Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/RAwmc6MrqJk698Uhu6PcbjxUF84.roa
File: RAwmc6MrqJk698Uhu6PcbjxUF84.roa (raw, json)
Hash identifier: KJWcOiH+ktKmdmGWBiXhCbAqrhOcwBWrACjK0avUB00=
Subject key identifier: 44:0C:26:73:A3:2B:A8:99:3A:F7:C5:21:BB:A3:DC:6E:3C:54:17:CE
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 03DEC91B
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/RAwmc6MrqJk698Uhu6PcbjxUF84.roa
Signing time: Sat 01 Jan 2022 01:50:44 +0000
ROA not before: Sat 01 Jan 2022 01:50:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212430
IP address blocks: 2001:67c:209c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64932123 (0x3dec91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: Jan 1 01:50:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=440c2673a32ba8993af7c521bba3dc6e3c5417ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:07:4a:5d:70:66:b8:4c:bd:fb:89:f4:11:
de:66:a2:d0:74:0a:30:c9:20:ed:47:05:13:47:cf:
b6:8e:5c:b4:22:55:e5:10:15:99:3a:b1:9a:4b:76:
4e:9a:a2:5d:4e:eb:4b:33:0f:06:b6:10:a2:d0:2f:
04:2b:29:fb:fe:a9:eb:e3:02:b6:fe:57:18:34:d6:
48:40:8c:7b:1f:b8:0d:21:8d:ba:d4:fa:de:4e:12:
ee:4c:bd:df:4d:f8:e5:81:7c:06:c9:69:45:6b:d8:
c4:c8:e3:b1:ee:b1:54:df:6a:04:35:b2:a2:39:f3:
6f:4e:b9:ee:9d:2d:cd:4d:ef:77:c5:b4:8d:27:e5:
f4:c4:ad:b3:f3:58:40:2b:f2:04:0e:50:ab:aa:63:
f1:d2:74:d8:43:bc:3e:af:e2:44:70:e3:c2:94:8f:
c5:a2:1b:de:59:47:b7:43:ee:cf:29:fc:18:d5:5a:
1f:18:d0:96:7c:57:ac:9e:10:d7:b4:a1:9b:97:c8:
97:51:39:da:3d:fe:64:ee:3d:27:aa:d0:f0:62:51:
21:95:1c:8a:8c:57:8f:cf:6b:42:0a:2b:cd:d5:cc:
0c:ba:b0:d5:42:bd:e3:c2:8a:ba:8f:e8:c2:3e:3d:
32:1b:f6:2f:d3:ff:35:42:21:cb:2d:27:b0:aa:88:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0C:26:73:A3:2B:A8:99:3A:F7:C5:21:BB:A3:DC:6E:3C:54:17:CE
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/RAwmc6MrqJk698Uhu6PcbjxUF84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:209c::/48
Signature Algorithm: sha256WithRSAEncryption
51:68:5b:ff:ab:1c:e5:94:fa:2f:65:c4:51:3f:a0:1e:60:18:
ec:44:11:58:10:ff:e2:16:22:a6:f9:69:ea:a9:24:f5:17:5f:
b4:c4:ee:5e:40:e9:7c:41:ba:3d:3a:81:2e:89:bf:39:4b:d7:
6b:c0:a9:54:0c:92:54:c3:4d:e2:8b:fb:1b:82:c1:f4:33:55:
2c:b7:a4:a3:df:bb:e6:19:c9:0f:3b:6d:44:51:1a:85:6d:8e:
b6:77:67:5f:66:a3:90:b9:9f:ba:dc:1f:8c:73:73:ff:8a:4f:
a3:8e:b9:06:b1:9d:c8:03:ad:86:fa:51:8e:e9:41:24:09:6f:
cc:0d:4b:9b:79:9f:9c:d3:3d:c1:09:e1:a6:88:81:ee:66:a7:
75:c2:a6:46:e8:be:93:82:17:e7:f3:a5:5a:a9:ea:54:e0:06:
79:18:5c:46:11:a3:8d:8c:30:f2:c2:d3:ee:2b:30:97:9b:34:
aa:8f:ed:6c:08:e8:4c:5a:dc:83:29:a6:20:99:ec:bd:d2:b8:
15:d4:17:6a:8a:97:df:04:7b:ca:53:04:7c:98:f6:3a:d4:ea:
ab:04:46:2e:8a:5c:71:99:35:c3:7e:48:39:ec:c6:79:8f:5b:
ce:dc:7d:49:c9:50:61:41:60:e0:12:29:38:02:bb:e9:81:aa:
74:73:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:39 2024 by rpki-client on console-fra.rpki-client.org