Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/5bdc8qOMJXfJz5Zg0rV5ZMeZqdI.roa
File: 5bdc8qOMJXfJz5Zg0rV5ZMeZqdI.roa (raw, json)
Hash identifier: goVQu65P0FG8nykQkmH34rlk8MQpv+9Itc8GXFqTUx0=
Subject key identifier: E5:B7:5C:F2:A3:8C:25:77:C9:CF:96:60:D2:B5:79:64:C7:99:A9:D2
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 089A4F72
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/5bdc8qOMJXfJz5Zg0rV5ZMeZqdI.roa
Signing time: Thu 21 Apr 2022 09:18:02 +0000
ROA not before: Thu 21 Apr 2022 09:18:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209557
IP address blocks: 2a0f:607:1000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144330610 (0x89a4f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Apr 21 09:18:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5b75cf2a38c2577c9cf9660d2b57964c799a9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:3b:b2:c5:1c:4b:e3:a6:44:54:7b:89:8e:
eb:c1:5e:ae:c2:ef:f4:07:f0:59:d7:83:69:06:53:
ff:2a:81:60:5a:17:3b:8e:86:b1:d5:47:cc:ef:54:
b3:e0:8f:44:d7:c1:b6:89:4d:46:a4:7c:d9:c8:5f:
2c:86:ff:05:59:52:a9:c3:8c:44:bd:46:58:20:ef:
53:c0:05:b3:ed:67:32:d1:17:08:b0:88:62:88:93:
1b:11:98:77:26:9a:cb:bf:f3:34:89:e7:37:c8:e3:
da:6f:73:1d:80:8f:76:1d:7e:6b:0e:10:1f:d8:9c:
4b:58:cf:61:ba:65:af:aa:ed:ea:69:e1:35:64:cc:
20:41:a9:95:b1:a2:e4:ab:86:e3:03:cc:db:5d:c1:
9c:27:38:de:5d:e2:de:18:d8:1f:bc:c6:8c:a7:ab:
2c:62:ff:f3:cb:a7:f8:d3:75:f0:a6:be:89:90:fe:
b8:c0:d7:84:74:47:0f:89:b7:2f:3b:4b:80:e2:2d:
93:06:39:0b:b2:ac:8d:94:03:1e:35:db:c4:5b:0b:
5a:5e:b6:6c:81:ae:42:2f:8a:cf:a2:6a:ef:ea:15:
1e:d2:dc:24:92:d5:60:b2:fd:67:66:87:85:88:f4:
bb:f0:a8:9d:f1:45:dc:97:ce:60:ea:d7:34:1c:cb:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B7:5C:F2:A3:8C:25:77:C9:CF:96:60:D2:B5:79:64:C7:99:A9:D2
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/5bdc8qOMJXfJz5Zg0rV5ZMeZqdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1000::/40
Signature Algorithm: sha256WithRSAEncryption
9e:21:a9:78:6a:7a:c1:e0:2f:17:99:5d:22:90:bd:0c:bf:61:
d1:87:da:25:e1:3c:f8:24:5c:2c:db:90:60:1a:3d:c4:00:95:
f0:df:9f:aa:f5:a3:0f:78:2f:b0:40:bb:70:f4:9d:66:a7:02:
e7:39:6d:13:9a:eb:04:4a:f0:57:55:06:f8:42:ce:c3:fb:42:
a8:73:91:d8:c1:e4:58:4b:92:5f:35:7c:bc:25:89:96:45:02:
8c:cd:cf:98:fc:13:a2:27:60:f4:a3:93:97:93:04:7c:b4:25:
26:2a:b3:c5:fa:5c:9b:b5:fd:fc:2f:46:0a:ae:f6:8e:70:91:
58:32:ff:6c:8c:30:de:92:bb:02:06:62:46:0c:e3:d0:93:da:
a3:36:06:f2:5a:6d:34:68:7c:9d:d7:07:b4:78:ed:db:41:37:
d1:83:f1:23:59:c6:bf:8d:18:65:21:d1:79:de:f3:7a:e7:53:
59:75:e7:aa:9b:f0:7e:9a:c1:d3:6b:d3:06:54:04:7d:d2:e2:
03:cc:c8:40:bd:29:ba:c9:7e:80:48:23:2f:e9:19:d0:20:71:
52:d9:17:59:84:4b:ca:93:b7:d7:48:01:64:33:31:4c:06:ba:
80:41:5a:d3:cb:b7:23:e8:96:f8:3b:ce:c2:85:42:42:68:04:
ef:26:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org