Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/C-qrsWRUHy4MVjwjSOnAXX8UTuc.roa
File: C-qrsWRUHy4MVjwjSOnAXX8UTuc.roa (raw, json)
Hash identifier: DZJGIhfdwyHI5csqdC/kZleg82HfZqvtg24hlK122ek=
Subject key identifier: 0B:EA:AB:B1:64:54:1F:2E:0C:56:3C:23:48:E9:C0:5D:7F:14:4E:E7
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 084151AA
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/C-qrsWRUHy4MVjwjSOnAXX8UTuc.roa
Signing time: Sat 01 Jan 2022 11:00:28 +0000
ROA not before: Sat 01 Jan 2022 11:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211935
IP address blocks: 2a0e:f43::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138498474 (0x84151aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Jan 1 11:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0beaabb164541f2e0c563c2348e9c05d7f144ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f6:be:04:50:38:39:95:3d:7c:8d:50:8b:90:
7c:b6:2a:26:2d:47:36:86:20:ec:09:ff:cc:7f:76:
2d:ef:73:41:50:a2:11:d0:ad:ec:c4:da:d3:a3:02:
c2:44:6b:27:1c:89:79:ad:c6:42:8d:c3:09:94:e0:
4d:57:36:51:0d:6d:cb:3c:b2:c5:24:3e:f7:92:53:
20:d0:e7:b8:42:a8:46:ad:cd:8e:e0:2b:9c:49:c6:
b2:f1:ff:b3:54:58:48:55:be:c3:66:24:3c:5c:a6:
19:21:98:33:63:66:dc:4e:45:e4:9b:0e:8e:10:f2:
ab:a3:b9:03:13:07:65:e6:d0:3e:60:92:48:42:9f:
02:7c:24:40:9a:9a:45:3c:a2:75:e3:d5:6b:f2:fd:
bb:98:d5:2a:7e:17:db:e2:b7:08:55:fd:75:3e:9c:
ca:be:45:61:ff:a7:f5:25:ad:0a:ac:c8:11:c9:82:
d3:b5:5d:fb:12:34:9a:a2:7d:07:ff:83:b7:3c:be:
46:57:a6:9c:86:ff:bc:0e:6d:7f:0f:d6:02:29:81:
6d:e0:08:07:9d:a8:dd:0e:d7:6f:fe:db:86:18:e8:
9a:97:47:73:94:91:8b:61:75:6d:9b:c3:16:87:9a:
1d:5e:1b:c6:c3:6a:0b:a3:a4:7a:cc:9c:cc:5c:e5:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EA:AB:B1:64:54:1F:2E:0C:56:3C:23:48:E9:C0:5D:7F:14:4E:E7
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/C-qrsWRUHy4MVjwjSOnAXX8UTuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f43::/48
Signature Algorithm: sha256WithRSAEncryption
62:a5:f1:55:35:97:66:7c:4b:59:3e:48:48:b5:68:39:64:33:
94:43:39:24:77:ab:3b:a3:62:35:0d:98:c2:c3:75:ee:47:37:
df:bf:12:64:c5:79:4c:ce:06:20:54:b5:20:6c:d5:72:86:22:
5d:43:1c:7e:4d:d6:61:bd:61:8d:c6:42:e7:3d:b1:3c:2b:78:
06:d1:7f:65:90:29:39:be:ce:5c:88:ad:b6:ba:50:ab:f4:6c:
73:68:7f:08:20:bc:26:ca:1f:a2:40:dc:ac:63:9c:4f:05:8e:
9f:1c:ed:15:5c:3a:c4:93:e7:46:32:f6:d1:c2:75:f6:80:d5:
54:f3:0c:39:94:11:fc:05:2f:b6:e6:5b:6c:5b:d1:c7:f4:8e:
aa:97:f8:be:9b:bf:12:ce:56:6f:b5:f4:ac:4b:da:14:02:6c:
62:92:5b:b7:07:0a:f4:68:e5:74:8c:b7:f3:64:df:c8:c6:81:
b8:51:e0:e3:3a:12:06:ff:94:38:6f:13:0e:c0:f3:a1:84:e2:
da:9f:eb:20:d8:a3:b7:dc:28:6c:ad:f3:34:03:f2:cf:8e:c7:
7c:f9:2c:97:d5:42:92:86:4d:1b:bd:84:4a:c9:16:4c:61:0d:
bf:9b:1e:32:1f:56:77:4e:0b:a7:1a:9c:31:e2:e3:15:6b:f9:
e1:63:a3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:03 2024 by rpki-client on console-fra.rpki-client.org