Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/fkoqPoUjyQHRMKyCbfWpw49uvY8.roa
File: fkoqPoUjyQHRMKyCbfWpw49uvY8.roa (raw, json)
Hash identifier: xQFe1AM4QsHygEDMtokzucj77fIdbtoiPpFvyi8+4/g=
Subject key identifier: 7E:4A:2A:3E:85:23:C9:01:D1:30:AC:82:6D:F5:A9:C3:8F:6E:BD:8F
Certificate issuer: /CN=59bff5f16ecb268b1597da1b3ad30af40fce7717
Certificate serial: 082A911C
Authority key identifier: 59:BF:F5:F1:6E:CB:26:8B:15:97:DA:1B:3A:D3:0A:F4:0F:CE:77:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/fkoqPoUjyQHRMKyCbfWpw49uvY8.roa
Signing time: Sat 01 Jan 2022 11:02:13 +0000
ROA not before: Sat 01 Jan 2022 11:02:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36459
IP address blocks: 2a0a:a440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137007388 (0x82a911c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59bff5f16ecb268b1597da1b3ad30af40fce7717
Validity
Not Before: Jan 1 11:02:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e4a2a3e8523c901d130ac826df5a9c38f6ebd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:84:5f:23:2b:45:64:16:a7:26:84:47:37:
50:04:42:38:69:76:30:ae:d9:20:4d:88:ad:af:47:
bb:d0:2f:8d:6a:b9:c6:9b:0c:dc:c9:4a:42:f8:95:
b0:90:54:15:cf:f0:b5:dc:28:66:70:18:ca:6b:82:
d7:34:7b:87:ee:09:2c:ba:de:53:a0:3b:ae:07:12:
c5:94:3c:7a:0a:96:ad:f1:fc:d6:e2:17:8a:b7:ab:
60:f7:2c:a0:ea:16:40:e6:d3:db:66:fb:d0:d0:65:
b5:e9:08:d0:c9:02:e4:9f:0e:92:ba:e9:2f:de:d4:
6c:54:d4:2f:d5:da:b3:00:8f:23:af:3e:11:38:f4:
dd:f7:a9:ed:ca:32:ba:0e:2b:10:74:a3:60:92:d9:
15:35:a8:fb:19:f2:b6:f1:3a:b8:70:3c:86:f8:ff:
31:83:2a:7c:6d:5e:bd:f3:79:c0:91:32:4b:01:ec:
20:f9:4e:a6:84:4d:12:b2:00:77:78:9c:c4:cd:09:
e0:20:30:31:fb:f2:50:86:08:31:16:10:8f:d2:9e:
cc:06:71:e0:1b:d5:26:30:44:92:aa:4c:e4:a0:c0:
d3:f7:8d:36:07:82:36:a6:ff:03:64:9f:d1:42:aa:
48:03:4c:3b:7c:41:8a:66:84:f8:55:a9:1d:e0:83:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4A:2A:3E:85:23:C9:01:D1:30:AC:82:6D:F5:A9:C3:8F:6E:BD:8F
X509v3 Authority Key Identifier:
keyid:59:BF:F5:F1:6E:CB:26:8B:15:97:DA:1B:3A:D3:0A:F4:0F:CE:77:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/fkoqPoUjyQHRMKyCbfWpw49uvY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/Wb_18W7LJosVl9obOtMK9A_Odxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:a440::/29
Signature Algorithm: sha256WithRSAEncryption
0b:cf:cb:55:ba:7c:40:58:9b:24:ec:f9:44:d0:df:64:4a:14:
64:8e:3c:09:c3:9d:a0:e1:f5:fc:dc:fb:c1:90:77:af:49:99:
c8:80:bf:cf:75:9e:28:7a:e8:54:03:4c:12:ca:6b:79:3a:88:
06:82:fb:22:5a:38:67:b3:dc:c4:10:84:92:5f:38:6a:8a:5b:
80:fb:f0:4b:e0:1b:89:63:4d:85:93:6d:be:a0:05:9a:1c:9e:
69:d9:86:ca:64:34:3a:01:f4:e8:5a:15:8b:c4:3f:53:de:10:
8d:cf:bc:90:de:48:b9:4b:11:d6:7d:4f:54:c3:46:4b:91:4a:
6e:eb:bd:41:04:8c:55:f8:53:e2:db:04:8f:6f:25:f9:7a:15:
61:38:86:24:b3:ef:d7:68:6f:a3:3a:0f:c5:d0:0b:a3:aa:33:
21:8b:e4:9b:b9:ee:57:2e:79:06:45:10:13:61:04:fd:17:ba:
e8:db:37:4b:95:c7:eb:2c:3f:96:bf:92:a6:c0:d8:b2:f9:64:
e0:73:c7:dc:26:ce:d7:27:9d:ef:10:47:05:b4:0a:26:21:78:
02:37:f1:42:7a:b1:c8:7a:98:97:21:9b:10:30:84:ce:e2:f8:
a9:6a:18:e5:08:06:46:e8:8d:95:d5:40:56:c9:50:50:0e:b6:
67:68:78:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:30 2024 by rpki-client on console-fra.rpki-client.org