Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/A6X2702YDa-SJRrdFyvkB-BzUSw.roa
File: A6X2702YDa-SJRrdFyvkB-BzUSw.roa (raw, json)
Hash identifier: Qh7LrU3dhcU6GBoJh2i+c2hnaORqX0azr5INeZ7AIEc=
Subject key identifier: 03:A5:F6:EF:4D:98:0D:AF:92:25:1A:DD:17:2B:E4:07:E0:73:51:2C
Certificate issuer: /CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Certificate serial: 053AC6F7
Authority key identifier: 4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/A6X2702YDa-SJRrdFyvkB-BzUSw.roa
Signing time: Sat 01 Jan 2022 10:59:49 +0000
ROA not before: Sat 01 Jan 2022 10:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61095
IP address blocks: 2a04:1040::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87738103 (0x53ac6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Validity
Not Before: Jan 1 10:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03a5f6ef4d980daf92251add172be407e073512c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:fe:c2:4e:49:ee:c0:74:f3:44:23:1f:85:
44:73:c2:a6:2c:af:34:f3:ef:cd:98:69:18:74:3c:
be:a2:42:ba:ea:26:46:65:83:e7:b4:61:2b:94:25:
71:5a:7f:e3:40:87:2f:7b:cf:22:da:7f:50:99:b0:
31:22:a2:f0:75:ab:34:5d:49:01:9e:19:16:e7:46:
46:27:de:7b:23:7e:18:3f:7f:0f:41:23:0d:c2:bd:
38:bb:e7:f5:5a:18:35:88:d1:70:6f:e5:dd:f1:d2:
dc:00:1d:b7:7d:4a:a8:d4:77:8b:e9:91:c0:24:f5:
af:16:e4:19:3f:e7:fe:5f:e2:62:c9:59:08:da:e6:
f0:46:89:c3:78:87:bc:73:d8:1c:e5:5a:1f:d6:bc:
90:2c:01:ac:6a:0f:a4:39:05:4d:7b:ca:f9:6c:9b:
9e:de:5a:c6:8c:a2:5f:27:e0:bd:8e:73:19:cf:93:
40:c3:b5:54:85:5e:b2:8f:7c:73:09:b4:14:fc:91:
50:d9:3c:44:4d:c9:18:05:48:07:af:b5:6e:f3:65:
1b:7b:5f:30:a9:3e:1f:34:3b:0f:5c:65:f5:75:36:
3f:2a:bc:a6:7a:48:69:37:a4:eb:6b:2c:f3:fc:72:
9f:a2:0b:9b:3a:58:5c:46:19:49:cb:11:5f:a2:73:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A5:F6:EF:4D:98:0D:AF:92:25:1A:DD:17:2B:E4:07:E0:73:51:2C
X509v3 Authority Key Identifier:
keyid:4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/A6X2702YDa-SJRrdFyvkB-BzUSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:1040::/29
Signature Algorithm: sha256WithRSAEncryption
57:4d:7f:20:a8:c0:8f:8c:93:9d:7b:d5:bc:66:62:d1:3d:3c:
8c:05:65:85:25:9c:a9:0f:53:48:09:0e:cc:37:ce:ea:5d:54:
b0:b0:90:4b:c5:57:1c:b4:39:4a:37:03:ff:2d:52:8c:66:f7:
2b:1e:6a:da:3d:16:ed:a9:46:5a:b3:c6:0f:33:ae:12:77:92:
f7:d9:43:84:d7:a6:9a:70:c5:38:af:e7:cf:9e:ec:3c:8a:bf:
3a:bf:f6:2b:38:1e:ad:b0:2f:41:7a:61:4f:5e:b1:b6:dd:59:
b8:b6:2b:c3:02:a4:91:13:f9:fe:e0:12:ce:a3:46:34:4c:59:
a5:c2:a0:88:41:aa:b4:0d:5d:4a:fb:b3:71:c0:29:83:c9:bb:
b3:e5:08:71:66:57:fb:9a:4a:c2:8f:e1:b5:be:0d:69:50:29:
d3:d2:a1:7e:47:82:4f:d4:83:88:7f:c5:d3:a5:1e:0f:b6:e2:
7c:cd:8d:9e:2e:1a:49:df:09:40:52:26:ad:58:79:a4:ac:b9:
87:cb:95:a7:3b:82:f6:dc:02:fa:c7:fb:a5:d1:16:75:38:fd:
43:8b:6e:9d:69:95:4f:b4:29:cf:9a:c2:a9:89:c1:e4:30:5c:
fe:c3:6b:2d:ca:85:4e:cc:5b:7f:d7:e1:12:1f:f9:85:38:66:
fb:f4:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org