Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/Yojzw8wIZgRupe61pAHFig8KE38.roa
File: Yojzw8wIZgRupe61pAHFig8KE38.roa (raw, json)
Hash identifier: Y+s9EzDgnh4dzl82GFiiOzML7R1slg1Juv7pdYUE/X0=
Subject key identifier: 62:88:F3:C3:CC:08:66:04:6E:A5:EE:B5:A4:01:C5:8A:0F:0A:13:7F
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 09B98FF5
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/Yojzw8wIZgRupe61pAHFig8KE38.roa
Signing time: Sat 01 Jan 2022 12:05:42 +0000
ROA not before: Sat 01 Jan 2022 12:05:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203564
IP address blocks: 2a0a:d6c0:2035::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163155957 (0x9b98ff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 1 12:05:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6288f3c3cc0866046ea5eeb5a401c58a0f0a137f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:45:ce:aa:a8:7e:31:51:c4:69:7c:1e:83:
64:f2:34:f9:b9:e5:4e:ea:97:ea:1f:e1:46:82:26:
e9:f8:5a:59:1c:a7:2f:44:ba:ed:16:29:5b:23:99:
f7:8a:b4:30:3c:1d:eb:9f:14:aa:59:66:05:2a:09:
30:34:e5:de:ae:d1:1c:ca:4a:97:71:d7:d9:c0:b4:
60:6c:9c:97:11:17:1a:82:65:26:f0:da:6b:be:36:
cd:38:8d:f0:5f:ba:58:ee:d0:10:0a:49:94:bd:04:
98:18:e9:7b:f2:78:09:a3:71:3c:0d:62:11:72:78:
eb:b8:44:bf:34:9f:29:50:43:25:cf:37:94:5c:b5:
1c:bd:c4:cb:7f:b0:7d:ed:60:a1:8f:5d:e5:7b:84:
01:81:7f:11:68:9b:c6:f5:49:bb:7b:0f:48:00:ab:
4b:54:57:da:df:52:66:a6:61:19:42:9b:b4:93:64:
d2:69:71:04:3c:1a:3b:16:04:38:00:d0:15:c5:de:
a5:e9:84:f3:0e:db:93:00:50:15:ee:6b:64:2b:6e:
b9:52:2a:75:4f:20:bd:25:89:33:04:ac:1b:d0:ea:
db:aa:22:1f:09:12:69:4a:27:83:50:fe:3b:5d:06:
a1:23:47:06:ec:00:68:56:0d:a7:ea:13:dd:74:7c:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:88:F3:C3:CC:08:66:04:6E:A5:EE:B5:A4:01:C5:8A:0F:0A:13:7F
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/Yojzw8wIZgRupe61pAHFig8KE38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d6c0:2035::/48
Signature Algorithm: sha256WithRSAEncryption
6f:12:a1:37:74:71:73:51:32:c6:6d:2e:ec:3e:4d:47:f9:61:
d7:c7:cb:92:27:fc:db:21:d5:28:d6:70:6d:ba:f8:ad:b8:0c:
d2:ff:02:0a:56:3d:48:b2:71:bb:a1:81:90:42:69:21:ee:d9:
5d:c8:a1:ed:71:2b:28:cc:16:f7:3c:b1:33:e7:50:b9:42:48:
ff:82:e6:bb:14:ae:40:1f:d5:94:d2:cc:0c:1e:a4:e3:8f:29:
96:2e:ba:f9:23:78:7b:36:a2:87:63:fe:b3:42:6c:b9:f9:b7:
a8:8c:96:96:58:03:23:70:ef:3e:ff:88:46:f3:6e:44:bc:63:
e4:7c:6d:24:72:7b:f8:0a:3a:07:c5:68:f8:00:81:90:4a:2f:
7d:92:e9:c6:86:e6:1d:d4:97:23:54:10:23:dc:96:c5:e4:10:
5e:68:30:29:78:61:71:90:dc:c0:6a:bc:6f:61:46:67:00:50:
cb:51:74:87:c4:f6:7b:87:22:04:8e:97:a6:9f:fe:f6:26:f2:
09:59:09:a7:89:38:f5:bf:d9:72:6d:03:05:cb:39:d9:0f:62:
57:c5:19:20:fc:62:44:11:62:af:74:b5:3b:52:f3:68:5f:ce:
ef:6b:eb:15:58:53:e5:f8:ca:90:1a:63:28:1f:2f:b3:6b:2f:
6a:67:df:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:38 2024 by rpki-client on console-fra.rpki-client.org