Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/zAhjao45pls1xl7Uk2wWHU4WuVs.roa
File: zAhjao45pls1xl7Uk2wWHU4WuVs.roa (raw, json)
Hash identifier: /A3AZfwJZYtqhl2Cguqtgsv8hCYGMk4Z8wWK3Go5Xig=
Subject key identifier: CC:08:63:6A:8E:39:A6:5B:35:C6:5E:D4:93:6C:16:1D:4E:16:B9:5B
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 03E062CF
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/zAhjao45pls1xl7Uk2wWHU4WuVs.roa
Signing time: Sat 01 Jan 2022 09:58:34 +0000
ROA not before: Sat 01 Jan 2022 09:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61028
IP address blocks: 2a0d:c80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65037007 (0x3e062cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Jan 1 09:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc08636a8e39a65b35c65ed4936c161d4e16b95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e0:cc:50:46:66:68:45:ae:2a:5c:d8:7f:34:
20:ad:97:7a:47:77:7c:1d:c6:53:a1:f9:5f:5a:ac:
d2:95:6e:bc:e1:0a:50:c6:bb:c5:c5:ec:88:59:69:
66:2a:86:17:f9:10:7f:1b:bf:37:e6:83:70:a9:27:
2a:4b:18:f2:eb:ef:7a:3d:e9:3a:7a:0f:23:33:a2:
a8:97:d0:8a:22:77:90:ab:6f:95:19:e3:43:8a:4c:
c9:75:c7:d9:41:bb:7d:50:f8:95:c4:66:e6:da:b7:
36:7b:be:47:33:67:8f:71:0d:fe:5f:39:1f:62:06:
0c:3c:2e:5a:5a:74:14:54:93:20:38:d3:83:44:87:
b2:84:33:c4:71:cd:67:bf:cb:d6:78:35:2e:a9:49:
86:23:ba:6b:2a:c0:b4:05:b9:20:dd:0e:ea:f1:51:
1c:19:31:5f:42:07:d4:7b:27:39:43:54:4e:f3:59:
a5:89:11:6b:27:fb:1a:05:97:da:24:fe:f8:73:d7:
50:9b:c9:66:07:a5:89:9d:b0:24:ce:5c:de:09:25:
b6:7a:d7:07:41:dc:6c:f6:c6:c0:58:43:9e:b0:4e:
4b:14:2a:cc:f1:5f:85:0f:46:0c:58:8b:0d:9b:f9:
8e:f5:93:70:0a:5f:33:23:06:49:0b:1d:22:a0:7f:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:08:63:6A:8E:39:A6:5B:35:C6:5E:D4:93:6C:16:1D:4E:16:B9:5B
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/zAhjao45pls1xl7Uk2wWHU4WuVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:c80::/29
Signature Algorithm: sha256WithRSAEncryption
36:5c:58:6a:10:7f:d2:14:22:36:cb:26:d0:10:2b:e9:7c:86:
f2:b9:ce:9b:f8:fb:32:bc:91:74:47:0f:66:60:4b:01:a1:e2:
f1:98:d9:8b:61:d2:9f:00:ce:ad:11:2c:93:7c:75:d9:60:7a:
f4:30:47:2d:a0:57:a5:02:57:ec:e7:57:a9:15:8d:d8:9f:58:
14:6b:f7:1c:ef:37:0d:08:f6:cd:58:ee:a2:53:05:6f:d3:39:
b7:03:b7:bc:3f:9a:d0:d4:af:c2:98:e3:69:33:7d:2f:a2:ad:
0d:41:7c:2c:86:b7:70:3e:44:7f:e2:ca:fc:a7:24:56:9c:c7:
73:ef:c4:9f:b1:ba:06:52:a1:f3:26:2a:22:eb:69:30:2e:16:
9c:06:5b:43:1f:9c:72:83:bc:ff:02:2b:7f:3d:35:df:d0:9e:
b6:74:dc:7b:84:6d:e4:0e:d7:04:bb:6e:94:b6:0e:c2:a3:f8:
7c:14:b1:fa:d9:1a:48:4f:08:a7:71:25:d4:05:15:74:c4:de:
df:5d:03:1c:d3:be:14:79:fa:97:2f:e4:13:91:55:2a:cf:e9:
1c:d9:5c:14:90:1d:4d:e8:ea:e2:a5:aa:66:67:7b:15:b6:f9:
9e:42:2c:fb:f7:97:a2:7e:c9:e2:f9:0b:dc:37:26:45:69:95:
57:ca:05:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:25 2024 by rpki-client on console-fra.rpki-client.org