Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/70tyO_N6cJuLmeyJI-q6MtDgzSs.roa
File: 70tyO_N6cJuLmeyJI-q6MtDgzSs.roa (raw, json)
Hash identifier: ACkRY5+XYFh8q95iraohxr7zOUDSB2M6iNqbZSKz88Q=
Subject key identifier: EF:4B:72:3B:F3:7A:70:9B:8B:99:EC:89:23:EA:BA:32:D0:E0:CD:2B
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 0183D1B706C4B019510CE522DCC1A2A161C8
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/70tyO_N6cJuLmeyJI-q6MtDgzSs.roa
Signing time: Thu 13 Oct 2022 14:19:36 +0000
ROA not before: Thu 13 Oct 2022 14:19:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202278
IP address blocks: 2a13:5680:ffff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:b7:06:c4:b0:19:51:0c:e5:22:dc:c1:a2:a1:61:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Oct 13 14:19:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef4b723bf37a709b8b99ec8923eaba32d0e0cd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:b3:7c:7d:ec:4d:df:86:47:a8:00:f8:d8:
95:26:71:29:a4:08:13:1b:12:49:a1:99:e5:81:38:
7e:c5:33:05:58:e6:ba:ab:c9:59:f9:60:a4:83:86:
41:c3:bc:03:fd:42:4f:4a:a2:51:7c:40:f1:5d:8a:
55:f2:54:ef:8a:f0:8f:8a:2d:12:52:8f:58:34:92:
79:11:e8:90:4a:fa:30:71:4f:d4:a1:d4:07:88:43:
0d:07:74:db:73:85:82:12:f1:28:29:c4:00:ca:33:
35:0a:8b:f8:4a:d0:7a:16:ea:02:9c:91:fd:6a:ef:
d2:4d:fc:f6:e0:f2:47:6b:a8:0e:58:d6:87:c5:63:
22:a3:c7:34:4e:1a:9f:04:81:0c:1c:d6:07:04:6c:
17:48:86:37:bc:4c:63:55:12:c0:e5:15:95:7c:79:
3a:f6:5b:1b:f1:2b:e5:3f:6a:64:85:d0:c0:af:0e:
fd:30:cd:ba:b7:ca:33:99:55:b4:3e:ca:3d:fd:98:
37:1a:af:56:c8:db:f0:f8:30:b4:b9:2b:dd:9b:f1:
db:ad:7f:51:67:31:96:17:f8:42:11:d6:9c:11:ff:
78:5e:0a:da:56:f9:a6:25:34:8b:8f:b9:19:25:84:
af:b3:f0:47:f6:21:31:07:c5:70:18:7c:ea:5a:06:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4B:72:3B:F3:7A:70:9B:8B:99:EC:89:23:EA:BA:32:D0:E0:CD:2B
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/70tyO_N6cJuLmeyJI-q6MtDgzSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5680:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
2e:48:10:7f:da:1a:95:d4:71:93:3c:6a:a5:91:2a:ff:54:c2:
cf:09:55:07:e3:02:f8:65:90:ac:71:01:93:80:b6:5b:91:b7:
c8:26:50:df:da:b6:d6:8e:ff:ad:32:74:d2:fb:98:1a:9f:0b:
76:80:6f:03:1f:73:db:27:fd:8e:3b:2f:d1:c3:ff:a8:62:e1:
72:8b:9f:16:9e:85:fb:d3:19:2a:00:bc:ae:d3:c4:24:9c:6f:
5c:d2:d7:99:4d:a6:85:1f:9d:aa:cf:f5:a5:4a:cf:8c:45:0f:
04:4d:67:d8:03:46:77:20:b7:7a:9b:93:7c:ff:26:8f:28:0b:
f6:9b:ca:e7:96:99:e5:53:e1:43:2c:c1:7b:48:a4:46:20:73:
4a:5b:87:51:8d:4b:a2:15:7b:a4:f1:ad:54:a7:57:d7:9e:e8:
d8:1c:b7:a0:d9:c6:0c:29:27:76:74:d1:c6:31:9a:e9:67:f1:
dc:2e:d1:e7:b4:fd:9d:38:e2:6a:da:5d:3f:b3:54:db:73:c3:
d7:8c:94:b2:49:2c:1f:4a:c8:45:95:a8:f6:9d:ce:f3:f5:e5:
24:9c:5a:98:1b:1c:36:90:6e:06:22:8d:13:93:26:ff:71:1d:
33:a2:df:70:2b:78:37:05:df:de:0c:65:2c:26:15:83:4c:45:
fa:ff:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:18 2024 by rpki-client on console-fra.rpki-client.org