Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/3ZECEy07QMU0nzcWSc1rIGAOX-k.roa
File: 3ZECEy07QMU0nzcWSc1rIGAOX-k.roa (raw, json)
Hash identifier: ZosvO9CFJwkoOyKKea/0xoSlZt+iOBJ5czx7x2mscA0=
Subject key identifier: DD:91:02:13:2D:3B:40:C5:34:9F:37:16:49:CD:6B:20:60:0E:5F:E9
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0CF69404
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/3ZECEy07QMU0nzcWSc1rIGAOX-k.roa
Signing time: Sat 01 Jan 2022 12:58:00 +0000
ROA not before: Sat 01 Jan 2022 12:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211338
IP address blocks: 2a0d:2406:2800::/38 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217486340 (0xcf69404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 1 12:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd9102132d3b40c5349f371649cd6b20600e5fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:e2:de:2f:54:c5:dd:bc:12:e6:39:6f:18:
35:8d:c8:92:dd:da:8f:49:13:e7:bd:6a:55:63:cf:
55:e5:21:6e:43:69:48:ec:63:5b:e8:2b:a9:3c:81:
2c:d8:ba:8c:c1:1e:b1:09:1a:2a:1a:f0:60:d5:4b:
07:00:64:2a:d5:32:88:8e:66:1e:4c:83:a8:65:57:
97:f4:c6:8b:83:71:62:e2:0c:59:04:e8:f9:f6:50:
48:ab:ba:d4:a0:b9:f0:62:8a:32:5c:ee:d1:6b:fd:
87:65:8f:51:e2:a0:81:34:cb:06:12:4f:78:b6:ba:
a5:e3:06:58:1d:36:19:aa:45:36:05:49:7c:c5:80:
59:d9:5d:8d:90:f0:db:0c:73:10:d1:6a:53:ed:24:
0f:51:09:cb:48:93:63:34:ba:39:e4:af:5a:89:82:
2e:6f:a7:38:e8:a3:39:29:79:fb:ea:a3:9b:2e:05:
52:5f:2e:01:c1:63:dc:20:48:31:cf:5c:72:b0:72:
16:7e:84:20:ea:9f:ed:5c:a8:a8:94:23:78:3b:f8:
44:d9:5a:9c:10:e7:51:57:a3:6d:10:b1:70:8c:cb:
06:af:0e:cf:8b:d3:ff:1a:03:2a:d1:a7:66:c3:72:
97:c6:01:54:69:a9:d7:bb:03:ab:ad:84:f9:09:92:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:91:02:13:2D:3B:40:C5:34:9F:37:16:49:CD:6B:20:60:0E:5F:E9
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/3ZECEy07QMU0nzcWSc1rIGAOX-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:2800::/38
Signature Algorithm: sha256WithRSAEncryption
07:47:e8:8f:7a:27:5e:06:9c:89:99:06:24:77:bc:64:74:83:
95:45:8d:d6:0b:b7:a6:1c:58:d8:0a:41:bc:f1:b1:b9:f0:2c:
94:ff:d4:76:ad:3e:30:6d:85:68:53:2d:4d:13:65:9e:4d:04:
6e:15:5e:4b:ff:d9:00:76:fa:c1:fb:d4:76:a7:bc:f1:7c:b7:
dc:d0:c9:d7:44:6a:18:7f:7b:b8:e1:f3:cb:0e:04:e0:d1:bd:
fe:f8:04:76:74:4b:46:a5:36:f9:cd:00:48:5c:bb:1f:52:e6:
7b:89:7e:c6:01:73:24:35:f9:b7:d7:f5:c6:d8:31:36:c5:1a:
47:ac:e9:52:40:39:50:a2:5f:bf:46:f6:b5:ed:f3:ec:80:42:
49:3f:fb:2c:5c:4b:cb:bd:61:db:7d:f2:78:99:71:f2:5f:10:
e4:ed:49:fb:b0:23:24:59:6a:ea:64:24:ab:3f:1b:c3:6a:d2:
a1:e6:9a:83:51:46:b2:f6:d3:b2:ac:22:ec:79:17:c5:ad:75:
e4:b7:6e:b6:f7:32:63:ba:01:be:cb:77:d9:37:6b:c5:87:f0:
f3:bb:03:e3:8c:37:79:27:53:20:d3:25:60:0b:21:cf:82:66:
8d:e1:dd:84:19:bc:fe:a8:8e:bb:35:3c:c1:af:ae:4d:06:b6:
f1:42:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:18 2024 by rpki-client on console-fra.rpki-client.org