Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/CdVB_GBljcyXrqie5AAV4NxhBwk.roa
File: CdVB_GBljcyXrqie5AAV4NxhBwk.roa (raw, json)
Hash identifier: ZaLCIBSjcIgXcTY9Ez2C5B65nFbGDV9TIjX0N7jenUU=
Subject key identifier: 09:D5:41:FC:60:65:8D:CC:97:AE:A8:9E:E4:00:15:E0:DC:61:07:09
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018415F93CD5DC3CDF0BD93AC178901FEB32
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/CdVB_GBljcyXrqie5AAV4NxhBwk.roa
Signing time: Wed 26 Oct 2022 20:26:06 +0000
ROA not before: Wed 26 Oct 2022 20:26:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212914
IP address blocks: 2a01:4020:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:15:f9:3c:d5:dc:3c:df:0b:d9:3a:c1:78:90:1f:eb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Oct 26 20:26:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09d541fc60658dcc97aea89ee40015e0dc610709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:85:01:50:41:0f:b0:d9:46:a4:08:59:79:
ea:71:fd:82:52:7a:02:bd:e1:83:0e:b5:1e:c7:df:
57:91:78:01:cc:87:9a:45:db:96:69:75:c2:61:6f:
d6:1b:aa:cc:22:e7:1d:1a:48:3e:10:ce:7c:5d:49:
0f:90:5e:c6:2f:c2:c4:63:5b:43:f7:f0:9f:ba:3e:
63:a8:ef:3e:c7:0d:18:24:56:f9:ba:75:30:ba:18:
c2:77:83:9c:e2:31:bd:bc:bb:61:0c:08:52:6f:af:
92:ad:2b:62:ef:e0:c6:7c:a8:b9:41:12:03:2c:34:
0b:2c:57:1a:98:a4:a8:95:ae:15:7a:e1:c9:d2:a8:
b2:19:ba:fb:28:d1:c2:b8:ff:a0:3b:6f:90:f9:a9:
9f:0e:1c:ad:88:2f:b0:92:26:4d:b1:36:ee:e9:70:
81:e0:8d:1a:29:dc:43:75:88:a2:3b:90:7d:3b:f9:
21:32:8b:4e:62:c7:2d:60:9b:b2:7c:9c:7b:12:3f:
f0:c2:20:66:d5:f5:af:a3:81:d1:5c:8a:ab:12:fb:
47:67:ed:61:67:d4:e5:e9:06:6b:70:c9:a1:62:69:
4c:de:3f:31:40:8f:17:62:22:86:d8:fb:d3:84:78:
31:ca:ed:6c:74:04:d5:1d:36:d6:7a:7c:be:49:28:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D5:41:FC:60:65:8D:CC:97:AE:A8:9E:E4:00:15:E0:DC:61:07:09
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/CdVB_GBljcyXrqie5AAV4NxhBwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:4020:6::/48
Signature Algorithm: sha256WithRSAEncryption
09:d0:75:1f:f8:8a:14:d8:08:44:b9:d8:1b:a6:eb:83:60:29:
42:dd:39:68:2c:06:bb:e0:38:8a:0d:c5:ed:f9:5c:03:21:95:
16:00:32:7d:ed:c2:d8:1f:41:cd:83:de:58:1c:8c:df:88:b3:
4d:77:da:ee:04:a1:ec:d1:bb:d1:09:b1:a7:8f:87:0b:d4:f1:
c1:7c:fc:73:8e:ff:61:73:14:52:99:65:18:8e:07:b4:38:45:
61:83:ed:75:26:a1:3d:4a:6e:7b:65:5b:00:62:77:38:fe:38:
27:22:32:7c:fe:0b:b0:8a:88:c1:e5:1d:55:6e:ef:10:f0:ce:
29:56:82:30:aa:e9:41:fd:25:3b:1b:13:39:1a:c0:c4:3f:4d:
88:bc:14:f5:15:87:08:f5:8a:fb:da:62:8b:fb:d4:20:74:ff:
f8:f7:e2:82:2b:b9:d5:3a:96:2d:47:06:40:15:56:4b:8e:23:
f8:4b:5b:c3:c7:5d:55:2e:38:1b:33:cf:cd:b0:5a:82:6f:14:
ae:3e:47:79:07:14:3c:88:be:2d:53:77:77:f8:01:2b:30:3b:
7c:21:83:eb:51:68:7d:e5:a5:7b:e3:72:40:df:c7:b9:36:96:
d2:c4:0b:35:f1:85:cb:5d:ac:89:09:ab:1b:31:5d:68:78:8a:
98:7d:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org