Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/JlQyrCYeNjBXVF-G89DW5oLMLnw.roa
File: JlQyrCYeNjBXVF-G89DW5oLMLnw.roa (raw, json)
Hash identifier: O5HetwwMpjWvig5D2K+fHwxq2JaNGkNXONLTCAqRMaw=
Subject key identifier: 26:54:32:AC:26:1E:36:30:57:54:5F:86:F3:D0:D6:E6:82:CC:2E:7C
Certificate issuer: /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial: 067EAEB5
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/JlQyrCYeNjBXVF-G89DW5oLMLnw.roa
Signing time: Tue 01 Mar 2022 13:05:06 +0000
ROA not before: Tue 01 Mar 2022 13:05:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208083
IP address blocks: 2a0f:a180::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108965557 (0x67eaeb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Validity
Not Before: Mar 1 13:05:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=265432ac261e363057545f86f3d0d6e682cc2e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:bf:84:07:29:85:59:af:f5:df:61:32:d8:
fc:e1:29:b3:05:15:3b:38:26:2f:1a:10:79:47:66:
7a:4a:4c:85:c7:a4:92:d2:b6:ef:df:a5:80:aa:be:
93:33:76:85:24:7c:e9:37:2f:60:0d:6a:70:54:1c:
5b:20:ca:7d:40:8d:7f:3d:71:ab:35:8d:f4:3f:d8:
85:9e:42:2e:b9:d5:4e:a6:ce:e8:af:74:2d:6c:9c:
aa:bf:2f:bc:fb:90:11:11:84:15:1a:16:9e:ea:be:
5f:5c:ef:e3:3f:43:2e:e6:05:67:41:c8:fb:95:e7:
3d:cf:b1:94:78:10:bf:8c:b1:26:14:78:89:b9:2e:
2b:71:bc:c7:74:c9:80:f6:c3:7f:3f:b5:aa:35:0a:
ee:70:07:d2:f3:b5:66:1b:ea:87:d4:75:34:87:a2:
57:79:2c:4b:8e:38:54:03:16:1b:03:cd:a9:01:00:
b5:95:0a:9d:65:de:cb:d1:a3:6c:1f:53:e9:2a:e6:
f4:b6:21:e7:ac:2d:73:bd:ee:4f:bd:09:39:41:ad:
63:5e:85:c1:cc:a5:16:64:9f:39:ba:cd:75:03:0c:
7d:ae:25:b8:42:76:48:68:a9:82:e6:f1:1d:d3:4b:
15:37:31:d6:8f:7a:c8:6a:45:63:78:f4:3c:20:a1:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:54:32:AC:26:1E:36:30:57:54:5F:86:F3:D0:D6:E6:82:CC:2E:7C
X509v3 Authority Key Identifier:
keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/JlQyrCYeNjBXVF-G89DW5oLMLnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:a180::/29
Signature Algorithm: sha256WithRSAEncryption
85:33:55:a1:07:b0:72:50:20:37:be:d2:f1:bf:c3:75:57:9f:
40:d6:da:1e:a0:f7:8d:3c:bf:e6:93:75:6d:9e:3d:73:bd:02:
15:88:34:25:41:f3:50:83:5e:c6:79:89:9e:d6:0f:e3:2c:4f:
02:d2:60:df:08:cd:f8:8f:8d:80:74:14:43:05:47:c8:16:1e:
95:9c:30:3c:53:db:9b:b5:28:5c:99:2a:cf:2d:65:1a:f6:7c:
26:69:2e:71:8d:7f:17:54:ba:79:56:44:a2:44:fe:e9:1d:ff:
7e:91:54:79:dc:8a:14:5e:10:cc:d7:94:29:7f:31:5b:4c:f9:
2a:17:49:51:f0:f8:ed:6d:96:da:d3:b6:be:3d:47:63:62:8a:
98:79:56:08:1b:37:af:6a:54:0a:3a:63:db:5b:a1:17:c9:b8:
70:91:39:7b:58:9c:26:da:ff:d9:b2:5e:91:32:9c:14:26:a6:
99:60:6b:ea:e1:9b:bf:26:6b:e7:b3:af:88:24:76:69:14:89:
82:38:09:2e:88:a8:36:7c:39:40:a2:20:d8:57:9a:3a:e9:cb:
e0:35:d3:38:1d:ab:ee:a6:83:e0:5c:b5:f2:2a:67:d7:0e:aa:
c0:3d:d5:04:2e:1d:f3:e4:4e:b5:73:56:89:60:a0:5d:6c:3f:
d4:d1:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:52 2024 by rpki-client on console-ams.rpki-client.org