Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/xlXLtwPhF4L-Rt3hQ_iSrbJ9QdY.roa
File: xlXLtwPhF4L-Rt3hQ_iSrbJ9QdY.roa (raw, json)
Hash identifier: 2GUPiwXM0IVDHRCinViIJFQwuGjYg7KpG5vX+lErnhE=
Subject key identifier: C6:55:CB:B7:03:E1:17:82:FE:46:DD:E1:43:F8:92:AD:B2:7D:41:D6
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 2129977B
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/xlXLtwPhF4L-Rt3hQ_iSrbJ9QdY.roa
Signing time: Sat 01 Jan 2022 13:00:37 +0000
ROA not before: Sat 01 Jan 2022 13:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203396
IP address blocks: 2a04:9a00:1021::/48 maxlen: 48
2a04:9a00:1022::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556373883 (0x2129977b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 1 13:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c655cbb703e11782fe46dde143f892adb27d41d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:44:33:4a:20:3a:8e:ba:18:4b:a8:95:3f:
bd:f7:fe:b7:07:3c:45:7d:ee:c2:d9:ac:94:8b:61:
eb:f5:d2:c3:fc:75:fc:55:b0:b1:af:15:49:42:6e:
9d:92:08:57:00:27:91:49:01:f2:ed:7e:d7:4c:7e:
3c:14:17:99:b2:12:80:df:a0:54:96:d1:90:cf:d3:
3f:a3:41:06:be:56:72:c2:38:1e:c8:70:99:b2:67:
8e:44:94:88:8e:e5:7e:66:e4:06:37:8e:13:ce:f0:
3f:fb:0d:02:0e:e4:43:14:d3:63:b3:be:d7:3e:7d:
f1:1a:3a:c1:47:68:8b:cd:d7:a9:43:ee:60:3b:e2:
47:90:4f:aa:cd:6f:92:fb:b2:2e:c7:24:a2:1b:05:
9f:ad:66:52:42:dd:23:de:83:d1:91:4c:6f:73:16:
dc:ae:ba:30:61:9a:7e:c7:90:63:8b:6c:78:3b:ca:
77:54:b2:c0:4a:c1:af:40:6d:43:28:86:38:d6:8d:
78:fe:70:c9:1a:63:64:7c:90:d3:3c:9e:38:5d:9e:
83:3a:cc:49:aa:e9:04:d6:6c:d1:83:3e:55:77:9a:
7b:60:c3:71:8d:6d:fb:57:14:98:a1:26:de:0d:1f:
2d:f5:ad:d6:7b:5b:52:bf:61:ad:0f:6d:6a:2f:00:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:55:CB:B7:03:E1:17:82:FE:46:DD:E1:43:F8:92:AD:B2:7D:41:D6
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/xlXLtwPhF4L-Rt3hQ_iSrbJ9QdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a00:1021::-2a04:9a00:1022:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ab:9d:09:c9:57:f7:8d:43:58:54:e3:39:8f:54:c1:3c:b6:76:
21:a8:d7:cb:96:e3:f5:3d:9b:2a:d2:44:d6:10:e1:0d:b2:6b:
49:d3:7b:f1:e7:eb:c5:75:6d:08:f6:e3:8a:43:80:d4:9f:c7:
26:c0:24:1d:05:1d:e5:de:36:18:de:84:9f:38:b8:a5:d9:15:
07:f7:84:25:7c:cf:22:56:24:bc:54:48:9b:15:32:c3:99:77:
4f:c6:55:52:7d:8e:ad:7d:07:a6:83:a1:1e:0f:72:a4:25:04:
ef:96:51:3b:3b:7c:4e:42:05:de:2e:10:fe:6f:86:eb:b3:6c:
1e:1d:14:b4:25:6e:02:80:22:1d:5d:54:8c:e7:f2:af:20:13:
af:91:55:d7:bc:65:07:7d:db:2c:09:1a:a5:ef:89:70:f0:2d:
9c:be:b7:ab:db:a5:2e:39:e6:a2:50:64:00:5e:43:ff:83:71:
51:72:74:e1:dc:b3:96:dc:4e:2e:20:d8:44:10:fb:1f:53:11:
ec:6c:db:ee:08:09:82:c4:d2:48:03:f2:08:82:ec:11:f7:70:
b7:8d:f4:c9:65:0f:86:7f:d5:a4:91:f6:21:77:5c:13:30:a1:
27:5a:f2:85:70:b3:95:e4:50:0b:2b:7e:b4:8d:0f:33:0e:21:
a9:0a:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org