Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/C1AuOuL-Mb9mEzEnCMmRa-xdyPA.roa
File: C1AuOuL-Mb9mEzEnCMmRa-xdyPA.roa (raw, json)
Hash identifier: fORCzDp5X6daQNGJJxMyGhAyk0g0viMAJQO2getS99s=
Subject key identifier: 0B:50:2E:3A:E2:FE:31:BF:66:13:31:27:08:C9:91:6B:EC:5D:C8:F0
Certificate issuer: /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial: 07B5C388
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/C1AuOuL-Mb9mEzEnCMmRa-xdyPA.roa
Signing time: Sat 01 Jan 2022 01:54:20 +0000
ROA not before: Sat 01 Jan 2022 01:54:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 2a03:5640:f000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129352584 (0x7b5c388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Validity
Not Before: Jan 1 01:54:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b502e3ae2fe31bf6613312708c9916bec5dc8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:10:87:a9:48:44:41:8a:de:2d:47:c7:e4:4d:
53:a8:28:5b:9d:02:f4:83:37:ef:e9:ed:6a:5b:33:
76:e4:65:16:17:33:64:ef:fd:6d:05:a0:8d:2d:fc:
05:70:fc:3c:c3:76:be:b2:37:fd:44:48:32:a3:f0:
e9:20:79:86:61:70:fb:85:17:95:da:bb:c0:d3:e4:
a2:25:64:d3:75:b0:be:66:c0:df:6e:82:4a:23:19:
86:4f:22:e0:fb:da:44:99:8b:8c:ac:16:82:b3:ba:
3d:52:b8:51:bd:86:76:f7:26:01:f7:73:07:fc:31:
e8:22:60:b9:36:86:31:1f:24:5f:c9:8f:86:58:fe:
0b:9e:71:2f:08:d1:45:ba:d9:2d:82:59:7c:7a:ac:
6c:c9:77:4a:6a:eb:1f:26:74:b5:18:b9:fc:4c:71:
e4:76:e3:24:04:2c:8c:61:29:36:07:85:7a:b8:f5:
fb:5c:5a:ec:2a:ef:18:61:26:d1:f3:aa:f3:07:e4:
e9:30:b9:ac:37:b3:e5:2c:ad:c0:0e:77:a8:97:e2:
02:19:73:ec:2d:40:b5:66:e1:7b:a3:9c:90:19:f2:
4b:19:e8:88:fa:4b:51:a3:13:eb:f4:96:18:95:45:
1e:fd:ad:de:dd:ee:45:29:da:44:b6:7a:bf:38:5b:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:50:2E:3A:E2:FE:31:BF:66:13:31:27:08:C9:91:6B:EC:5D:C8:F0
X509v3 Authority Key Identifier:
keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/C1AuOuL-Mb9mEzEnCMmRa-xdyPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5640:f000::/36
Signature Algorithm: sha256WithRSAEncryption
4d:18:a7:c1:da:77:be:7c:15:58:28:e9:84:33:e6:ea:3b:2f:
83:a5:3b:ff:14:04:bb:a1:f1:c3:9c:7e:80:5d:a9:30:11:d3:
72:0c:a2:29:e3:cc:59:e2:27:e8:f0:09:07:e8:d3:c4:92:e1:
eb:a8:13:c9:18:3f:37:28:52:54:bf:e4:c9:95:d9:ae:fa:26:
b6:f3:6b:ae:cd:3e:ab:cb:d9:39:49:4e:99:2a:41:d8:eb:d2:
20:81:99:99:d3:5a:16:58:a5:74:5a:83:50:57:c4:29:e7:e8:
53:4f:f4:1c:e8:2c:dd:a8:60:88:a1:bd:2c:27:08:34:4c:6d:
0f:d5:ff:9f:df:c6:df:28:a9:8f:0e:4b:ed:a9:a9:5e:7f:ad:
68:e1:ad:82:ee:1e:7d:8d:db:92:c0:74:ab:08:71:96:b6:82:
1c:56:42:06:5b:fd:67:dc:50:91:5b:2c:6c:f3:a6:bd:bb:69:
4a:7f:2a:8e:55:06:9c:a4:89:f1:c4:72:91:d0:cf:7f:2c:ba:
63:af:bc:76:d5:dc:8d:1f:98:f6:64:00:86:83:42:4f:b1:48:
33:b4:a9:4c:59:54:f5:51:90:40:5d:ad:74:8a:6c:b0:0f:41:
bf:de:51:ee:86:f8:dc:73:d2:41:72:68:d3:e3:ac:1d:f7:28:
a5:cd:41:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:22 2024 by rpki-client on console-fra.rpki-client.org