Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/CcbQ7Z5I3zwjG9e6ygz9LZmWLgk.roa
File: CcbQ7Z5I3zwjG9e6ygz9LZmWLgk.roa (raw, json)
Hash identifier: EXJiBglZyj1OsA43yAl2lgP9oPUqg95cvg+J6S6MeNQ=
Subject key identifier: 09:C6:D0:ED:9E:48:DF:3C:23:1B:D7:BA:CA:0C:FD:2D:99:96:2E:09
Certificate issuer: /CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Certificate serial: 061BB0
Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/CcbQ7Z5I3zwjG9e6ygz9LZmWLgk.roa
Signing time: Thu 23 Jun 2022 17:21:10 +0000
ROA not before: Thu 23 Jun 2022 17:21:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210454
IP address blocks: 2001:67c:7c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400304 (0x61bb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Validity
Not Before: Jun 23 17:21:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09c6d0ed9e48df3c231bd7baca0cfd2d99962e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:57:8a:02:01:c5:55:bc:82:65:6a:28:26:
c3:a6:06:f3:e4:de:e9:a4:45:a9:17:9f:0a:37:5a:
97:58:f9:88:5e:e3:b9:bd:fe:e6:11:2a:87:23:e3:
ba:84:e8:7c:92:96:9e:dd:86:b7:ea:30:cb:1b:d8:
c1:29:30:55:b2:aa:b7:c7:3c:a4:da:62:98:9d:2e:
7e:71:2e:f3:95:3c:8d:fa:4e:af:04:dc:58:54:8f:
16:e1:5b:dc:2c:69:9c:f2:28:e5:d7:4e:49:76:99:
95:ef:96:b1:62:67:d9:7a:d3:50:d9:12:db:3a:9d:
00:d7:c1:ff:8f:89:50:c9:48:e3:57:e1:de:2b:f4:
7c:29:83:80:48:48:50:7b:8f:4b:5f:1b:ec:99:c4:
52:ef:b2:33:60:2d:49:2a:e2:81:c0:4d:d2:b9:aa:
d6:df:98:76:10:1d:75:a5:ad:04:41:83:ce:8b:63:
98:2b:c2:90:4b:b0:74:dc:c3:14:fb:7d:f4:85:c8:
4a:69:0c:e1:79:5a:d6:49:6d:6e:06:86:d8:38:97:
38:c1:15:2f:b3:d1:49:2f:93:64:48:1c:5d:8e:d6:
e2:56:d2:32:af:c4:cf:4e:1d:59:f2:be:87:59:6b:
b5:8b:5f:89:06:ce:d2:fe:ac:22:21:ba:e8:69:3b:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C6:D0:ED:9E:48:DF:3C:23:1B:D7:BA:CA:0C:FD:2D:99:96:2E:09
X509v3 Authority Key Identifier:
keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/CcbQ7Z5I3zwjG9e6ygz9LZmWLgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:7c::/48
Signature Algorithm: sha256WithRSAEncryption
d1:94:4f:a3:d3:8c:41:bd:ee:ef:c4:b3:58:95:9e:66:71:eb:
de:1b:5d:65:6f:2d:ca:d2:be:1d:42:46:33:a3:72:85:de:c9:
e7:2c:30:5e:c1:9d:28:81:58:63:cd:66:9e:3b:d2:9f:d4:af:
c5:e9:4a:e5:da:dd:a0:05:35:dc:7a:6d:45:b2:2a:ef:a2:8b:
50:4d:84:49:af:45:d6:74:71:2a:5b:a5:23:cf:de:5e:7c:3c:
6d:f6:7c:33:62:f0:c0:aa:e6:fb:8f:ec:bd:83:b0:2a:52:0c:
4d:d2:2f:cf:ee:3d:c4:b5:7f:70:2c:e4:9a:9f:fc:e5:7e:3e:
00:df:e0:b8:bc:23:89:13:fe:19:12:a0:d0:8b:16:8a:62:d8:
01:c5:82:5f:3b:64:12:4f:df:0a:2f:b4:76:d2:56:66:9e:bf:
7a:c5:61:1d:a1:51:45:0d:43:16:b9:70:62:09:85:a1:01:62:
52:ae:c9:11:a2:15:d1:89:1f:30:93:2a:19:9a:e7:18:93:2f:
ef:cf:b7:7e:9f:e7:90:45:2a:e3:d0:33:5a:c2:84:9f:ff:db:
c7:ed:d5:a2:78:9b:d9:cd:49:5e:c4:53:d6:b0:ab:af:04:ca:
91:57:dd:01:8a:22:53:f4:7e:70:b2:56:64:50:d0:af:ea:4a:
6e:0b:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:38 2024 by rpki-client on console-fra.rpki-client.org