18:c2:ac:e1:d8:9f:3f:c7:61:07:ac:23:7a:78:d1:
e7:ee:49:ed:f6:83:22:bf:17:f8:ce:f6:80:3f:4d:
d1:62:c3:ba:e4:cc:61:73:95:8b:aa:5b:18:7e:d7:
1e:23:8b:8d:73:1d:67:8e:fb:bd:a1:74:92:91:26:
c3:5f:54:7e:fe:3b:a1:61:d2:7e:aa:22:47:63:78:
72:c5:ab:46:5b:ed:83:b6:97:57:18:68:10:8c:5d:
c3:ec:aa:ba:36:a6:74:12:03:7a:db:42:44:42:7c:
a9:12:f9:a2:ca:31:9c:40:59:9d:17:39:eb:d2:76:
a7:0c:ba:35:d1:39:88:1e:6f:45:f3:c7:d0:e8:c4:
4b:11:9d:09:ab:95:00:1e:19:66:83:d2:01:e3:53:
cd:0c:3d:60:cd:20:f1:5f:80:d2:36:4f:6f:16:50:
23:85:7a:f9:22:e6:5b:c3:30:e4:3d:59:ba:1b:c9:
ef:14:6b:fd:e2:22:f7:e7:09:8b:af:7c:7f:e3:7c:
d4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E0:5C:F4:A8:17:61:C5:32:B4:FC:64:B8:5D:A9:21:94:7C:13:FC
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/LeBc9KgXYcUytPxkuF2pIZR8E_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:89c2:3003::/48
Signature Algorithm: sha256WithRSAEncryption
9c:38:11:df:e9:b3:e5:dd:ff:67:68:42:a8:4a:b1:76:8e:6b:
cb:73:4a:59:70:25:70:83:c6:93:6d:55:39:b7:ac:44:1c:91:
9e:70:af:53:a7:89:ba:11:33:ac:4e:4d:82:e0:f8:6b:7e:66:
11:d6:9b:6f:a9:a3:11:4e:3c:32:91:46:39:14:d3:4e:69:1c:
5c:86:4f:e0:19:11:f7:50:85:f7:89:c2:ba:97:6d:d1:4a:71:
80:9a:8a:9c:cb:bc:91:3e:52:e6:2c:3c:af:ca:2c:d9:b7:1e:
c8:83:ab:97:bf:f6:13:12:b7:b0:44:be:79:f9:46:e6:e0:32:
61:b2:4e:08:eb:26:bd:53:45:06:1a:43:40:22:96:4b:0e:a7:
49:ab:5e:e6:1b:fe:1d:bd:61:ba:9a:f0:db:5d:2b:f2:e1:66:
38:96:dd:3b:c9:c6:78:a1:28:38:8e:56:2f:c6:da:28:ae:00:
51:8d:9c:d6:61:d2:c6:d6:96:8b:ec:09:e4:a8:06:57:68:3e:
17:54:19:d3:87:4e:50:b6:8f:ee:52:d2:cf:34:ba:c0:55:31:
ea:d6:74:89:a6:54:38:e0:db:a2:b9:25:32:48:c4:db:9f:9f:
7d:52:95:7a:c5:0d:cc:e6:d5:ed:03:43:28:3e:32:95:cc:e8:
e7:22:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:24 2024 by rpki-client on console-fra.rpki-client.org