Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/BGu0eoXXn_G-5OhkDkOeg3-GDvQ.roa
File: BGu0eoXXn_G-5OhkDkOeg3-GDvQ.roa (raw, json)
Hash identifier: JUgzNN1cUwXyIR3OoMvlXpaJhmyzBGb3ynMyyfpTUq4=
Subject key identifier: 04:6B:B4:7A:85:D7:9F:F1:BE:E4:E8:64:0E:43:9E:83:7F:86:0E:F4
Certificate issuer: /CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Certificate serial: 8F7BF2
Authority key identifier: 2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/BGu0eoXXn_G-5OhkDkOeg3-GDvQ.roa
Signing time: Sat 26 Mar 2022 01:19:11 +0000
ROA not before: Sat 26 Mar 2022 01:19:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 2a12:b180::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9403378 (0x8f7bf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Validity
Not Before: Mar 26 01:19:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=046bb47a85d79ff1bee4e8640e439e837f860ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:30:7c:85:d8:c7:7f:5d:74:15:85:bb:87:
60:56:ae:92:17:38:82:c0:fd:64:57:a0:c9:fd:8f:
5e:5b:cc:34:90:02:cb:cf:b7:e0:1d:67:dd:31:e8:
a7:ea:7e:5b:06:a3:a0:39:5c:87:4b:c4:b9:00:8e:
40:e4:94:49:63:ea:91:91:91:91:29:8c:33:35:9d:
1c:37:87:e4:34:44:2e:f8:1e:f7:b3:b9:23:90:37:
aa:22:b5:fc:ec:e1:f1:03:e5:09:ba:48:e2:26:50:
0c:5e:0b:39:26:5b:65:a2:31:fd:1c:35:86:12:7d:
d2:24:7e:e1:8d:82:8a:e6:5c:9b:ef:38:25:7c:89:
fa:7d:ed:62:53:74:35:54:12:c9:86:48:2e:87:2b:
f5:35:cd:c3:84:70:01:12:92:71:71:b6:56:4a:7f:
6b:cf:c8:16:ce:e1:89:56:ca:fa:c0:61:5e:f6:ad:
4d:13:1c:cc:92:22:b1:95:80:e0:bf:51:02:58:8d:
fa:b4:0e:74:ad:12:43:d3:c0:bc:e8:79:d6:a5:98:
83:da:59:4c:68:ce:66:63:00:7d:5f:91:fc:60:0d:
7e:c5:e6:5b:1c:da:02:82:38:5a:db:ff:1a:b0:1d:
8d:20:bd:94:ab:c2:49:40:28:0e:dd:19:5f:be:e9:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6B:B4:7A:85:D7:9F:F1:BE:E4:E8:64:0E:43:9E:83:7F:86:0E:F4
X509v3 Authority Key Identifier:
keyid:2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/BGu0eoXXn_G-5OhkDkOeg3-GDvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:b180::/29
Signature Algorithm: sha256WithRSAEncryption
9f:2e:7c:57:5e:4f:f9:1b:29:79:b4:a4:89:a8:84:fd:c5:ae:
88:1f:1f:c0:8a:94:21:0b:5d:b4:8d:9e:1a:77:11:bf:4c:1f:
af:77:3e:96:bc:6d:92:39:bd:06:ae:d3:31:5d:14:62:88:cb:
09:f1:36:a3:d9:dc:12:4e:b7:c5:99:fd:73:45:48:2d:9b:39:
43:1d:70:3f:fa:03:9c:0b:d1:60:60:c7:94:1b:02:37:05:b4:
47:62:7b:ee:37:89:bb:a0:5e:5b:0f:f9:97:45:a1:c4:9c:43:
0e:18:a7:52:b0:bf:e6:39:32:44:4b:5c:8d:85:ba:0f:16:51:
a7:0a:da:f6:06:36:ae:2e:dd:a4:fe:b2:80:fd:c9:22:6a:1f:
1a:f9:a7:1e:4e:5c:a4:5a:e9:ba:76:ae:cb:fc:c0:38:82:71:
5e:b1:2d:89:f9:0a:a4:ae:e8:96:ea:83:f3:65:d0:db:ba:be:
10:e0:5a:60:40:75:7b:38:8b:b6:72:15:b5:c5:ba:f0:9d:ae:
b1:65:57:cc:6c:52:25:84:61:8b:5e:ec:1e:62:04:4d:2e:83:
b9:d3:69:4e:54:95:4b:0f:8d:ae:af:39:1a:74:44:0b:c6:f0:
5d:12:93:5b:a2:d2:3a:fe:0e:dc:fc:95:24:4c:0b:36:91:a3:
98:34:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net