Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/0jytHaOPLdDbKmpD4iHGgTSxUCY.roa
File: 0jytHaOPLdDbKmpD4iHGgTSxUCY.roa (raw, json)
Hash identifier: jlECECOcOg7loPi8gPUnL1B5bMpRAoyuw4f2yHkJjcw=
Subject key identifier: D2:3C:AD:1D:A3:8F:2D:D0:DB:2A:6A:43:E2:21:C6:81:34:B1:50:26
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 03B468A5
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/0jytHaOPLdDbKmpD4iHGgTSxUCY.roa
Signing time: Sat 01 Jan 2022 08:57:01 +0000
ROA not before: Sat 01 Jan 2022 08:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199438
IP address blocks: 2a0c:4445::/48 maxlen: 48
2a0c:4444::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62154917 (0x3b468a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 08:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d23cad1da38f2dd0db2a6a43e221c68134b15026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:ef:2d:41:69:a2:ae:c4:6a:3b:bf:c3:30:
54:ba:ce:dd:28:05:5e:5b:7c:c2:d5:66:2f:72:84:
4a:18:9b:0b:ed:09:63:12:f9:2a:8c:07:b4:28:d9:
6a:f4:16:f9:d3:03:56:1c:80:00:f4:c1:1b:ca:9a:
28:19:43:76:83:a5:45:63:38:ef:6a:33:90:32:d3:
82:9c:0d:14:2a:d2:de:fd:0d:74:7e:78:65:2d:43:
bc:3f:dc:36:27:57:9c:b6:38:e5:c8:46:0a:e5:aa:
d7:a3:a0:55:3a:a9:96:76:bb:61:e6:16:dd:95:0d:
f6:35:d7:bc:b8:d2:35:35:22:f2:4c:cd:ff:1e:81:
1e:04:98:0c:92:b6:63:eb:11:f5:6c:d2:7e:e7:ca:
d8:ed:76:4c:79:5d:d2:ef:41:87:1c:d9:ed:11:e5:
ca:26:a2:25:1f:ee:5a:49:d4:8b:f5:e1:7d:ab:26:
1d:e7:a1:1e:cb:ce:0e:92:8d:72:87:59:1c:c1:5d:
09:54:15:66:44:42:e6:bd:b5:39:99:01:8e:cd:e5:
ce:17:bf:ef:2f:dc:e4:4d:d6:f6:a5:ab:e8:d4:77:
35:78:5c:3d:f6:45:98:a4:9f:63:c9:e9:bc:8b:d9:
2f:54:b9:3d:ab:35:cd:d6:15:6f:82:7e:06:74:ad:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3C:AD:1D:A3:8F:2D:D0:DB:2A:6A:43:E2:21:C6:81:34:B1:50:26
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/0jytHaOPLdDbKmpD4iHGgTSxUCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4444::/48
2a0c:4445::/48
Signature Algorithm: sha256WithRSAEncryption
af:30:c7:d8:58:9d:b0:1d:4a:8f:48:30:07:aa:6f:74:0c:54:
e0:d7:a4:e4:f0:95:ba:6b:9b:e6:a6:77:d1:cb:a7:b1:7f:6b:
e8:97:c4:f8:40:0e:ff:fd:08:c5:c7:eb:a3:58:0d:24:08:82:
cc:56:c1:84:b3:4d:53:5e:b3:7d:2f:e1:9f:27:63:0c:f9:18:
8c:9f:bc:8d:77:d2:81:8f:dd:f4:0f:62:7d:31:75:d8:2a:dd:
91:cd:d7:74:9d:68:8f:d2:f2:f4:91:44:2e:1e:71:06:c6:f2:
a5:63:92:55:60:e1:5d:21:89:63:06:28:2d:88:f3:5b:9f:6b:
40:20:1d:6a:fa:c4:e1:58:3f:29:d6:c8:64:9e:ba:64:22:59:
ed:ab:11:05:e8:ef:54:83:73:91:fd:74:a7:8e:33:29:e2:1c:
3d:5c:19:c3:90:55:53:1f:50:31:41:0b:d7:e1:05:60:71:9a:
df:a7:a5:69:26:84:1e:2e:09:72:7f:fe:46:56:03:41:6c:8c:
30:df:ce:03:9c:91:3a:0e:ce:63:62:71:da:7d:9f:ae:60:c2:
df:e8:b9:ee:e4:a0:39:fa:fa:0f:c0:4e:25:85:fc:2d:a2:ec:
9e:97:80:86:3f:62:52:cb:e3:3f:49:ad:b4:1d:79:5a:d1:5a:
6d:7d:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org