Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jF3ll2SxS6BDcRnAgn7gVMVFa0U.roa
File: jF3ll2SxS6BDcRnAgn7gVMVFa0U.roa (raw, json)
Hash identifier: 4AjuM93qZna4bQGiCezx6r8ztV3ugjsPiKVuX+D61t0=
Subject key identifier: 8C:5D:E5:97:64:B1:4B:A0:43:71:19:C0:82:7E:E0:54:C5:45:6B:45
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 07AEFF60
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jF3ll2SxS6BDcRnAgn7gVMVFa0U.roa
Signing time: Sat 01 Jan 2022 16:06:03 +0000
ROA not before: Sat 01 Jan 2022 16:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209562
IP address blocks: 2a09:9ac0::/48 maxlen: 48
2a09:95c0::/48 maxlen: 48
2a09:4f40::/48 maxlen: 48
2a09:9b40::/48 maxlen: 48
2a09:4fc0::/48 maxlen: 48
2a09:13c0::/48 maxlen: 48
2a09:5040::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128909152 (0x7aeff60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 16:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c5de59764b14ba0437119c0827ee054c5456b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:67:2b:0f:1e:eb:5f:77:26:20:88:3c:d6:
7e:8c:35:8b:5d:24:e0:03:7f:af:a1:ff:c3:55:bd:
cb:a4:a6:af:14:f8:15:98:a2:b8:95:4f:0e:5f:7c:
d0:b0:7e:41:df:c7:f4:0c:d0:9e:b8:34:52:7e:5d:
6c:22:49:53:a3:83:8f:f0:7e:b7:c1:7b:6f:94:1a:
4d:93:49:78:5b:bb:45:a7:31:de:45:84:06:16:dd:
6d:5c:60:31:2c:27:f8:70:f0:46:57:b4:d1:49:d1:
a7:3b:28:ff:98:73:01:97:cf:40:fe:de:28:34:43:
66:3d:b8:33:97:79:7c:9a:3f:f6:5e:67:ed:d0:0b:
cb:98:af:b6:12:56:a9:c3:84:78:4b:e1:f1:c9:9d:
66:5e:c8:9c:56:54:49:5a:cf:ce:e8:9c:1d:6e:9b:
7d:0d:5e:20:bb:9d:38:5e:9b:0d:19:c3:62:6b:b6:
9c:89:b5:a7:ea:6c:b0:9c:08:bd:79:9f:7f:8b:96:
c7:38:e4:6d:61:a7:7f:b8:d9:58:f4:55:de:4f:59:
bd:32:89:ee:6e:f6:53:12:1a:d7:48:82:35:e2:89:
5c:be:80:62:be:a1:a9:55:00:4d:db:30:3e:e3:d7:
f7:72:21:7e:a4:e4:ff:37:c4:9d:b6:74:e4:94:e9:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5D:E5:97:64:B1:4B:A0:43:71:19:C0:82:7E:E0:54:C5:45:6B:45
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/jF3ll2SxS6BDcRnAgn7gVMVFa0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:13c0::/48
2a09:4f40::/48
2a09:4fc0::/48
2a09:5040::/48
2a09:95c0::/48
2a09:9ac0::/48
2a09:9b40::/48
Signature Algorithm: sha256WithRSAEncryption
73:08:d1:03:9e:75:3a:d3:c5:30:cb:01:e8:7a:e4:e7:dc:96:
2f:f8:13:04:eb:6a:c8:01:1a:28:04:c4:5d:39:db:40:7b:a0:
e2:46:fb:51:4e:ed:3e:9b:8e:d7:ac:25:39:43:2b:e4:29:75:
fe:77:0a:49:98:74:9c:9e:56:15:ac:e1:64:82:52:e8:21:5b:
f1:2d:96:5d:14:15:ce:d1:66:97:e4:a2:8b:46:0f:07:75:5e:
85:d9:dc:a2:b8:d8:b7:51:40:8b:1b:cc:08:d4:f1:0f:c8:b2:
45:3d:66:ab:b0:dd:92:c9:d6:f0:a5:54:c7:08:07:26:14:a5:
7a:80:f2:6e:bd:af:6a:53:3c:f1:0d:0c:ef:53:66:e7:e6:fc:
58:b3:31:9c:89:08:26:93:9d:af:b4:7e:b5:e5:3a:99:83:ab:
ad:80:1a:dd:cc:78:29:fe:ef:7f:79:ac:f9:e4:64:e6:d5:b1:
cf:cc:6d:44:c4:81:b1:2c:62:64:93:50:d1:c7:13:89:db:90:
93:f2:26:4c:bc:12:de:6b:8f:3d:c7:3a:b1:be:47:73:18:33:
9b:38:6d:18:49:df:83:0c:ca:a4:e8:26:1d:33:f5:fb:65:79:
35:de:20:a0:fa:96:6c:76:92:a4:16:bb:c4:04:bc:12:89:5a:
41:ab:db:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:23 2023 by rpki-client on console-ams.rpki-client.org