Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/qVLF3nLGTfl0S_6rEDxzrC3NH3s.roa
File: qVLF3nLGTfl0S_6rEDxzrC3NH3s.roa (raw, json)
Hash identifier: N7wcHuR7Cu/+9dt8BYRuy9THSvzM5xVHySd0Eo0BaYY=
Subject key identifier: A9:52:C5:DE:72:C6:4D:F9:74:4B:FE:AB:10:3C:73:AC:2D:CD:1F:7B
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 08F394FB
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/qVLF3nLGTfl0S_6rEDxzrC3NH3s.roa
Signing time: Sat 01 Jan 2022 11:59:43 +0000
ROA not before: Sat 01 Jan 2022 11:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209083
IP address blocks: 2a0e:800:ff00::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150181115 (0x8f394fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 1 11:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a952c5de72c64df9744bfeab103c73ac2dcd1f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:86:2d:23:c3:0c:0f:f5:f8:a1:f1:1d:8e:
91:2d:e7:42:2a:76:ca:d6:8c:ad:98:ca:f9:0c:28:
78:d5:e8:46:be:6b:c6:df:76:42:59:e5:24:d3:87:
3c:48:6f:22:8b:c5:4e:83:9e:6a:4a:b7:c5:cf:27:
90:78:c5:2d:57:76:25:66:b5:c6:d0:3f:ae:91:1c:
a1:80:31:dd:7a:d7:71:0e:14:62:36:8c:21:1c:c9:
a9:90:5f:bd:96:01:a9:db:ea:55:31:7a:9d:e4:f8:
bc:70:2d:b9:5f:27:16:47:8e:16:23:67:7f:9d:c1:
c3:82:ed:a4:f1:1c:10:a0:bb:99:d9:7b:21:f5:e5:
2d:b9:28:a6:9d:fe:c0:0d:35:74:b5:d7:c4:8b:f3:
7c:7c:fb:7c:91:02:55:06:5e:9a:d5:9b:da:a3:cd:
76:f3:aa:22:a0:7f:29:a0:d3:87:3d:b4:0c:cc:e7:
df:2a:f7:1e:ee:ba:55:61:c3:01:f3:a5:cd:bc:b5:
4f:1d:9b:83:47:08:07:4e:5e:5b:c3:bf:c9:15:e9:
a8:3b:0e:e3:a8:c0:ae:a7:b0:2b:da:c7:60:e1:47:
ce:37:63:7f:d3:d1:0f:b8:53:4e:5a:5b:f0:fe:76:
13:09:3e:49:29:b2:11:d9:2d:98:e8:6f:b3:a7:04:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:52:C5:DE:72:C6:4D:F9:74:4B:FE:AB:10:3C:73:AC:2D:CD:1F:7B
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/qVLF3nLGTfl0S_6rEDxzrC3NH3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:800:ff00::/44
Signature Algorithm: sha256WithRSAEncryption
9c:a6:46:c8:d4:26:6f:de:3d:90:24:9f:25:ff:f7:35:8b:05:
27:da:97:68:f4:77:b1:37:13:82:b0:d3:4d:7c:7b:79:9a:e1:
f3:bc:9f:df:89:4a:2b:92:ca:59:0e:1b:ea:22:53:22:c7:bc:
3d:fd:69:47:a4:3d:54:46:03:fc:05:48:a6:ea:0c:50:f9:67:
b5:0f:e9:67:85:42:5c:88:b5:3f:bc:5b:c0:a9:1e:1a:c8:58:
b8:d8:3b:e9:bf:f3:0b:97:66:2a:f0:51:df:9c:80:0a:71:bb:
06:37:15:71:e5:d9:3c:88:fe:ef:bd:98:0f:f0:da:aa:8f:1c:
6b:f4:7d:94:c9:fb:24:b2:09:f3:58:17:a1:96:f8:dd:64:3f:
59:f1:5c:60:65:68:37:20:5c:2b:3a:bf:fc:53:e5:ab:05:9b:
aa:ec:02:65:5d:7d:e5:15:bb:cc:e2:c7:15:e0:27:a6:1c:1f:
7b:5a:31:06:7c:9f:78:36:5b:9b:0c:2e:56:a5:38:fd:5f:1d:
2b:b7:7d:05:3a:39:7e:0e:fc:65:c1:ec:31:e9:c6:cf:ce:d7:
21:2a:28:53:2c:60:ef:3f:00:da:57:71:d1:d9:c4:6c:3c:bc:
8e:8d:85:1d:99:bb:fd:18:67:4e:13:0b:5a:c7:c8:de:51:ee:
7d:52:c2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org