Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/RQ8RlX-_8YDkxFc8qM6rq89XUlU.roa
File: RQ8RlX-_8YDkxFc8qM6rq89XUlU.roa (raw, json)
Hash identifier: Vg+2RaqZ2NzG6/CxcOI2cLkmFHHvY97/u0DnNeM1oec=
Subject key identifier: 45:0F:11:95:7F:BF:F1:80:E4:C4:57:3C:A8:CE:AB:AB:CF:57:52:55
Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial: 018312B2FC6732BD609CB9FFE78790C5AEF8
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/RQ8RlX-_8YDkxFc8qM6rq89XUlU.roa
Signing time: Tue 06 Sep 2022 12:07:43 +0000
ROA not before: Tue 06 Sep 2022 12:07:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 2001:67c:4f0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:b2:fc:67:32:bd:60:9c:b9:ff:e7:87:90:c5:ae:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Validity
Not Before: Sep 6 12:07:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=450f11957fbff180e4c4573ca8ceababcf575255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b3:eb:08:d5:90:3a:c5:46:b0:22:75:05:fd:
63:ae:b2:be:ad:6d:34:8b:c7:a6:a2:9f:bd:d8:b8:
e1:1e:a7:dc:d6:bd:4f:6d:1f:2e:b0:c3:4f:1c:c3:
b7:8a:b9:48:9c:7d:f4:54:a6:4f:e0:05:8a:d6:0d:
2a:88:90:75:e3:6f:82:e5:a1:8e:7c:14:90:e0:20:
79:c8:aa:7a:a1:5e:71:44:c9:01:7e:fa:14:76:09:
94:d0:dc:9f:13:26:32:a8:5f:e1:2d:cc:4a:89:3e:
64:01:b6:c2:1a:1d:60:2b:51:74:94:e8:1a:52:dd:
53:55:f2:c8:43:17:c0:69:58:7e:5a:f2:ca:15:e9:
2d:6b:44:66:bc:09:cd:fa:b0:98:d9:65:db:8b:9c:
60:37:33:c1:e0:17:b4:ca:2b:53:50:03:ea:43:40:
6c:bf:4e:19:f2:fe:82:6e:c6:84:be:d4:ee:14:b2:
f4:e6:3b:70:3c:e9:c2:14:e6:9f:75:69:81:2f:2f:
7e:ba:f5:cb:0b:9e:60:28:69:64:73:5d:24:82:b1:
db:c3:f7:4a:78:ea:3e:f1:c5:e9:68:5d:72:59:e5:
77:36:bc:5c:ac:84:58:c3:85:57:6f:b7:7a:6c:bf:
3c:fe:c0:0f:01:09:2a:fe:3b:13:3b:de:8e:d6:d1:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0F:11:95:7F:BF:F1:80:E4:C4:57:3C:A8:CE:AB:AB:CF:57:52:55
X509v3 Authority Key Identifier:
keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/RQ8RlX-_8YDkxFc8qM6rq89XUlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4f0::/48
Signature Algorithm: sha256WithRSAEncryption
b3:1e:0c:45:70:d1:1c:3e:2f:b7:9d:05:b0:4b:64:3f:8e:e7:
ff:50:6b:9e:0e:b3:1f:a3:c3:f9:34:86:4d:06:b9:f6:b0:9d:
d7:d7:a4:0c:e5:de:89:db:81:3f:f9:86:b1:8f:e6:24:36:2c:
85:0b:d6:05:c2:da:d4:8b:36:9e:5d:64:a1:3a:81:23:2c:44:
8a:fc:55:50:83:30:b7:38:9f:3a:ca:9f:7d:4d:db:3a:03:21:
93:c6:8c:56:68:0b:af:93:41:0e:17:da:7d:ce:f2:f8:74:db:
6f:82:25:00:d7:9b:78:94:8e:cb:2a:d9:04:de:cb:8f:be:36:
da:35:ed:11:c5:14:4b:be:61:6f:2b:50:91:d7:84:25:ce:4e:
63:da:32:64:52:dd:78:ff:07:05:2d:ca:da:d0:7b:ef:88:de:
bc:b7:a7:06:e6:ff:97:ae:b0:40:dd:5e:1f:3a:75:ff:5b:1a:
8c:72:ab:fb:73:91:b3:66:26:e3:8b:b8:ee:51:f1:d2:c4:93:
b4:56:66:24:ae:04:5e:9e:37:fc:d4:a6:26:a5:9f:e3:51:65:
fa:38:77:e6:98:77:5a:30:26:a7:88:ee:0e:41:e8:b6:db:ae:
32:b0:95:ce:6d:3d:8a:b8:67:09:df:c4:63:20:3e:2a:81:b6:
01:a7:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:43 2024 by rpki-client on console-fra.rpki-client.org