Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/rPYnC7lbOlLJEk71cFoT8P-Wp4M.roa
File: rPYnC7lbOlLJEk71cFoT8P-Wp4M.roa (raw, json)
Hash identifier: ixDMjRVqJ6rajs7Twn2f15xy+eQkkvM4E77vdF6ilOg=
Subject key identifier: AC:F6:27:0B:B9:5B:3A:52:C9:12:4E:F5:70:5A:13:F0:FF:96:A7:83
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 17902A32
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/rPYnC7lbOlLJEk71cFoT8P-Wp4M.roa
Signing time: Sat 01 Jan 2022 13:03:19 +0000
ROA not before: Sat 01 Jan 2022 13:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62387
IP address blocks: 2a00:f826:11::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395323954 (0x17902a32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 13:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acf6270bb95b3a52c9124ef5705a13f0ff96a783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:73:8c:0f:55:67:cd:b5:5a:1d:b7:5f:88:
5f:72:c0:05:6f:8b:16:32:1e:98:45:90:97:ba:da:
4a:34:41:ce:70:1e:a2:c4:fa:90:dd:61:dd:de:da:
20:64:ca:c8:b9:a2:b1:b5:cb:02:a6:34:7f:8e:0a:
4c:e1:82:bc:43:cf:01:1c:4b:4b:b1:ca:6b:37:31:
0e:3e:ac:98:3a:07:1b:3c:be:e4:6f:10:0e:61:d1:
a7:fe:ce:38:22:8b:9a:11:f3:59:f0:5f:43:a6:1e:
49:e6:95:51:8c:b6:78:2e:9f:c3:6f:b9:76:84:69:
64:c5:b2:a9:ac:36:3e:fa:fd:3d:99:8b:96:ad:34:
b3:18:d2:7b:f6:32:ff:80:d2:a8:d2:68:b4:30:03:
5b:4b:f1:c6:ed:8e:bd:db:19:b2:50:a5:c6:70:49:
67:29:47:2a:ac:8c:95:63:39:74:fd:15:a9:6f:93:
6e:d6:83:2f:f0:d2:26:92:36:9a:49:78:d7:04:24:
3a:4f:72:5c:79:79:33:e3:dc:1c:2f:92:27:46:90:
15:eb:e9:74:45:bf:22:b7:e4:6a:7a:63:87:19:03:
88:51:64:b8:34:b0:dd:93:4a:dd:3a:85:19:e5:f2:
de:2e:64:f3:08:a6:9e:6a:79:cc:e8:f0:ec:1e:0c:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F6:27:0B:B9:5B:3A:52:C9:12:4E:F5:70:5A:13:F0:FF:96:A7:83
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/rPYnC7lbOlLJEk71cFoT8P-Wp4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f826:11::/48
Signature Algorithm: sha256WithRSAEncryption
2f:bd:dd:06:3a:7e:41:55:28:f1:ea:38:ab:bb:83:01:86:6b:
e4:ec:f7:f7:21:b1:46:e0:3d:17:6d:4a:d9:96:d2:05:86:0a:
63:a0:0a:92:68:cc:84:86:60:c3:a0:19:6f:a8:c9:d6:1a:c0:
51:8a:d4:7c:bc:38:40:11:e3:ec:88:c1:c2:b2:1a:5f:e6:0c:
ca:a2:5a:4a:04:bf:31:8f:99:ec:c7:2c:1b:e6:dd:cd:07:f0:
5f:24:e3:8c:2c:68:40:76:03:40:58:20:71:1c:32:cc:ac:e7:
30:cc:2f:33:b0:5c:44:1b:1e:0f:34:76:2e:2b:aa:51:2c:80:
05:d5:26:b2:ba:7d:24:b6:94:dd:35:98:2a:f1:b1:20:8c:d8:
58:ba:80:86:a2:09:b6:e1:f2:fc:d5:97:fe:21:e2:38:7d:31:
1a:2b:e7:44:11:6e:3e:56:1a:db:61:42:c5:67:75:77:58:bc:
95:fe:e9:09:8b:6b:f4:c0:02:9c:de:0b:f5:f7:49:4c:4e:02:
bb:3c:7c:60:d2:a6:57:05:fc:f8:56:a5:3a:c8:c2:29:1c:96:
3d:9c:44:f7:f0:41:8f:c1:06:ab:48:c4:66:b6:4b:7c:5e:c3:
31:07:1b:08:df:48:51:d3:97:fd:c8:b4:48:7a:e8:fd:23:43:
46:56:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org