Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/CP2_P3-TGRKKmww39u1U4al0pZI.roa
File: CP2_P3-TGRKKmww39u1U4al0pZI.roa (raw, json)
Hash identifier: IAqST9RubB9/zaMHAPvRYum9+TGRMHBRm4NIVn2FdyA=
Subject key identifier: 08:FD:BF:3F:7F:93:19:12:8A:9B:0C:37:F6:ED:54:E1:A9:74:A5:92
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 09065E84
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/CP2_P3-TGRKKmww39u1U4al0pZI.roa
Signing time: Sat 01 Jan 2022 12:59:55 +0000
ROA not before: Sat 01 Jan 2022 12:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34019
IP address blocks: 2001:7a8:810::/44 maxlen: 44
2001:7a8:800::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151412356 (0x9065e84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Jan 1 12:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08fdbf3f7f9319128a9b0c37f6ed54e1a974a592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:37:d8:7a:ed:25:67:24:69:7a:19:66:e0:
07:e1:9c:c3:7f:8b:a3:b2:e2:58:00:ca:a1:9a:56:
8f:39:bd:10:ab:72:09:75:85:2e:87:b0:48:83:ef:
88:10:6f:83:4b:a9:23:74:d8:9a:a1:79:e9:b9:aa:
3a:27:96:34:9a:74:26:47:7a:4a:e5:23:cf:8c:ea:
cf:5c:43:ed:47:11:72:57:ae:77:28:61:9a:6a:a4:
6b:43:52:04:16:29:76:51:ff:5b:f6:9f:b7:be:4e:
e5:bb:35:36:31:74:64:1f:75:94:f7:b3:e1:3e:61:
86:99:a3:6a:5b:d0:60:09:e9:07:e1:83:0f:ee:38:
de:48:e9:20:b8:0c:f5:10:e2:2c:ff:f4:d2:43:ad:
cd:66:bc:d6:cc:99:a1:6a:ae:4d:17:47:8b:1b:f0:
13:aa:ac:55:4d:43:63:f5:56:bb:09:fb:6a:ef:9c:
b1:37:49:e4:56:a5:a4:db:f9:93:ac:0c:a5:70:29:
dc:34:5a:e0:9d:dd:d4:66:0c:d1:d3:ed:3c:13:e9:
83:58:02:35:76:5d:c4:5b:c4:f4:95:a8:cd:9d:2d:
1d:fc:34:15:d4:df:ec:8f:c6:e0:38:76:a7:bb:06:
59:a7:f2:30:4c:88:9b:49:4b:c1:80:35:1e:f4:d4:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FD:BF:3F:7F:93:19:12:8A:9B:0C:37:F6:ED:54:E1:A9:74:A5:92
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/CP2_P3-TGRKKmww39u1U4al0pZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:7a8:800::/47
2001:7a8:810::/44
Signature Algorithm: sha256WithRSAEncryption
5a:af:9b:d3:1e:ed:30:36:f8:1e:e4:eb:36:ab:ea:4b:2c:27:
6f:39:ea:60:ab:8e:ac:88:60:81:04:b6:94:35:7c:64:3a:53:
ca:ee:39:1b:b0:d4:b1:3a:9f:e1:44:fe:b7:38:cc:34:28:79:
f1:29:e4:4a:04:a4:1a:f9:48:b0:af:63:a9:18:96:e6:d0:a2:
14:06:4f:34:48:a4:0a:08:7f:97:21:6d:0c:b6:a8:03:65:a8:
34:73:2c:1a:17:80:7d:17:7f:aa:d9:da:f8:b2:81:f7:0a:65:
15:f0:41:c5:a5:0d:24:34:6a:ef:f3:38:f7:0a:7b:38:48:26:
17:7f:6b:00:9e:0b:32:62:79:d7:23:1a:ce:88:65:ff:23:e6:
c6:d5:bf:6d:5c:76:f3:d4:79:92:06:aa:49:23:80:0b:d0:68:
f2:7c:5f:67:20:82:92:1d:7c:92:03:e8:ee:a6:c4:77:be:69:
87:3b:54:fb:40:de:89:6d:75:cb:45:af:54:5c:9e:f3:29:25:
a3:93:1b:74:b3:cd:0e:69:18:a5:df:3e:91:7f:84:ed:d2:d3:
a7:eb:bb:99:45:06:c4:37:d9:d3:ea:58:24:91:13:e9:0c:5f:
48:2d:3e:03:63:f2:c2:12:a9:0c:a6:4a:ca:90:ae:bd:83:29:
c3:22:cd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:23 2024 by rpki-client on console-ams.rpki-client.org