Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/pTWgPSXlp4wh19AeNQVbfAfrKfo.roa
File: pTWgPSXlp4wh19AeNQVbfAfrKfo.roa (raw, json)
Hash identifier: LSI7VkAOaGx/uW0hM153GwD0XHjiEdDsTWILWoVQK2w=
Subject key identifier: A5:35:A0:3D:25:E5:A7:8C:21:D7:D0:1E:35:05:5B:7C:07:EB:29:FA
Certificate issuer: /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial: 06815FD9
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/pTWgPSXlp4wh19AeNQVbfAfrKfo.roa
Signing time: Tue 01 Mar 2022 13:05:07 +0000
ROA not before: Tue 01 Mar 2022 13:05:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209289
IP address blocks: 2a09:aac0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109141977 (0x6815fd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Validity
Not Before: Mar 1 13:05:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a535a03d25e5a78c21d7d01e35055b7c07eb29fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:42:c9:cd:05:83:e7:bb:0b:ac:dc:4b:08:
28:c7:c7:f5:fa:6b:c0:45:ee:3f:f2:41:8e:37:be:
b2:a2:97:97:f1:47:c2:43:cd:0a:44:1f:93:cd:00:
ad:3b:b9:9e:9c:0a:f3:86:12:21:ca:fa:03:a4:32:
9c:f0:f4:f8:1b:01:f1:45:f7:bc:85:cf:44:5a:b9:
36:e7:da:e8:b3:c2:3b:81:ff:b1:90:13:ca:d4:3f:
9b:f5:94:86:a9:69:ce:ce:01:71:51:4f:8d:49:73:
94:a5:ef:73:67:4b:a4:7c:ef:36:20:bc:62:68:46:
83:52:79:c6:17:da:a2:a0:83:29:11:c5:38:04:69:
08:f2:72:fe:ff:6f:e1:4c:52:43:48:9f:9b:7a:9f:
18:f8:fa:90:9e:26:19:45:63:83:58:f8:03:8e:c2:
86:4b:c7:1e:0f:24:fa:bc:12:80:32:b4:ae:c5:55:
45:0f:4a:df:c1:de:48:2c:ae:c4:cf:12:8c:ad:a1:
ec:25:f6:26:75:5b:2e:c8:79:90:42:26:8a:09:d5:
0c:6a:e4:9d:ca:c9:ed:12:2a:cf:26:75:31:ec:e5:
23:a1:f3:bf:bb:60:d1:3a:ce:98:c5:af:72:1b:15:
0b:6c:55:74:f9:81:93:fe:e8:d5:a5:e3:b4:63:66:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:35:A0:3D:25:E5:A7:8C:21:D7:D0:1E:35:05:5B:7C:07:EB:29:FA
X509v3 Authority Key Identifier:
keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/pTWgPSXlp4wh19AeNQVbfAfrKfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:bc:2f:72:d3:cd:e9:67:98:8d:af:d3:3c:d6:d3:0b:1e:7d:
b1:10:cf:df:a8:d3:4c:74:ea:7e:5e:03:be:2c:66:42:e7:f2:
75:29:b9:3a:c6:a6:37:f3:f6:72:22:8d:75:e8:0d:a5:29:0c:
7b:cf:69:7b:12:05:fd:af:b0:48:31:24:b2:44:92:11:be:ae:
72:90:33:32:77:b6:f4:bd:2f:ee:19:d0:8f:41:ed:99:5c:bd:
f6:a9:af:61:99:0a:21:e9:19:30:f4:24:25:1e:3b:b3:92:d6:
f5:24:bc:ce:a3:a6:ea:0b:2b:44:ea:db:83:83:93:c2:0f:c7:
04:f6:24:e4:81:78:fc:9e:89:a8:2c:0d:cc:e1:22:77:78:7e:
94:db:d1:e9:43:8f:c5:a1:fd:57:c4:fa:1c:fa:0e:5d:5b:95:
42:48:1b:58:a7:a9:09:ba:4e:ab:b7:30:c6:03:ba:f2:67:5e:
67:b5:86:13:c4:85:31:ed:c9:c8:58:29:99:c4:c3:53:1b:5c:
0d:ee:06:7e:de:7f:a2:02:d4:b3:f1:df:ab:de:29:6e:ef:f9:
32:19:73:ec:78:49:9e:a0:f5:96:d0:7c:57:39:eb:19:37:53:
e7:07:89:3e:ec:ed:ba:cc:ff:79:69:e2:fb:56:34:3e:24:6f:
45:0a:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:14 2024 by rpki-client on console-fra.rpki-client.org