Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/OyXXq0mnoLQMA7EvDoYub2mVjHY.roa
File: OyXXq0mnoLQMA7EvDoYub2mVjHY.roa (raw, json)
Hash identifier: NicGSZvH2dzupRSSR28nIKcx9h6INuaaetS/8nBYGKY=
Subject key identifier: 3B:25:D7:AB:49:A7:A0:B4:0C:03:B1:2F:0E:86:2E:6F:69:95:8C:76
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 17A4A99B
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/OyXXq0mnoLQMA7EvDoYub2mVjHY.roa
Signing time: Sat 01 Jan 2022 13:03:30 +0000
ROA not before: Sat 01 Jan 2022 13:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211581
IP address blocks: 2a09:e1c1:d000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396667291 (0x17a4a99b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 13:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b25d7ab49a7a0b40c03b12f0e862e6f69958c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:67:fe:f1:81:2c:4b:b3:f7:8c:97:11:48:b3:
29:44:0e:89:d6:46:ac:6e:14:c3:35:6a:8c:e2:65:
c9:61:78:06:d7:89:22:63:9c:6e:da:67:d8:c3:4b:
e4:67:71:1d:68:02:48:90:46:5c:cb:42:da:79:bc:
e0:a2:30:33:d0:37:b2:ce:ef:96:f1:dd:55:64:cc:
22:f4:fd:18:7c:95:9f:12:06:05:6c:b7:9e:9c:9c:
4b:b3:60:a2:fe:ba:81:ae:b6:bb:da:aa:6e:ff:f2:
e0:ca:96:55:9d:c8:f6:2b:e5:b1:e2:ee:c0:34:88:
76:db:01:88:24:be:f5:0d:4a:88:8b:fa:b8:2e:e5:
6a:18:69:3d:62:2d:22:76:79:be:d5:64:30:b8:59:
c7:57:b1:b9:f0:0a:af:fc:ab:31:4e:c9:10:73:fc:
48:80:86:42:48:db:58:72:19:77:55:d0:26:96:0c:
32:c8:4e:d2:47:53:41:44:d3:ff:5e:fb:15:d4:2d:
01:1f:cd:ed:bd:8e:f6:b5:b3:f5:12:0b:cb:b5:1c:
65:06:79:13:11:8f:90:ac:86:12:20:71:d7:63:78:
d9:fc:b6:0d:87:d9:71:33:21:cf:96:55:fc:23:15:
3a:b3:9e:57:6d:65:f5:9f:94:29:d5:15:2c:67:e0:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:25:D7:AB:49:A7:A0:B4:0C:03:B1:2F:0E:86:2E:6F:69:95:8C:76
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/OyXXq0mnoLQMA7EvDoYub2mVjHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e1c1:d000::/36
Signature Algorithm: sha256WithRSAEncryption
94:f2:b6:ed:94:d6:52:6c:a0:63:84:48:77:78:95:47:0c:53:
cb:eb:7b:31:dd:33:d0:b5:50:d8:b9:6f:b8:78:b8:e3:f7:08:
32:43:99:f2:c3:f4:0b:0c:01:d6:7b:fd:c0:48:29:6e:2c:0a:
ff:63:b5:bc:e1:b8:46:19:e3:e4:fc:21:03:36:88:f1:91:e8:
86:57:b9:4e:6d:d2:65:98:bb:c8:ae:d3:4f:18:5e:1b:be:ac:
57:8e:cb:cb:d7:e7:3b:49:62:aa:7f:4a:12:0d:d8:6b:5a:12:
29:0d:13:bb:6f:54:2b:fe:9b:3b:ff:3a:27:08:80:ff:33:63:
55:82:58:c1:e4:c8:df:b7:07:c7:9e:02:d1:9f:f8:5f:d6:57:
a9:8e:9d:4e:d6:4d:49:b7:7f:c5:a2:c3:30:2a:49:36:b5:06:
9e:8e:95:67:4f:a2:42:9b:29:5f:a0:06:b4:a3:e7:8a:20:48:
1d:d5:17:fd:cc:50:99:17:68:de:37:0d:25:6f:f7:be:1a:3c:
e4:1b:52:2a:ba:79:e2:69:c0:5f:96:56:29:70:36:91:22:0b:
2c:06:e5:20:99:8a:b0:e1:fd:7d:0c:aa:d9:45:5d:11:d9:76:
5b:bd:12:9f:6f:48:ca:c1:b2:26:c6:e9:32:59:59:29:44:32:
c1:fd:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org