Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/Pipe8ZomBrdW7vRXtHPqPR3bUGk.roa
File: Pipe8ZomBrdW7vRXtHPqPR3bUGk.roa (raw, json)
Hash identifier: Q2+l6iU6QU2udjkLjhDqLebztt5ee60KSqC8FEsfda4=
Subject key identifier: 3E:2A:5E:F1:9A:26:06:B7:56:EE:F4:57:B4:73:EA:3D:1D:DB:50:69
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 03C2259D
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/Pipe8ZomBrdW7vRXtHPqPR3bUGk.roa
Signing time: Sat 01 Jan 2022 08:58:06 +0000
ROA not before: Sat 01 Jan 2022 08:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29663
IP address blocks: 2001:67c:2ac0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63055261 (0x3c2259d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Jan 1 08:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e2a5ef19a2606b756eef457b473ea3d1ddb5069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:ce:c4:15:42:b8:65:dd:cd:ad:e3:65:06:
52:d5:f8:66:aa:a7:ff:d2:e8:2d:d9:72:57:ae:86:
d6:8d:fe:7c:dc:11:60:30:36:7f:a4:05:08:a3:56:
73:1a:8f:88:9e:bb:1b:06:ff:f0:50:e0:28:67:4f:
8a:b2:61:42:60:ab:37:19:39:e6:ee:3d:70:ef:78:
69:b7:ee:61:ad:15:74:a0:70:de:b2:ce:1e:b0:81:
60:42:6e:39:4b:00:86:ce:13:5d:5d:14:27:f2:48:
fe:a7:13:b5:82:4d:d9:ee:57:7f:b7:6b:b2:4d:f6:
d0:3c:fe:04:e9:50:39:dd:c2:1b:c6:32:de:17:b6:
9f:d6:cf:21:0a:54:e2:f4:97:90:2d:f6:90:bd:2e:
bd:6e:bb:4f:b7:7b:38:99:34:94:ce:57:66:8b:90:
df:ca:1a:c6:db:51:94:83:cd:57:d0:71:8b:0d:24:
3b:d3:99:8e:7a:95:66:2e:e0:dd:7c:c7:ba:47:1f:
72:fb:45:65:66:f4:ff:6f:96:41:c9:e2:df:87:07:
81:f3:ee:ec:35:9c:45:39:60:4d:c0:21:c8:0d:0e:
22:67:1d:88:f1:9e:66:36:22:6c:76:a6:8e:69:af:
0d:07:0b:d3:df:89:1e:2b:fb:a2:86:c4:e5:8c:db:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:5E:F1:9A:26:06:B7:56:EE:F4:57:B4:73:EA:3D:1D:DB:50:69
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/Pipe8ZomBrdW7vRXtHPqPR3bUGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ac0::/48
Signature Algorithm: sha256WithRSAEncryption
24:55:e5:3d:b3:58:de:f7:56:42:85:54:13:07:3c:35:60:b0:
9d:07:6a:3b:ce:50:6a:ab:c7:c1:65:b0:69:4b:26:7d:2b:b9:
ef:2e:b0:e2:10:81:cb:17:53:3d:ac:ee:f5:69:9c:0a:30:05:
fb:71:43:b8:72:53:3d:5d:79:ef:3c:70:fa:6e:05:0c:9a:ea:
ab:75:dc:02:ea:cd:71:a6:1a:06:4e:75:11:8e:6b:aa:17:06:
f8:4e:b5:9e:ec:1e:39:b9:3d:16:07:be:4a:7c:89:a7:f2:1f:
ab:33:33:7f:00:21:7d:ee:79:06:74:59:15:6c:f5:56:ef:0b:
3c:13:ac:8d:46:f4:00:98:a4:11:e7:d9:2b:a2:80:c2:f1:7b:
88:ee:d6:76:b6:be:35:64:49:e3:72:60:2b:65:4f:a5:8f:73:
f7:7e:33:69:03:15:41:29:8e:51:81:b0:ca:7a:6f:a4:e1:e9:
20:f7:b9:5f:a3:a7:5d:26:ad:7e:9d:bc:69:a4:24:a6:c6:12:
1a:f1:04:50:16:3e:76:67:a2:d2:ac:26:1f:8b:22:20:4e:ba:
d7:d4:65:2e:c5:d8:fd:9b:0f:36:9c:7c:99:8c:5a:0c:59:60:
50:fe:2f:76:0d:83:dd:9e:d1:e2:9a:82:61:83:d6:57:6d:ec:
c5:ff:24:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:58 2024 by rpki-client on console-ams.rpki-client.org