Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/vOk6vwZOOZ9S2dGTOXzD869sveU.roa
File: vOk6vwZOOZ9S2dGTOXzD869sveU.roa (raw, json)
Hash identifier: 4zW3Gno5gExY3vJcecxLW1WThkwJG9WVi+Y+MnPP2Nw=
Subject key identifier: BC:E9:3A:BF:06:4E:39:9F:52:D9:D1:93:39:7C:C3:F3:AF:6C:BD:E5
Certificate issuer: /CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Certificate serial: 1364E1
Authority key identifier: 9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/vOk6vwZOOZ9S2dGTOXzD869sveU.roa
Signing time: Tue 19 Apr 2022 03:57:27 +0000
ROA not before: Tue 19 Apr 2022 03:57:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6910
IP address blocks: 217.28.143.0/24 maxlen: 24
2a12:26c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1271009 (0x1364e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Validity
Not Before: Apr 19 03:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bce93abf064e399f52d9d193397cc3f3af6cbde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:22:7d:a2:3d:63:c6:5d:c8:a6:53:26:02:
c0:31:1e:9a:25:9e:ec:b6:18:02:d1:36:c8:24:dd:
07:e8:98:13:cd:dc:67:5e:54:e6:17:e0:c1:12:8d:
a2:df:33:6c:b3:e6:86:81:0f:bb:67:57:01:42:4d:
31:0b:5b:7d:82:0d:d0:bc:4a:aa:6f:2a:77:22:6d:
44:42:1c:20:5f:fb:e3:4c:ac:f0:bb:43:19:92:8c:
44:e5:a7:2a:49:cb:af:61:d8:84:8d:42:eb:5d:ab:
d0:fb:50:e3:3f:af:82:7a:dd:c0:51:c9:08:83:97:
00:ff:ee:59:f6:c6:36:da:09:ff:65:bf:72:0c:cf:
34:8c:62:e7:0a:fa:2e:5e:a9:e5:b3:e1:3d:56:81:
f6:c8:3c:d8:10:76:8e:3c:81:c0:eb:58:28:56:3b:
78:4b:34:57:d1:11:69:23:9e:3b:96:ec:95:ce:2f:
91:8d:cd:c9:db:f3:e5:b2:14:45:c6:b3:75:9e:b0:
97:51:aa:ab:6c:b6:79:b3:3b:c1:fe:cf:ad:4f:97:
5b:72:19:55:55:ad:c7:48:93:06:86:92:79:63:ca:
4d:65:f4:61:55:24:81:ac:85:5f:83:43:7c:b1:49:
97:0a:15:0e:b1:1a:04:96:79:78:ab:65:75:38:59:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E9:3A:BF:06:4E:39:9F:52:D9:D1:93:39:7C:C3:F3:AF:6C:BD:E5
X509v3 Authority Key Identifier:
keyid:9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/vOk6vwZOOZ9S2dGTOXzD869sveU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.143.0/24
IPv6:
2a12:26c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:dd:c2:06:e0:b7:a4:90:9d:e2:66:c1:cc:52:f7:f2:1f:68:
9c:b8:3c:31:7c:e2:a6:5a:f5:ca:ed:27:1c:ff:ec:6b:c5:c2:
5c:9d:3f:b6:f0:43:65:ef:ed:d0:4f:86:13:6e:36:d2:4b:df:
ea:49:26:44:dc:1f:4d:f1:01:f5:6d:55:a4:a7:0d:68:cd:2d:
d4:21:8f:fa:d3:ad:5b:97:48:c2:fa:ff:9d:76:94:7c:c8:8c:
36:86:62:50:e8:b4:3c:0a:8e:b1:2c:8e:2b:a0:8b:d8:2a:e1:
a2:4c:b3:e0:9e:e0:56:20:7e:7f:96:26:76:0f:04:7f:ad:1b:
9a:89:0b:ea:4b:fa:42:93:26:be:bf:00:27:5f:d4:a0:be:65:
f2:5d:c8:cd:fb:98:a7:76:6c:e2:09:f7:99:ab:a0:bb:c1:71:
13:22:3c:f0:15:4c:3d:7c:ab:3d:88:87:64:09:39:18:e3:bb:
94:fb:57:59:25:ec:44:a0:a7:9a:7a:13:f6:f8:a7:8e:32:21:
d7:99:10:3c:f2:ca:8d:11:80:d2:02:df:60:64:d0:32:00:6b:
45:4a:3d:43:00:a8:b5:0e:46:00:61:38:cb:cb:22:75:5f:9c:
36:d2:fd:16:08:95:9b:2e:f6:f7:da:fd:7f:a3:0a:48:c4:d5:
9e:54:41:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:16 2024 by rpki-client on console-fra.rpki-client.org