Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/_kDRt2Wxnv8sgNUFnQkPL4aFRTY.roa
File: _kDRt2Wxnv8sgNUFnQkPL4aFRTY.roa (raw, json)
Hash identifier: /x5s7VM/uc3NpQm2kOEnNy8G4VRfBDfkaUzDkyBkJWg=
Subject key identifier: FE:40:D1:B7:65:B1:9E:FF:2C:80:D5:05:9D:09:0F:2F:86:85:45:36
Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial: 074DCF2D
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/_kDRt2Wxnv8sgNUFnQkPL4aFRTY.roa
Signing time: Sat 01 Jan 2022 04:53:34 +0000
ROA not before: Sat 01 Jan 2022 04:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12637
IP address blocks: 2a0b:ee40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122539821 (0x74dcf2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
Validity
Not Before: Jan 1 04:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe40d1b765b19eff2c80d5059d090f2f86854536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:33:bc:0e:12:d0:74:d2:be:2e:d1:b5:0c:
bb:85:4a:ba:cd:d4:18:71:48:96:49:f1:2e:57:9f:
e0:5b:64:aa:2c:f4:0c:46:9d:20:7a:b1:b6:23:5b:
77:bf:2c:05:9a:a8:99:ef:99:f3:47:ec:f7:02:a7:
28:e6:fd:fb:d7:42:cb:8b:1f:a2:c6:a6:c7:02:6f:
19:02:39:8d:80:d6:80:7f:2a:36:7c:e6:46:05:95:
30:9e:a8:2f:12:0b:46:5d:54:77:4c:a7:70:ca:cc:
0b:ef:9a:7c:19:d4:7b:99:0e:4f:bc:4b:dd:d9:ec:
2e:d6:10:43:bc:29:79:2c:5f:80:dc:0b:a2:5d:25:
4e:20:ce:a0:23:a4:e8:b2:99:26:d2:93:0b:92:b3:
21:c4:4e:86:ce:b1:1c:90:19:93:3d:f2:41:e6:e7:
91:51:e6:8b:08:4d:59:3d:d4:2f:db:86:ca:08:d1:
5b:ac:26:03:d1:4a:c2:bc:c8:78:59:01:fe:fd:26:
8e:28:ca:21:f7:dc:00:52:57:0d:f4:60:4b:eb:25:
3c:2c:68:2a:55:2c:fc:c9:1a:8c:82:41:70:9c:9d:
8c:74:26:9d:6b:4e:86:e4:02:ec:ee:08:9c:e3:d8:
55:08:49:37:16:dd:36:d1:3b:e0:50:c4:02:dc:6f:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:40:D1:B7:65:B1:9E:FF:2C:80:D5:05:9D:09:0F:2F:86:85:45:36
X509v3 Authority Key Identifier:
keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/_kDRt2Wxnv8sgNUFnQkPL4aFRTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ee40::/29
Signature Algorithm: sha256WithRSAEncryption
40:b0:07:f8:d6:6d:9b:aa:1e:df:8a:5d:44:98:cb:7c:3d:91:
64:2d:9f:ab:1b:79:d1:dc:5d:96:ec:11:e0:7f:f4:3b:da:33:
6c:7f:75:35:86:08:43:49:44:24:66:63:52:f7:5d:17:54:83:
c8:81:f2:fa:cd:30:5f:d7:c6:1a:f0:1e:5d:02:60:55:dc:60:
6f:2e:d3:f3:86:c2:bd:4c:00:1f:37:1b:0e:9e:1a:78:2f:7a:
4b:81:e3:65:33:94:3a:1c:74:8e:8e:68:39:73:ae:6c:a4:ab:
46:9b:a5:8f:b0:6b:69:b4:cb:93:ab:80:e5:4e:b4:44:1a:e9:
80:2a:da:1b:84:fb:53:61:7f:b6:c7:22:9d:1b:f0:56:24:22:
5e:76:14:e9:4c:1a:af:1a:3a:a1:88:00:1e:d5:d0:af:49:61:
42:45:37:53:f2:f3:b6:f8:a7:81:c2:4c:69:3a:d4:7f:d8:af:
0d:e8:9a:2b:95:a7:70:f1:cb:a3:cc:a6:3a:7e:df:73:c8:00:
02:8d:fa:53:9b:57:83:6e:78:53:8d:27:28:8c:62:23:a6:8a:
ec:13:a8:4d:8b:48:26:50:66:c0:8f:f8:0e:42:86:d9:5d:80:
96:46:33:c6:88:81:a2:8c:75:26:74:0c:9a:90:ac:f0:bd:da:
97:bd:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:12 2024 by rpki-client on console-fra.rpki-client.org