Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/TpVe0jCs0GtN7eHmdeM41jxyG5U.roa
File: TpVe0jCs0GtN7eHmdeM41jxyG5U.roa (raw, json)
Hash identifier: I+JzgYC3pbIaBC6Bz+dE51ckrmi1Y4lI7QPwe+ar0cw=
Subject key identifier: 4E:95:5E:D2:30:AC:D0:6B:4D:ED:E1:E6:75:E3:38:D6:3C:72:1B:95
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 1250AC7A
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/TpVe0jCs0GtN7eHmdeM41jxyG5U.roa
Signing time: Sat 01 Jan 2022 04:01:22 +0000
ROA not before: Sat 01 Jan 2022 04:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202928
IP address blocks: 2001:678:18c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307276922 (0x1250ac7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Jan 1 04:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e955ed230acd06b4dede1e675e338d63c721b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:50:04:ce:fd:8e:5d:9e:48:51:03:29:b0:
84:be:9d:a1:14:e7:a8:19:51:39:c3:af:72:e0:5f:
12:09:b4:50:ef:c4:9f:a9:9f:dd:3c:c8:dd:5c:ee:
5b:c9:cc:3a:e1:63:f2:1c:94:1b:e4:9b:f2:56:d7:
80:d8:53:03:77:7b:29:ae:ff:ba:55:77:eb:93:e7:
91:92:87:a0:65:46:8b:d2:ce:65:ef:87:5e:2f:28:
5d:a3:ea:e3:73:b1:a4:a6:cb:f5:45:d2:8c:b7:18:
60:50:bf:61:8e:39:2f:97:c2:72:26:ac:53:27:16:
ff:ce:0c:ec:cc:1a:a5:01:08:b3:25:8a:a9:92:2b:
b8:2f:4a:e1:83:ba:09:cb:88:c1:99:17:79:0b:05:
d6:2f:07:4d:2c:d4:c1:46:71:9b:7a:61:58:02:c6:
ad:bf:c7:0f:70:07:2d:d3:44:3a:13:78:f9:cb:61:
fc:aa:0d:a9:12:02:1e:1c:12:0f:99:96:82:ec:8e:
45:97:27:8e:5f:c1:86:16:1f:3a:ea:b0:97:16:96:
ab:d0:8a:b9:d2:57:70:2b:40:5d:49:3a:5c:37:f0:
c4:bc:aa:2a:89:62:d3:c4:a5:a1:bc:e9:68:82:5b:
a8:d0:60:17:ad:06:c9:27:09:b0:3e:e7:25:a5:01:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:95:5E:D2:30:AC:D0:6B:4D:ED:E1:E6:75:E3:38:D6:3C:72:1B:95
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/TpVe0jCs0GtN7eHmdeM41jxyG5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:18c::/48
Signature Algorithm: sha256WithRSAEncryption
c8:d7:f4:e8:90:88:2f:38:e4:02:67:4a:30:5c:15:9b:72:ab:
4f:f5:51:1c:6f:e0:f5:1b:72:07:b0:13:22:f9:7c:cf:17:2f:
f8:8c:83:b8:71:43:e7:42:8a:85:62:8d:5e:7c:a4:4d:56:4b:
bf:0d:82:9d:73:62:61:59:4f:e2:22:a0:13:f1:98:af:d4:81:
0c:f5:d1:88:49:50:74:98:e3:53:a3:c8:32:79:a4:e0:fe:c6:
8f:32:c1:81:7f:98:3e:60:ef:39:6a:9e:02:f7:c7:cc:6b:8f:
5e:b3:08:95:8c:30:a7:c9:89:6c:c5:1f:68:79:f6:2c:15:24:
d2:b5:84:9d:68:da:7d:e7:cd:27:a5:2e:bf:82:59:51:55:10:
2f:56:a4:92:fa:6b:64:f0:f9:c3:52:b3:a9:f3:8f:8d:92:cc:
74:ff:f1:77:e7:d6:b2:8e:c9:c8:0d:30:88:68:ca:04:26:83:
e8:13:7a:6d:28:84:24:c0:13:18:cf:25:e3:80:95:72:e5:e8:
c0:23:35:51:b0:7b:5a:51:62:cf:f3:fd:34:75:3c:6c:eb:58:
dd:d0:25:1f:45:30:a7:1c:5f:09:be:2a:5a:80:5f:5f:52:ff:
97:05:70:82:20:5b:e3:f2:39:68:9b:be:eb:ab:08:d8:72:b8:
59:59:d7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:07 2024 by rpki-client on console-fra.rpki-client.org