Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/DgGFw1T4avIgqt-bU3Q8FNQISm0.roa
File: DgGFw1T4avIgqt-bU3Q8FNQISm0.roa (raw, json)
Hash identifier: /BKuhbvU0uIxxmgYRGIdbPsSDAOPFVDPhZK0z2Vh7MI=
Subject key identifier: 0E:01:85:C3:54:F8:6A:F2:20:AA:DF:9B:53:74:3C:14:D4:08:4A:6D
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 21DD02B4
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/DgGFw1T4avIgqt-bU3Q8FNQISm0.roa
Signing time: Tue 15 Mar 2022 09:52:52 +0000
ROA not before: Tue 15 Mar 2022 09:52:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13127
IP address blocks: 2a07:3501:1081::/48 maxlen: 48
2a07:3501:1080::/48 maxlen: 48
2a04:9a00:1118::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568132276 (0x21dd02b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Mar 15 09:52:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e0185c354f86af220aadf9b53743c14d4084a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:32:e1:20:bd:95:a3:d6:4b:bf:aa:93:be:
36:23:ad:cd:48:68:03:3d:e1:b2:06:0a:76:57:cd:
c5:05:a0:12:0e:83:4a:25:16:b1:b5:49:76:aa:b5:
bc:fb:f1:a1:cf:50:38:4c:1b:96:49:68:42:18:2a:
c2:be:a1:f6:e3:13:b9:e9:3e:aa:34:6c:f1:d5:34:
04:02:f2:5c:c0:8a:26:e5:90:99:f1:86:88:7e:3e:
d4:97:44:c0:51:f7:0b:1e:54:ca:5f:e3:60:c4:45:
9a:06:98:20:c0:d1:b1:75:3d:c2:2d:85:9c:f4:5f:
fc:1b:03:47:5e:7f:8c:b7:63:7b:e7:72:8b:dd:c2:
20:be:57:b7:06:37:ef:71:5b:50:a2:bb:e0:0b:a9:
da:d9:4e:35:e3:0e:fa:e2:bc:02:6e:ef:c0:21:46:
c5:5d:28:2a:72:20:d1:ec:a6:cf:dd:9c:60:a4:f0:
01:ff:0c:a9:e1:69:15:9b:41:c0:62:be:55:b5:39:
63:7d:f4:a0:92:27:40:3e:40:f9:cc:f2:81:94:eb:
08:2a:47:8a:17:b6:37:4c:dd:ca:d2:74:15:74:3a:
85:1d:67:d2:f3:7f:c8:89:02:e6:36:92:f0:bb:e1:
52:f2:5d:88:c9:4e:63:fd:80:36:3b:5f:e5:6f:93:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:01:85:C3:54:F8:6A:F2:20:AA:DF:9B:53:74:3C:14:D4:08:4A:6D
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/DgGFw1T4avIgqt-bU3Q8FNQISm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a00:1118::/48
2a07:3501:1080::/47
Signature Algorithm: sha256WithRSAEncryption
77:1b:2d:80:2b:9d:33:2e:28:6e:09:0c:6f:10:e2:c2:cc:db:
af:34:1b:a8:c1:2f:a3:e4:d5:29:a9:28:b5:7f:02:20:7c:a1:
72:01:22:09:19:00:05:cf:79:bd:f6:5e:64:a4:c9:47:12:24:
9f:b2:22:cb:de:9b:25:57:22:19:fa:a8:6d:ee:aa:3e:65:ce:
d7:77:98:26:62:70:46:78:79:89:eb:f9:a5:af:72:e1:3c:83:
59:bc:cf:46:a1:fd:2a:65:84:9d:67:5e:0a:be:c1:bc:f2:12:
06:a8:eb:04:b6:d0:2c:b0:dc:6a:f9:5e:d1:41:36:68:8b:08:
52:22:bc:52:ae:23:0a:cf:9a:e3:87:ed:71:ce:84:76:ae:8d:
f2:6d:16:ad:34:c6:86:c0:3f:13:e2:f5:35:e7:92:ac:21:a9:
3f:e4:d9:14:05:5f:61:d5:42:0c:3d:31:dc:04:8d:3d:29:83:
56:b3:bd:d4:5b:07:c3:bd:7b:88:23:67:9d:04:f3:1e:6a:51:
23:57:fd:90:df:01:20:1e:08:46:ec:f5:87:f6:a2:bb:87:03:
02:48:32:c2:c2:1d:bb:44:dd:4e:a9:03:ee:90:f4:d3:19:18:
51:45:f3:67:86:bb:2b:dd:be:6c:13:3b:53:69:47:16:30:63:
d3:5d:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:53 2024 by rpki-client on console-fra.rpki-client.org