Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/VduXAHl4pb4TCRjzeahLAWHv9KI.roa
File: VduXAHl4pb4TCRjzeahLAWHv9KI.roa (raw, json)
Hash identifier: IiXkJBry5BwLCduGFUkTVMeKfFVC/n8ec/Rc17sZQQc=
Subject key identifier: 55:DB:97:00:79:78:A5:BE:13:09:18:F3:79:A8:4B:01:61:EF:F4:A2
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 1289B330
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/VduXAHl4pb4TCRjzeahLAWHv9KI.roa
Signing time: Sat 01 Jan 2022 10:05:48 +0000
ROA not before: Sat 01 Jan 2022 10:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57831
IP address blocks: 2a07:8f40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311014192 (0x1289b330)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 10:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55db97007978a5be130918f379a84b0161eff4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:bc:44:16:0b:5d:e4:83:0e:13:40:e5:a3:
e2:82:19:33:c6:8b:2f:11:af:3d:cd:33:26:bb:a7:
84:51:ce:42:77:e7:e2:8d:09:5b:f9:39:ad:de:bf:
01:cc:37:b7:d4:e9:63:a2:a1:e5:9f:18:95:cd:ce:
38:fb:b1:43:05:ed:ab:51:fc:1b:89:fa:07:c2:23:
fa:89:44:fb:03:a0:3a:70:bf:1d:84:d6:17:f4:af:
29:86:50:d7:7c:e6:9a:7c:c9:72:ef:7b:84:57:48:
6a:ed:ee:15:cf:42:47:67:47:14:2e:24:c1:0e:f3:
e0:ad:41:5d:7e:1e:cf:8c:a7:d5:af:05:46:68:0f:
9e:18:cd:40:56:c2:7d:d8:dd:bf:af:37:4f:22:86:
d1:26:e2:af:7c:ed:a6:98:39:a0:88:33:23:14:88:
52:cb:28:d0:24:f4:6f:63:ea:07:0e:e7:36:51:dc:
52:9e:6a:a4:2e:e9:9d:16:c3:54:f9:41:2a:8b:b9:
dd:c8:44:d7:7a:2b:0f:61:d2:8d:d7:c6:70:19:3a:
49:ec:db:16:68:56:d2:e2:34:52:a9:78:40:13:5c:
18:b5:c9:b1:83:92:0e:18:65:c1:f7:05:82:9b:df:
47:e0:37:61:41:63:f7:4b:18:4a:a5:d3:48:c3:6b:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DB:97:00:79:78:A5:BE:13:09:18:F3:79:A8:4B:01:61:EF:F4:A2
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/VduXAHl4pb4TCRjzeahLAWHv9KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:8f40::/29
Signature Algorithm: sha256WithRSAEncryption
6c:44:42:8e:f1:17:ed:c9:11:75:2e:eb:9d:73:95:1b:84:31:
33:98:93:c8:78:db:02:a5:83:54:08:30:cf:b4:bf:57:03:6f:
d9:d3:cf:66:3e:da:cd:d0:66:3b:3c:1d:81:b5:26:48:9c:a3:
da:01:54:b3:e2:ee:ec:44:20:74:4f:10:f0:55:79:1c:ab:f7:
6e:ca:85:3b:14:c1:bf:e9:25:36:bb:56:1f:65:7d:23:63:37:
b9:4d:65:77:97:a7:72:51:8d:e6:70:61:20:f3:4d:13:c7:15:
38:6b:2b:86:c2:c2:70:8d:36:70:2f:d6:37:b4:38:71:b1:35:
3d:5c:fd:1e:f7:f9:47:e6:06:d5:bf:3e:99:7f:0b:c0:27:3d:
78:b5:21:07:79:25:54:58:8e:45:00:b0:43:af:5e:02:d7:e9:
39:ba:f4:61:2a:d7:f6:81:9b:99:76:8d:40:fa:4e:67:6a:b7:
65:74:ee:09:7f:4a:75:89:f3:d1:53:ed:5e:98:c1:2f:fe:20:
bc:f6:e0:d2:aa:76:a5:e9:5d:6d:6b:71:4d:54:1a:79:d1:ae:
df:a6:6c:46:24:ee:74:d5:bb:5c:01:1a:3b:2f:a2:89:88:7b:
49:49:22:86:a2:f0:35:6d:35:77:05:01:31:1c:b4:a2:17:ab:
a4:5b:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:33 2024 by rpki-client on console-ams.rpki-client.org