Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/8B5vBnlalV7OwlpV_rD9-tiZOJY.roa
File: 8B5vBnlalV7OwlpV_rD9-tiZOJY.roa (raw, json)
Hash identifier: WJXihMnRj+g/Os2PV4PJUhziHhQMephUzSvvM5cl2fI=
Subject key identifier: F0:1E:6F:06:79:5A:95:5E:CE:C2:5A:55:FE:B0:FD:FA:D8:99:38:96
Certificate issuer: /CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Certificate serial: 014DC2
Authority key identifier: EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/8B5vBnlalV7OwlpV_rD9-tiZOJY.roa
Signing time: Thu 28 Apr 2022 12:26:15 +0000
ROA not before: Thu 28 Apr 2022 12:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 2001:67c:420::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85442 (0x14dc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22ab6bbe42ed9cf367bb0317df7e640e2836dc
Validity
Not Before: Apr 28 12:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f01e6f06795a955ecec25a55feb0fdfad8993896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:3f:ea:bd:f1:ae:0a:13:07:7c:da:6c:ba:
24:7e:71:f7:7f:9f:1f:08:a0:83:0c:dd:40:7c:74:
0a:2c:b6:54:fe:ef:14:3a:da:db:1d:41:b3:1e:e2:
b6:d5:31:ee:b7:bd:67:3d:15:84:95:27:ca:c1:19:
b7:7d:8b:d9:06:1e:72:1f:d7:c8:46:95:1b:ac:90:
4b:6d:fd:be:43:1f:21:ff:77:fe:d4:b9:26:ab:cb:
a7:5e:c2:f5:d7:3a:5d:64:9a:86:2b:c1:3d:82:6a:
74:d1:1a:dc:82:00:c1:2f:06:c3:de:74:95:6f:e0:
ff:39:c2:a1:d0:4e:c0:f0:6d:9c:c6:35:cc:31:69:
d8:4d:e0:57:14:bd:af:22:77:98:26:67:b8:c4:e5:
e5:52:8b:8d:6b:40:c2:14:90:15:02:64:9b:a6:5c:
e7:e3:37:d3:8c:ec:82:6a:5a:2a:96:de:36:6b:b3:
3f:a6:88:c0:f8:6b:a3:35:43:7f:af:59:45:ff:4c:
41:04:cb:06:ef:cd:66:67:98:4c:23:14:b3:15:50:
3b:07:5e:6b:b0:c0:34:a9:33:2c:c6:35:48:a0:d7:
54:d8:37:b1:4f:ab:5c:db:62:9b:e8:77:e7:af:11:
6c:9b:ce:42:05:ee:47:e0:a5:c4:cf:3e:4a:39:58:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1E:6F:06:79:5A:95:5E:CE:C2:5A:55:FE:B0:FD:FA:D8:99:38:96
X509v3 Authority Key Identifier:
keyid:EA:22:AB:6B:BE:42:ED:9C:F3:67:BB:03:17:DF:7E:64:0E:28:36:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iKra75C7ZzzZ7sDF99-ZA4oNtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/8B5vBnlalV7OwlpV_rD9-tiZOJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a3a2-ad53-46a5-8fd5-065ed4d8441f/1/6iKra75C7ZzzZ7sDF99-ZA4oNtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:420::/48
Signature Algorithm: sha256WithRSAEncryption
c5:9c:ad:28:18:cb:c5:2c:0d:a6:46:0b:6a:14:46:29:3b:04:
c7:fd:7b:2c:d7:1e:e7:7e:f3:11:52:8d:f6:a7:7e:fb:eb:a4:
65:d1:d0:99:49:46:3b:71:d1:de:aa:01:68:3a:b1:04:00:d9:
18:98:7b:61:e6:d9:a7:ea:1f:6d:82:21:1f:55:ab:6b:a7:3d:
c3:99:15:b8:a7:ff:2d:11:4b:6d:75:0a:f2:0d:d3:88:3e:89:
c5:cf:a0:69:9c:a1:91:23:ea:90:0c:c3:85:2c:e2:81:7e:b5:
0b:34:b6:19:71:1a:e9:e6:2d:9d:34:15:e9:ec:2f:dd:20:1d:
ce:b5:b1:49:a5:b3:81:48:a2:53:19:1e:c0:41:f7:53:71:dd:
50:62:c2:31:31:1d:1a:7a:c0:34:d5:2d:05:6e:fc:40:33:51:
80:57:51:27:37:3d:b4:76:b3:ed:c8:4f:3e:06:d2:48:6d:6e:
6a:0d:04:2b:02:9d:87:54:a7:6f:77:b1:fe:d4:bd:bd:1e:ae:
5c:8e:9a:2f:7b:bf:76:04:f4:a4:6c:9f:0f:38:0a:fe:a2:f3:
dc:e5:ed:ab:98:97:97:0a:06:dc:bf:d2:03:32:58:06:7b:6b:
7f:2c:c4:6d:32:5d:9a:fb:c9:1a:e7:75:dc:71:a7:63:68:71:
34:ae:77:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:46 2024 by rpki-client on console-ams.rpki-client.org