Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/YpjnSbswkW4IPG5XOgf5bpCbsrY.roa
File: YpjnSbswkW4IPG5XOgf5bpCbsrY.roa (raw, json)
Hash identifier: PR4OyNYztBfrpfdKBHdqgcxI0kN46QQdN2lxHVkBc/o=
Subject key identifier: 62:98:E7:49:BB:30:91:6E:08:3C:6E:57:3A:07:F9:6E:90:9B:B2:B6
Certificate issuer: /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial: 0183F840FDE8451E1655B4827A9AB52A4B86
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/YpjnSbswkW4IPG5XOgf5bpCbsrY.roa
Signing time: Fri 21 Oct 2022 01:55:52 +0000
ROA not before: Fri 21 Oct 2022 01:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 394144
IP address blocks: 2a0e:7580::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f8:40:fd:e8:45:1e:16:55:b4:82:7a:9a:b5:2a:4b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Validity
Not Before: Oct 21 01:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6298e749bb30916e083c6e573a07f96e909bb2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:b9:f0:f9:4a:94:c2:85:56:a9:5d:dc:32:
a6:7c:6b:a6:e7:25:15:65:65:77:98:f2:d3:83:1d:
58:16:35:6d:d1:11:2b:13:b2:4a:72:17:44:1c:b5:
96:0a:24:2a:b9:07:0f:bb:1c:f8:de:fc:19:f9:14:
3c:b1:9d:b1:ad:e9:c5:69:22:0e:f2:06:92:be:6b:
95:0a:44:8a:4b:20:45:a2:b7:f3:91:f8:03:30:5e:
29:3a:fd:f9:2e:41:d0:3c:f4:6a:9d:04:07:bc:b6:
55:3f:ab:a5:6c:9f:58:3e:02:eb:fc:dd:e6:9b:52:
d2:a1:1b:3b:22:c7:3d:56:ca:2a:22:7d:c5:e1:33:
76:b7:df:ce:93:80:d4:03:42:70:17:2d:9c:0f:e5:
83:8b:3b:9a:93:5d:03:9b:8b:de:dd:a8:b0:51:08:
9c:b2:f7:0b:e8:22:dd:c4:97:b7:8a:f5:f3:33:af:
05:9c:ac:b8:24:67:e4:a4:ed:39:09:f0:61:26:c6:
07:9c:48:92:a2:e7:ca:23:b0:2d:05:78:3b:02:7b:
7d:76:3f:90:a7:bd:ea:93:0c:36:b6:5d:e0:56:5f:
0b:93:18:0a:d4:13:da:fe:ad:14:d2:da:ad:62:83:
66:2d:f0:b8:b8:db:34:6d:c1:d1:ec:42:77:d8:e7:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:E7:49:BB:30:91:6E:08:3C:6E:57:3A:07:F9:6E:90:9B:B2:B6
X509v3 Authority Key Identifier:
keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/YpjnSbswkW4IPG5XOgf5bpCbsrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7580::/29
Signature Algorithm: sha256WithRSAEncryption
57:68:64:86:87:d6:d2:c9:0f:09:4b:e6:c2:f4:04:57:58:a7:
d9:01:a8:93:d2:00:a4:5a:37:ab:29:11:49:9e:a1:39:11:60:
fc:e3:e2:51:cf:c6:38:6e:45:2f:a4:00:1d:59:ca:15:c3:7b:
56:8b:a2:aa:bd:32:52:2e:0f:0e:a3:89:bf:56:97:85:b1:43:
4f:f2:d5:b2:38:59:99:d0:5c:dc:68:66:44:9c:76:e6:bf:53:
7b:bb:4a:e0:3c:24:44:14:38:ed:64:70:d8:8e:f7:cc:4a:fc:
e0:40:2a:b7:f6:49:dd:45:8c:f8:28:46:5d:a1:2b:3e:62:e9:
a1:30:2d:c2:15:39:f1:6b:22:18:fb:7c:81:0e:f4:c8:97:b9:
af:be:e7:41:25:da:67:74:eb:af:f8:83:c5:7f:fa:a1:dc:ce:
b9:57:a8:bf:20:31:4e:60:0f:b5:97:16:2c:99:49:d1:57:24:
e2:a6:6d:58:94:39:d9:42:34:c3:fa:9f:88:57:6e:65:4a:7d:
8e:9d:71:ea:2b:33:b2:90:e3:96:14:50:7e:bc:04:bd:0b:00:
c3:d4:81:9d:60:46:36:f3:96:69:ae:01:88:e3:df:f3:db:39:
dd:39:48:f8:62:e0:26:23:33:3e:76:ae:f2:fe:ec:88:7e:52:
67:6f:68:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:28 2024 by rpki-client on console-ams.rpki-client.org