Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/MRK6qGu3KW_eY6OpDgG1lnOZoBs.roa
File: MRK6qGu3KW_eY6OpDgG1lnOZoBs.roa (raw, json)
Hash identifier: oTUj6R11xm4uaal0Uq+ikf4Dm8JCLRkaOIYvRR747JQ=
Subject key identifier: 31:12:BA:A8:6B:B7:29:6F:DE:63:A3:A9:0E:01:B5:96:73:99:A0:1B
Certificate issuer: /CN=6ccf884cf78ec531986e46ede02fc68861965381
Certificate serial: 064EA25E
Authority key identifier: 6C:CF:88:4C:F7:8E:C5:31:98:6E:46:ED:E0:2F:C6:88:61:96:53:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM-ITPeOxTGYbkbt4C_GiGGWU4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/MRK6qGu3KW_eY6OpDgG1lnOZoBs.roa
Signing time: Sat 01 Jan 2022 04:53:19 +0000
ROA not before: Sat 01 Jan 2022 04:53:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207871
IP address blocks: 2001:678:b7c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105816670 (0x64ea25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf884cf78ec531986e46ede02fc68861965381
Validity
Not Before: Jan 1 04:53:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3112baa86bb7296fde63a3a90e01b5967399a01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:ce:e5:46:f9:1e:bb:e7:68:b6:77:8f:02:
43:74:6e:84:1d:8e:98:4b:ae:ee:42:81:ff:f3:f3:
58:7a:bd:92:cf:81:34:8f:a8:8f:6d:9f:53:a9:f0:
d3:d9:e2:07:d3:36:43:91:72:31:6b:a3:f4:ad:a4:
73:27:ad:40:30:44:bb:38:d2:72:ee:f8:ba:67:35:
69:47:69:c2:c8:ad:1a:61:04:d8:58:e9:94:9f:33:
25:4a:92:c8:11:e2:66:ca:ec:f1:ab:93:52:1e:c1:
49:f7:d4:ea:05:ec:07:12:2c:e2:86:7a:90:a5:e6:
ee:e2:c0:6a:28:b3:cb:04:35:df:33:cb:f5:54:a7:
43:27:1e:60:f6:4c:43:c9:5a:76:05:da:02:a4:37:
3e:ad:da:f6:c3:7f:6e:c0:05:75:e4:43:64:b0:d3:
66:d1:56:84:df:b6:17:b1:d5:b4:e7:db:bb:99:ec:
f1:19:f3:c5:ab:2e:93:1b:86:f2:21:b8:b6:cc:50:
2d:d3:f5:a5:ac:b5:01:a9:da:8e:a9:0b:c8:c9:82:
8e:7e:a8:98:fb:62:d5:2c:0a:85:d8:e3:46:6d:d5:
7c:a2:9d:5d:7b:d8:c9:d9:0f:fe:4e:4a:5c:5a:16:
a0:53:ef:33:14:c2:ca:ef:ca:44:5e:7a:b3:c0:14:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:12:BA:A8:6B:B7:29:6F:DE:63:A3:A9:0E:01:B5:96:73:99:A0:1B
X509v3 Authority Key Identifier:
keyid:6C:CF:88:4C:F7:8E:C5:31:98:6E:46:ED:E0:2F:C6:88:61:96:53:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM-ITPeOxTGYbkbt4C_GiGGWU4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/MRK6qGu3KW_eY6OpDgG1lnOZoBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b7c::/48
Signature Algorithm: sha256WithRSAEncryption
0f:f5:e3:f5:19:37:de:bd:9d:81:00:cc:e1:4d:ed:02:15:92:
16:d4:99:24:21:0a:39:e8:85:e8:27:bb:21:d0:b9:01:87:29:
a8:32:fe:6a:95:77:87:45:c6:fc:fe:53:50:05:54:ee:a4:63:
82:f0:96:46:bb:84:d1:6a:8a:0e:71:83:f8:3f:5f:03:59:8e:
ac:e1:e3:70:01:c7:3e:f8:01:ca:a8:82:17:60:09:35:87:07:
12:39:5c:47:7e:d3:d0:fd:4d:cb:fb:93:b9:c9:18:cb:38:c0:
a3:b6:8f:fd:c0:00:e4:37:59:38:57:12:ef:7b:ee:25:d3:39:
b4:b4:3c:81:bc:90:52:d0:9d:de:af:fb:bd:82:64:64:d6:68:
29:df:36:eb:e5:c6:26:59:a7:59:03:f4:94:66:13:ab:be:0d:
a4:6b:d6:dc:a6:9a:c4:2b:5b:d9:2c:29:1f:1e:1d:c1:65:66:
1f:e2:33:78:91:fb:1f:cc:97:00:21:6f:7f:98:b2:44:c6:ef:
7a:d3:84:10:71:94:28:17:aa:33:72:16:6c:d6:88:fa:6e:77:
5a:d9:f0:a1:12:a3:3a:19:29:24:46:8e:8d:df:e4:4c:fd:4b:
a3:35:94:21:03:54:c7:3b:d9:d9:f6:b2:85:cf:a2:a2:e8:b0:
ef:62:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:18 2024 by rpki-client on console-fra.rpki-client.org