Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/Dkcb3RqAv_wf78JfNygnCH5eLsc.roa
File: Dkcb3RqAv_wf78JfNygnCH5eLsc.roa (raw, json)
Hash identifier: obWVCR/Ix2L4bsJBi1CgMDU1zuATcaZl3r5G8c+b5no=
Subject key identifier: 0E:47:1B:DD:1A:80:BF:FC:1F:EF:C2:5F:37:28:27:08:7E:5E:2E:C7
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 09BC1C6B
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/Dkcb3RqAv_wf78JfNygnCH5eLsc.roa
Signing time: Sat 01 Jan 2022 12:05:44 +0000
ROA not before: Sat 01 Jan 2022 12:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211447
IP address blocks: 2a0a:d6c0:194::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163322987 (0x9bc1c6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 1 12:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e471bdd1a80bffc1fefc25f372827087e5e2ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:04:90:c7:b1:b3:38:ea:d5:85:3b:1e:09:
40:45:53:4d:0e:bd:31:8d:ea:9d:95:11:89:07:79:
01:3d:60:73:9c:6e:f4:28:ec:4f:fd:62:77:86:39:
eb:28:de:1f:c3:bb:f6:bc:ec:94:6c:95:72:4d:20:
20:3e:c2:01:dd:2b:8d:3b:e7:98:fc:de:bd:90:c0:
9d:71:23:e6:e4:f3:7c:8c:41:2f:fb:ea:9b:94:2c:
09:e3:e3:20:46:3c:13:4f:85:4c:08:d7:e3:e1:bf:
0b:d3:61:68:e1:b9:8e:bb:cf:40:dd:cf:73:23:66:
b0:50:37:b7:22:06:23:5d:d7:89:b7:5e:10:91:34:
3e:86:0f:ed:f5:55:0d:53:0a:bb:3a:c9:0a:57:d1:
16:f8:be:22:f9:db:a0:4e:9a:91:a0:7a:3d:3b:ad:
d9:29:b0:6e:e1:68:18:e0:4c:ad:ab:e1:f5:11:0f:
e2:51:46:f0:f4:fa:bf:37:c5:79:37:dd:06:55:b7:
dc:11:dc:79:7d:c1:ab:88:ca:42:0c:9a:da:84:7d:
a5:3e:77:33:b1:f7:7d:f7:c3:fc:9b:78:5e:3d:ac:
75:30:6d:16:0a:e6:43:b2:7b:e2:ce:8b:31:57:a8:
f6:ad:d6:d6:9e:d2:c4:61:3d:17:06:5f:50:84:24:
a5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:47:1B:DD:1A:80:BF:FC:1F:EF:C2:5F:37:28:27:08:7E:5E:2E:C7
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/Dkcb3RqAv_wf78JfNygnCH5eLsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d6c0:194::/48
Signature Algorithm: sha256WithRSAEncryption
10:24:64:88:4e:ee:7f:4a:57:39:04:c6:a4:12:58:71:41:61:
be:76:af:5f:e5:41:5f:23:8e:ff:56:fc:8a:b9:c0:47:c1:f3:
93:02:ee:75:fe:54:8f:77:c3:e3:6c:2c:27:61:57:77:c9:62:
5a:45:44:9e:b5:65:80:ee:cb:84:91:c8:65:93:72:80:d5:f8:
e6:bc:1b:36:c2:9d:c9:cc:70:41:b7:70:52:b0:c3:c6:00:82:
b4:4f:e5:35:52:56:af:a1:d9:c7:64:fd:29:f0:25:6e:46:98:
93:ab:a0:0d:88:b5:c9:bd:42:97:9f:10:49:7d:07:81:00:d1:
3e:ef:f9:49:7b:a8:fc:c2:51:80:7a:59:20:a3:c1:93:60:31:
90:94:b4:2b:1a:d5:bc:a6:7b:ca:c5:56:4f:8d:1e:f4:81:5e:
5b:2c:fc:fa:5d:3b:9f:4f:d2:13:81:a5:4d:e4:bc:19:39:30:
43:36:3b:07:33:df:e6:df:fb:60:63:4b:18:11:59:e3:2a:56:
38:06:22:26:dd:72:36:4d:f9:cf:60:bb:be:25:5a:29:05:8b:
de:92:bc:b2:fe:04:e6:e9:35:76:fa:b1:58:6b:9c:1c:48:1f:
3c:66:cb:23:78:31:35:10:f6:9a:f7:07:7b:4b:96:45:7f:18:
a7:9a:7f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:38 2024 by rpki-client on console-fra.rpki-client.org