Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/vABh-QwtE5Ss1V6WTsfj793RfN0.roa
File: vABh-QwtE5Ss1V6WTsfj793RfN0.roa (raw, json)
Hash identifier: NbyHAeBrNERtgv797hqGHPvg7hUvcWAoDeqyyLdLvR4=
Subject key identifier: BC:00:61:F9:0C:2D:13:94:AC:D5:5E:96:4E:C7:E3:EF:DD:D1:7C:DD
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 01827D122255B447C57716F271F3B7381047
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/vABh-QwtE5Ss1V6WTsfj793RfN0.roa
Signing time: Mon 08 Aug 2022 10:48:36 +0000
ROA not before: Mon 08 Aug 2022 10:48:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48659
IP address blocks: 2a00:fb20:8::/46 maxlen: 46
2a00:fb20:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:12:22:55:b4:47:c5:77:16:f2:71:f3:b7:38:10:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Aug 8 10:48:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc0061f90c2d1394acd55e964ec7e3efddd17cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:1c:f8:96:d5:72:21:0c:1e:e0:0d:f8:06:
be:3b:e5:b4:54:f6:82:1c:f7:03:df:f5:8a:52:3e:
a9:f8:5f:5d:7d:43:f5:5c:e3:24:7b:ed:e3:62:9c:
2c:d4:55:2a:6e:2f:b2:03:2f:95:44:a1:fb:78:c4:
b9:d8:bb:6d:7d:0d:57:a3:a1:77:ef:15:98:cb:3e:
10:47:c1:24:89:10:f8:6a:e2:e2:e1:32:44:81:05:
17:7f:bc:16:c7:3d:18:a8:f5:56:1a:1c:9c:5e:29:
88:9e:81:89:41:e4:40:8f:00:a4:59:38:1f:6d:fe:
4b:53:a4:44:3a:95:dd:d3:0a:cb:20:69:c4:4f:9e:
1f:a6:34:68:bc:ca:52:a0:67:15:da:c0:13:f4:7d:
ce:6d:82:90:06:3f:b7:90:55:f2:6c:a3:15:98:20:
68:25:3b:89:8f:65:b4:02:ac:bb:d9:99:04:b3:bf:
17:28:52:2a:aa:09:6c:ed:34:6b:db:82:5b:79:cf:
5b:48:f7:39:2d:81:81:07:6b:40:69:23:26:82:df:
0e:16:c4:7a:bc:25:2a:c2:f6:66:32:f9:53:8f:5d:
55:af:77:cc:a8:a4:f8:db:7e:36:a1:b4:5c:00:01:
1b:4b:32:d0:38:00:41:08:5f:4f:58:b0:e0:9d:eb:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:00:61:F9:0C:2D:13:94:AC:D5:5E:96:4E:C7:E3:EF:DD:D1:7C:DD
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/vABh-QwtE5Ss1V6WTsfj793RfN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fb20:1::/48
2a00:fb20:8::/46
Signature Algorithm: sha256WithRSAEncryption
1f:83:cd:e2:6f:e2:a6:6a:48:96:13:3c:30:52:c5:00:75:c6:
06:ea:89:c9:13:1b:ab:6d:cd:1e:5d:a5:63:2d:90:7c:fb:73:
d0:b7:ab:23:8b:ab:ed:5e:c9:f9:99:0c:9c:9f:61:4e:33:e5:
80:c3:89:09:6d:fc:c9:5f:8b:05:4e:13:4f:ef:9d:2a:b5:74:
2e:b4:c7:84:ea:b8:f8:cf:c1:11:06:71:17:a8:ca:d7:21:d6:
38:c6:3c:57:70:96:15:22:48:e5:c6:31:e0:9a:0a:15:59:f3:
51:75:78:bc:ca:7a:19:62:b4:e0:48:5b:fb:54:68:b5:c8:d2:
b3:2c:b1:08:21:36:a9:fa:18:2a:ba:38:c6:ae:2f:35:96:4e:
94:54:f0:65:30:59:57:5b:96:38:dd:bd:29:9d:31:e0:38:78:
6a:39:6d:b8:97:46:ac:90:87:13:6c:41:58:a8:43:0d:34:21:
81:ab:de:a4:3d:fb:2b:e5:f6:2c:26:82:ad:62:e0:6c:6e:ac:
cd:89:59:58:c9:80:d8:5b:9b:5d:af:dd:8b:c6:b5:f7:2e:e0:
70:13:dc:d5:29:ec:d8:24:8e:ed:98:73:00:bf:40:01:1b:9c:
da:ab:28:07:40:b7:71:c3:f9:9b:3d:41:1a:de:31:d7:99:da:
ac:de:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:21 2024 by rpki-client on console-fra.rpki-client.org