Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/7m_QnyzzYv_UgOSvabTVOKapUmM.roa
File: 7m_QnyzzYv_UgOSvabTVOKapUmM.roa (raw, json)
Hash identifier: 39h9/v1ojdPpnpYXbA8clHWtieIw96XFb1WUJfVRfj8=
Subject key identifier: EE:6F:D0:9F:2C:F3:62:FF:D4:80:E4:AF:69:B4:D5:38:A6:A9:52:63
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 034A8F1A
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/7m_QnyzzYv_UgOSvabTVOKapUmM.roa
Signing time: Mon 11 Apr 2022 16:56:47 +0000
ROA not before: Mon 11 Apr 2022 16:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212271
IP address blocks: 2a05:4140:4::/48 maxlen: 48
2a05:4143::/32 maxlen: 48
2a05:4144::/32 maxlen: 32
2a05:4140:400::/40 maxlen: 48
2a05:4140:600::/40 maxlen: 40
2a05:4140:300::/40 maxlen: 40
2a05:4140:3::/48 maxlen: 48
2a05:4140:16::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55217946 (0x34a8f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Apr 11 16:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee6fd09f2cf362ffd480e4af69b4d538a6a95263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:42:7c:e3:a6:3b:75:8f:8b:ea:e2:bd:b3:
4d:1f:f4:23:dd:72:75:78:86:6f:2b:28:d8:86:8d:
7d:11:fb:a0:3e:df:34:4f:b6:30:e7:a1:11:8b:3c:
b8:1c:88:89:0f:b1:06:ff:a4:93:46:9d:fc:3b:98:
0a:15:65:a4:28:e6:fe:d8:13:c7:75:f5:78:2d:8b:
a6:7b:1a:94:5a:b7:91:b1:f6:8c:ba:e7:ef:eb:44:
3b:05:0f:09:e0:01:0d:05:61:d2:e9:0f:c3:18:f4:
ed:c1:ec:6d:ca:75:85:c9:41:28:4b:d7:d8:7b:c6:
1b:55:fd:74:84:fb:15:3b:9d:db:a4:75:6b:e6:49:
fb:e0:ed:da:b3:96:53:50:81:3c:d4:e6:7e:50:e0:
a7:87:ed:a6:7c:8f:cc:28:bc:32:c0:46:5c:e5:eb:
40:79:81:0b:e7:46:59:45:98:3f:9b:a6:01:23:e3:
1e:ed:45:ae:7f:07:b5:a7:08:f6:91:bb:77:6e:b1:
09:29:53:e5:0d:b0:17:29:21:0a:1e:b3:5c:62:db:
db:71:f3:7a:ba:ff:0b:b3:6e:26:2c:43:0d:92:3a:
ed:22:bf:28:1d:03:e7:87:82:94:f2:f6:ad:5e:3a:
69:a0:01:6f:cd:36:ee:e5:70:a7:7d:ea:1c:b1:44:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:D0:9F:2C:F3:62:FF:D4:80:E4:AF:69:B4:D5:38:A6:A9:52:63
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/7m_QnyzzYv_UgOSvabTVOKapUmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:3::-2a05:4140:4:ffff:ffff:ffff:ffff:ffff
2a05:4140:16::/48
2a05:4140:300::-2a05:4140:4ff:ffff:ffff:ffff:ffff:ffff
2a05:4140:600::/40
2a05:4143::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1a:33:2b:5c:c6:a2:bc:c8:c9:b3:c1:70:04:26:58:1c:ff:9a:
c9:7d:6a:33:53:bf:df:1d:d0:43:e0:af:d7:d7:85:0f:96:e5:
cb:3b:ba:88:4f:c6:c5:a7:6c:9e:43:4d:03:85:41:38:29:05:
0c:22:fd:b0:c5:ca:9d:23:d8:7f:4f:e0:a9:cb:ab:4d:57:e9:
74:3c:24:20:9e:14:42:28:c3:40:52:a4:ee:64:cd:5c:ad:e9:
dd:c2:3e:7e:61:83:29:b4:aa:ab:93:7c:04:71:b9:0f:24:83:
58:96:fd:95:51:23:83:0c:c1:95:c3:f4:ea:f1:63:12:8b:8d:
a4:61:7a:a2:1b:c5:fb:45:a6:d0:ae:31:f6:13:f6:5b:ea:16:
77:f7:bb:c8:ba:fc:5f:20:c0:e9:02:c8:56:db:a1:1c:d3:01:
7d:ca:b6:77:9f:97:79:b3:79:86:d9:71:c4:18:a2:bd:0e:4a:
81:cc:7d:cc:85:67:d0:83:ea:83:22:ce:e3:49:94:18:4e:60:
d2:02:a4:bb:eb:39:ac:41:68:c7:37:d9:44:55:3b:6f:26:26:
f1:dd:77:2a:93:e0:0c:0f:02:84:e0:89:78:65:24:de:fa:ca:
2e:e3:7e:a9:fd:bf:26:34:36:08:25:75:a4:77:1e:ea:f8:bf:
46:e1:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:30 2024 by rpki-client on console-ams.rpki-client.org