Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/2JVhdzqgjfBZKjVIqdFKa19AQP4.roa
File: 2JVhdzqgjfBZKjVIqdFKa19AQP4.roa (raw, json)
Hash identifier: +Kdr5zwHeP2LjlMRO/+stwb/m+sNUelrLnReijMj66o=
Subject key identifier: D8:95:61:77:3A:A0:8D:F0:59:2A:35:48:A9:D1:4A:6B:5F:40:40:FE
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 04170392
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/2JVhdzqgjfBZKjVIqdFKa19AQP4.roa
Signing time: Sat 01 Jan 2022 03:58:06 +0000
ROA not before: Sat 01 Jan 2022 03:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212567
IP address blocks: 2001:678:ed0::/48 maxlen: 48
2001:678:e68::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68617106 (0x4170392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Jan 1 03:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d89561773aa08df0592a3548a9d14a6b5f4040fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e6:05:4e:eb:a7:2f:db:39:c8:a1:66:2a:03:
3d:2e:9d:3d:29:96:29:79:d0:8b:7c:0e:b1:33:0a:
a4:64:0d:92:d2:8a:57:8a:41:9f:c4:d4:f5:b1:aa:
18:ea:a8:77:10:48:9a:f2:89:f3:41:ea:e7:40:37:
a2:38:15:2e:d8:4f:d1:f0:64:6b:7f:80:69:44:f8:
e0:ac:e6:76:2e:38:d8:35:09:12:d2:e0:25:6c:11:
af:58:7c:1d:e5:5a:30:23:c6:02:62:2d:b7:64:79:
e8:2d:4d:3a:d2:ac:ba:94:f7:92:a8:bb:d2:e2:07:
80:66:99:09:f9:21:13:79:88:80:c4:23:3e:ce:0b:
f2:31:a2:04:98:46:19:3f:b4:14:2c:93:44:34:b8:
2f:18:aa:c3:ed:26:b0:43:12:39:87:4c:83:1a:4e:
c5:1a:1d:ec:1c:a1:45:e1:16:06:28:05:38:37:45:
7d:53:9a:b2:99:28:7b:17:28:2b:f7:d4:cf:87:f9:
06:c4:91:28:32:08:e5:f7:d2:3d:38:8a:36:c4:fa:
33:f9:3f:6e:71:e6:4b:51:3b:26:6b:bf:da:81:51:
e0:6a:a8:5c:60:71:34:b1:91:6f:5c:7e:7d:81:8d:
f9:4c:df:bc:50:9a:ca:27:17:91:60:0e:62:fb:31:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:95:61:77:3A:A0:8D:F0:59:2A:35:48:A9:D1:4A:6B:5F:40:40:FE
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/2JVhdzqgjfBZKjVIqdFKa19AQP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e68::/48
2001:678:ed0::/48
Signature Algorithm: sha256WithRSAEncryption
91:be:82:4b:b7:dc:52:07:01:04:2f:b0:fa:59:a8:62:20:74:
fc:13:fb:e7:6d:88:60:29:e8:d9:c2:c8:2b:29:91:ea:c9:71:
24:e8:00:18:7a:99:99:16:60:bb:90:23:af:4a:65:39:09:4c:
f1:9e:65:5f:89:78:33:02:c4:c4:99:04:16:ff:26:85:9a:74:
44:b6:1b:a3:b7:70:dd:2f:32:a6:9d:77:5a:6a:43:46:0d:8e:
f0:74:77:42:f7:9f:c6:c5:ac:d7:6b:55:34:ff:27:52:a8:be:
3d:13:51:2d:e1:f6:d6:03:c5:80:ca:fb:fb:45:6d:27:8b:8c:
b0:09:c7:29:02:28:78:cc:be:cb:5d:6e:4b:55:6b:ee:39:c1:
a9:ed:75:46:2a:ed:01:ce:d4:14:a5:f6:d8:3d:2d:5a:67:f4:
c8:95:74:fe:83:46:71:ed:ce:e3:f2:d3:21:b4:9a:01:a7:99:
c2:2a:e1:d8:b5:19:ec:78:35:5c:7e:ae:3e:f1:e9:2c:57:1a:
cb:26:7f:14:6d:f0:0a:ed:c1:1e:3a:8d:d5:13:f1:57:80:a8:
9a:64:55:55:45:a3:ba:e3:eb:2d:df:b0:9d:88:12:52:cd:09:
30:21:b9:4b:b2:f4:75:67:df:6b:2f:fd:3d:7b:f4:ed:bc:33:
3e:4b:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:12 2024 by rpki-client on console-ams.rpki-client.org