Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/olU4tfOyYqrGPnqh0v3tMBSa0g4.roa
File: olU4tfOyYqrGPnqh0v3tMBSa0g4.roa (raw, json)
Hash identifier: uBNOjTMaCqoHJv18zNjZJp+JpaNWK/TR0xuophFFiSY=
Subject key identifier: A2:55:38:B5:F3:B2:62:AA:C6:3E:7A:A1:D2:FD:ED:30:14:9A:D2:0E
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 08947CE4
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/olU4tfOyYqrGPnqh0v3tMBSa0g4.roa
Signing time: Thu 21 Apr 2022 09:09:51 +0000
ROA not before: Thu 21 Apr 2022 09:09:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207469
IP address blocks: 2a0f:607:1053::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143949028 (0x8947ce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Apr 21 09:09:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a25538b5f3b262aac63e7aa1d2fded30149ad20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:d8:8e:7c:c4:56:40:29:b0:c2:3c:7a:5a:
18:ef:62:fe:8c:d9:c5:df:b0:20:06:dc:79:7d:53:
9b:ad:3a:be:99:14:9b:a3:b2:bf:e1:80:90:10:7c:
d1:cd:f5:47:30:fb:34:a2:2b:8e:12:63:c4:76:4e:
29:83:c2:2e:45:1d:6c:f4:09:97:59:91:2d:d4:14:
80:8e:a2:e6:09:1e:5b:f8:7f:9b:11:07:72:17:b8:
b4:4b:de:3b:3e:71:db:f9:7f:02:b7:e6:84:8c:31:
7b:60:b7:02:14:b8:92:27:09:4f:3f:7b:64:27:98:
dc:ca:f2:a6:18:d5:62:94:4e:db:3a:1e:ee:e6:d0:
5c:b0:ec:dd:41:2e:fb:95:c5:a2:5f:e9:4c:ce:54:
1c:17:d4:2c:00:4d:83:e6:58:bb:1b:a8:47:35:da:
6e:08:6b:41:fb:64:95:50:db:4b:d9:44:92:04:00:
90:af:15:7f:6c:04:69:20:69:b5:b6:ef:7a:64:6b:
b3:9a:64:a6:e1:4e:42:da:12:2e:82:a4:72:af:bc:
81:20:29:f8:bf:98:86:54:88:2f:9d:60:e0:18:6c:
cf:62:2a:4a:ab:2c:c2:c3:dd:0d:c7:93:d5:f7:3b:
9e:93:a2:c2:e1:a8:21:a4:e3:34:51:21:9f:1b:95:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:55:38:B5:F3:B2:62:AA:C6:3E:7A:A1:D2:FD:ED:30:14:9A:D2:0E
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/olU4tfOyYqrGPnqh0v3tMBSa0g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1053::/48
Signature Algorithm: sha256WithRSAEncryption
86:5d:8f:ee:d2:a3:e5:92:50:1e:19:7c:c7:da:0d:62:da:26:
db:46:b7:66:a1:cb:c5:2e:e7:ea:60:29:b6:73:35:57:d4:55:
47:a8:34:49:81:c3:c9:a3:f1:71:c0:0a:ae:a4:b0:23:71:cb:
10:ec:3f:1f:ba:f2:c3:b6:9b:8e:04:1a:26:5e:93:f1:67:e0:
94:a2:f9:8f:24:1e:96:81:29:40:d9:b3:53:43:30:06:c1:1f:
5a:c6:da:e5:8b:f1:14:3b:6e:41:e8:02:73:3f:b6:e1:42:e8:
01:5c:b0:34:90:d1:9d:7e:8f:7d:7e:6b:4e:53:27:8a:bd:62:
77:3e:05:d7:2d:ed:a8:a7:ee:8a:f9:09:43:11:37:a0:d0:e6:
99:13:d5:ef:0d:05:e9:56:b5:22:ad:a9:d9:78:56:1e:5e:37:
96:f4:d1:e5:fa:3a:6a:a3:59:24:3f:44:24:88:66:ef:8e:c2:
db:c9:5e:5c:c0:c1:3d:e5:87:d7:b1:92:8e:48:9c:50:cc:ed:
bd:bd:b7:44:9e:89:35:30:e3:b2:a3:3b:9c:0d:28:9e:38:9b:
11:9b:bb:55:36:38:31:43:46:6e:6a:5d:0e:17:93:8b:cf:bf:
d7:51:34:d5:78:f6:bd:7d:26:8d:e4:70:66:4c:07:d6:43:3f:
b8:8d:0c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org