Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/DJDNzf0w40F4Pn_hJ0ejQtSPmEg.roa
File: DJDNzf0w40F4Pn_hJ0ejQtSPmEg.roa (raw, json)
Hash identifier: M/6GdAnJudXdMSUI+5KRAxZL1puKQeu/UM3HQHHImnY=
Subject key identifier: 0C:90:CD:CD:FD:30:E3:41:78:3E:7F:E1:27:47:A3:42:D4:8F:98:48
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 03F157EB
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/DJDNzf0w40F4Pn_hJ0ejQtSPmEg.roa
Signing time: Sun 19 Jun 2022 21:17:35 +0000
ROA not before: Sun 19 Jun 2022 21:17:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212271
IP address blocks: 2a05:4143::/32 maxlen: 48
2a05:4140:187::/48 maxlen: 48
2a05:4140:100::/40 maxlen: 48
2a05:4140:400::/40 maxlen: 48
2a05:4140:600::/40 maxlen: 40
2a05:4140:300::/40 maxlen: 40
2a05:4140:190::/48 maxlen: 48
2a05:4140:16::/48 maxlen: 48
2a05:4140:4::/48 maxlen: 48
2a05:4144::/32 maxlen: 32
2a05:4140:5::/48 maxlen: 48
2a05:4140:8::/48 maxlen: 48
2a05:4140:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66148331 (0x3f157eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jun 19 21:17:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c90cdcdfd30e341783e7fe12747a342d48f9848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:08:5a:74:da:81:1e:7c:c2:88:ba:f0:52:
72:60:ad:20:79:82:3f:21:99:00:fe:c6:8b:9c:00:
3d:22:3f:e8:3b:71:2d:4e:08:83:79:69:76:25:d3:
c8:c6:85:a4:e2:54:52:a6:83:b1:61:bd:f2:c1:f8:
0a:df:3a:94:6f:2b:fa:c7:9c:3f:8d:7b:7e:d8:83:
57:92:de:3d:c2:98:e4:0e:ef:c1:de:4f:17:8b:8d:
f3:55:bc:90:16:49:ba:ff:3d:67:26:c3:0d:25:19:
f0:51:39:36:3a:9e:63:9a:e4:95:38:74:bb:e6:d3:
b3:60:23:ef:62:1e:8b:5f:d3:36:08:03:69:87:69:
35:66:78:d7:6f:94:09:7a:2d:f9:82:0a:35:08:f7:
c8:0b:17:43:e3:98:0f:d4:c0:d0:30:5a:9e:0c:49:
51:63:21:d9:ff:ad:06:7e:24:65:18:40:ab:df:c1:
31:7d:3e:c2:59:6e:70:35:8a:58:e6:31:41:ed:a7:
a7:51:f4:41:0b:4b:e7:09:8a:48:9d:34:28:c8:85:
55:26:fe:cb:c8:f6:e3:8b:d9:d3:05:25:5f:bd:f8:
e3:6c:66:6d:1d:23:94:06:a3:4f:31:ad:d0:c2:2b:
9b:21:b2:a8:25:c2:6e:94:25:f6:37:41:48:62:f6:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:90:CD:CD:FD:30:E3:41:78:3E:7F:E1:27:47:A3:42:D4:8F:98:48
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/DJDNzf0w40F4Pn_hJ0ejQtSPmEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:3::-2a05:4140:5:ffff:ffff:ffff:ffff:ffff
2a05:4140:8::/48
2a05:4140:16::/48
2a05:4140:100::/40
2a05:4140:300::-2a05:4140:4ff:ffff:ffff:ffff:ffff:ffff
2a05:4140:600::/40
2a05:4143::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4a:63:82:70:c4:c1:94:95:e7:30:0c:42:be:75:6b:70:0b:35:
1d:d0:94:44:1f:03:0a:a0:c9:df:5c:0c:9a:6b:ab:50:9c:1f:
7e:93:9c:86:10:4a:4e:e7:64:28:a0:2a:69:1e:1c:da:4b:9a:
ba:e0:47:56:d6:91:b8:3e:73:6c:6e:54:02:99:e5:5e:ff:be:
76:25:fd:95:06:d1:f0:d0:ad:42:cf:06:07:6e:af:48:fa:3e:
e5:15:96:39:ef:6b:c3:9f:c4:15:bd:ee:14:ab:8c:b6:16:b2:
7d:f2:78:3d:e2:48:e9:25:2f:73:90:72:45:14:9b:ea:a5:50:
ce:30:1b:1e:75:90:72:4b:29:72:c7:3f:35:98:27:ce:ad:7c:
21:9e:30:53:c7:1f:22:e4:c2:43:0a:8e:88:e3:31:05:83:c6:
20:4a:cf:4d:e5:d1:b7:a4:16:e1:52:53:58:40:a6:84:34:ff:
88:2d:32:48:ce:43:a1:ce:3e:06:63:26:d8:e0:24:38:df:03:
e9:a8:e5:e2:37:a6:a2:aa:3e:0a:a4:af:08:be:b9:e4:65:be:
b6:95:b4:3d:12:d7:ef:fa:26:77:31:99:97:47:d5:93:57:8e:
a3:d0:b5:4a:c6:40:6b:0f:bf:3f:23:4b:5a:5d:bd:d4:f7:3f:
ac:58:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:30 2024 by rpki-client on console-ams.rpki-client.org