Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/MXX7ZJV7bjZQaqq7MFFO6oYbMLU.roa
File: MXX7ZJV7bjZQaqq7MFFO6oYbMLU.roa (raw, json)
Hash identifier: XLy9moaInw3jaPSa7FxN2l71Y2Kp5TYh/3pU3ERSNBQ=
Subject key identifier: 31:75:FB:64:95:7B:6E:36:50:6A:AA:BB:30:51:4E:EA:86:1B:30:B5
Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial: 03C3471C
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/MXX7ZJV7bjZQaqq7MFFO6oYbMLU.roa
Signing time: Sat 01 Jan 2022 15:07:35 +0000
ROA not before: Sat 01 Jan 2022 15:07:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61272
IP address blocks: 2a02:e00:ffe7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63129372 (0x3c3471c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d7873416510a2fb2346ef342280155522713b
Validity
Not Before: Jan 1 15:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3175fb64957b6e36506aaabb30514eea861b30b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:d4:6e:bf:23:85:42:8b:41:e5:90:5f:da:
11:7b:d1:ad:2d:be:1e:0b:dd:35:77:2f:de:0e:f3:
93:f2:00:1f:bc:9e:da:ea:00:c0:07:a2:9d:40:1b:
44:4e:20:fa:34:77:0e:61:78:6d:41:14:8b:46:87:
12:6a:3b:ef:1e:fc:f7:fc:e8:01:3d:d6:e1:5c:b3:
9d:d5:65:8f:92:9a:18:c0:30:5f:68:6d:9d:8f:76:
f8:05:13:5d:76:e4:be:a5:a1:76:c6:de:3e:9a:91:
7d:ae:fd:eb:89:e2:25:98:92:8d:3c:a1:bd:e7:e1:
48:7d:47:49:01:81:16:da:bb:77:6d:85:53:16:55:
f0:1d:18:dc:78:69:ad:59:5c:ae:91:88:00:aa:d6:
f4:5c:e5:0d:60:cd:e2:2d:27:8e:1f:0c:fe:f1:d8:
4a:3d:ff:ac:71:0f:a7:88:cd:69:80:f9:95:e6:9c:
39:3c:6a:06:ff:ae:23:2c:50:7c:d0:73:95:f8:f4:
52:1c:df:5a:c5:8a:ce:9e:35:25:12:5d:25:a5:32:
89:32:a2:91:63:d7:64:36:a3:ec:56:82:3e:15:fe:
0a:9b:30:96:a5:99:cd:81:f3:5d:8a:30:94:f7:e5:
6e:a0:8c:70:bc:a7:7a:6b:c4:5f:75:06:fd:cf:71:
bd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:75:FB:64:95:7B:6E:36:50:6A:AA:BB:30:51:4E:EA:86:1B:30:B5
X509v3 Authority Key Identifier:
keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/MXX7ZJV7bjZQaqq7MFFO6oYbMLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:e00:ffe7::/48
Signature Algorithm: sha256WithRSAEncryption
4b:15:27:a1:30:d5:9b:07:a8:0c:b6:bd:69:0f:02:7c:7f:f0:
55:41:ac:e9:9c:f5:b6:e3:a4:cd:5e:33:5b:36:0a:7c:cc:2a:
59:d6:c4:1f:95:81:b0:71:b3:98:b6:ef:92:2d:62:3c:f5:77:
c5:7f:65:35:b5:21:60:85:07:40:5c:c9:a9:c8:db:89:48:ac:
6c:5c:a0:85:91:b7:50:61:bb:96:90:0a:06:d6:67:c6:96:de:
16:9d:45:1b:66:97:2d:3c:03:79:6a:bb:c9:fb:cf:c3:af:8b:
2a:1f:83:10:6c:a6:4d:f1:27:ca:53:c3:4b:5b:d1:c9:4b:8a:
4c:d5:84:bf:b0:df:33:e9:29:75:7e:8f:2c:23:b0:78:ca:0e:
a9:00:29:dd:d2:ea:04:88:f1:05:67:44:81:79:43:26:c5:dd:
62:1b:e9:6d:21:47:ae:4b:9a:22:46:0c:a6:ab:2a:8e:23:7e:
cb:ae:ea:54:8a:6a:b3:94:5a:2d:15:aa:38:a3:e1:39:26:de:
bb:db:27:a9:e0:9d:cb:f8:c7:3a:ac:7f:9d:b0:b3:64:2f:68:
9a:02:98:6b:a2:db:c9:6e:bc:3f:f4:62:e3:05:4e:5e:99:ac:
72:22:74:be:fc:c4:c3:8d:8e:5f:4b:49:61:73:dd:9f:ba:a8:
ab:31:cf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:31 2024 by rpki-client on console-ams.rpki-client.org