Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/o6HDnRj_Qn2H69RFlx1wru7qm3A.roa
File: o6HDnRj_Qn2H69RFlx1wru7qm3A.roa (raw, json)
Hash identifier: uxVBkcLzchNRf0PcjQ0+XHsyTEiPWhH5SubpbR0z77U=
Subject key identifier: A3:A1:C3:9D:18:FF:42:7D:87:EB:D4:45:97:1D:70:AE:EE:EA:9B:70
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 0184AA3C53EE58F323EFA04BDF44E3FB12B5
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/o6HDnRj_Qn2H69RFlx1wru7qm3A.roa
Signing time: Thu 24 Nov 2022 15:23:11 +0000
ROA not before: Thu 24 Nov 2022 15:23:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 2001:7f8:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:3c:53:ee:58:f3:23:ef:a0:4b:df:44:e3:fb:12:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Nov 24 15:23:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3a1c39d18ff427d87ebd445971d70aeeeea9b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:96:a9:07:d0:1a:10:33:7a:4b:04:62:77:
6e:a6:de:e7:41:f7:38:d1:cc:18:71:24:c1:06:81:
0e:b3:6c:62:f7:b6:75:27:28:14:23:c9:cd:ad:a7:
66:05:85:5b:9a:82:5d:ae:4c:84:1d:5b:a6:f2:ff:
7f:89:cd:3c:ce:b6:2a:26:ac:8b:c5:f2:6d:e8:d3:
fa:73:8c:63:fe:6f:46:5e:35:bb:ad:70:00:68:f8:
f5:1b:fc:e0:3e:8b:8e:87:1f:a2:df:19:5f:95:a9:
60:eb:28:95:95:1d:41:90:ab:a8:5c:0a:24:23:ff:
69:08:7c:81:60:7a:59:3e:03:7b:39:5d:86:63:d7:
f8:17:12:72:98:2c:98:de:e9:be:0a:04:b7:39:cf:
90:44:4c:c6:19:9e:81:a8:df:80:29:37:45:30:d4:
e8:a1:1c:78:2e:5b:d5:a4:13:2e:99:2f:5c:69:63:
5f:3e:30:88:fa:a9:16:34:7b:8a:e1:85:72:6b:af:
78:84:d2:7f:bd:55:20:17:dc:1c:55:ac:25:cc:6c:
78:a5:50:0a:b6:fa:25:f8:b0:49:b9:07:41:d4:4e:
82:ec:7a:14:c5:fe:a2:dc:3a:65:4c:4c:00:24:d1:
11:08:da:ee:82:17:5c:0d:82:37:64:df:88:a8:89:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A1:C3:9D:18:FF:42:7D:87:EB:D4:45:97:1D:70:AE:EE:EA:9B:70
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/o6HDnRj_Qn2H69RFlx1wru7qm3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:7f8:4::/48
Signature Algorithm: sha256WithRSAEncryption
8b:62:b3:1c:a8:73:09:73:9e:59:60:0d:36:89:1b:f5:c4:57:
fa:8c:27:01:99:c2:19:be:ac:d5:bd:63:9f:2f:a3:64:d3:26:
d8:32:19:57:59:0f:49:4b:6b:50:a0:06:d6:06:7c:45:45:82:
c0:3d:a3:5e:52:46:49:42:41:92:89:6a:73:4a:65:c6:0d:b7:
19:ab:5c:5f:56:0b:39:fa:27:a5:5c:d2:66:59:d1:e9:2c:73:
70:2a:7a:a7:b6:9e:09:54:0d:87:89:ef:b2:05:b0:41:2b:7f:
e2:77:b0:0e:d7:d4:49:36:77:d4:93:13:a5:1c:a1:91:12:55:
90:22:f1:8e:87:40:90:88:93:b4:19:c0:13:58:22:78:63:f2:
55:34:d4:26:75:61:90:02:3b:53:5b:87:a4:c8:dd:8d:41:66:
9a:4f:24:16:ea:2b:08:fd:b4:0b:ca:fa:b9:17:b0:19:03:80:
8c:14:8a:ec:f3:24:ad:46:d1:3d:e1:5a:45:2f:2b:82:03:81:
d1:11:d3:e9:46:50:e3:8b:fd:ec:14:c5:3f:67:d5:b9:b8:24:
4a:12:4f:87:36:44:fc:07:e8:bc:4f:62:11:ad:d2:5a:62:ee:
46:9b:8a:3e:00:78:de:3f:f5:b1:e5:cd:37:ed:6d:1b:da:2e:
75:6a:e4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:57 2024 by rpki-client on console-fra.rpki-client.org