Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/6N9XUOFjq9ogKqEzxIbmXvJWY6o.roa
File: 6N9XUOFjq9ogKqEzxIbmXvJWY6o.roa (raw, json)
Hash identifier: X/xZMbvqhAq2aeSkckJZyUQiQ+UDPx5uiKxkPUi4JrM=
Subject key identifier: E8:DF:57:50:E1:63:AB:DA:20:2A:A1:33:C4:86:E6:5E:F2:56:63:AA
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 018383CE723BD332E5A9148ACEB0D2F8AB53
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/6N9XUOFjq9ogKqEzxIbmXvJWY6o.roa
Signing time: Wed 28 Sep 2022 11:14:48 +0000
ROA not before: Wed 28 Sep 2022 11:14:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29290
IP address blocks: 2a0b:8f80:100::/40 maxlen: 48
2a00:f10:141::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:83:ce:72:3b:d3:32:e5:a9:14:8a:ce:b0:d2:f8:ab:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Sep 28 11:14:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8df5750e163abda202aa133c486e65ef25663aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:15:17:67:c6:f7:e5:b5:19:4f:26:9b:fb:
77:99:a4:5f:10:52:d9:66:a9:bc:6a:57:04:a8:d6:
ec:d2:ea:21:f3:48:07:8b:d9:9b:08:18:1f:b0:0f:
76:01:f7:49:b7:57:df:52:2d:4b:7d:89:46:f6:4f:
66:6b:31:1a:3c:72:8c:32:5b:2d:2c:96:a6:4a:bd:
13:05:82:bc:78:84:a7:0d:0a:96:de:23:84:d2:7f:
3b:5f:3a:3b:25:a9:85:a4:4c:a0:ff:4e:3c:e4:90:
3c:14:5f:0f:8b:3d:c1:63:7d:27:8c:55:49:3f:2d:
f7:98:a3:d2:a1:91:d4:0d:bc:8e:0a:c6:57:64:e9:
59:92:dc:26:b2:68:23:ab:83:8a:5f:3c:6b:1b:5c:
b8:e4:55:9e:2b:68:5b:ef:21:0a:f7:06:31:51:75:
a2:8d:dc:f6:d4:1a:c0:e0:7d:34:34:45:e2:b5:fc:
54:0f:ba:5c:87:b5:b1:a5:8b:0d:17:f4:88:5e:78:
03:62:4d:ff:ad:ce:6a:e3:64:c0:1d:36:50:c2:e4:
bc:33:3a:e9:4b:cc:50:49:67:ff:2c:a0:7a:6c:cc:
10:fe:8c:aa:e9:b2:c5:b1:a2:6b:99:d3:fa:63:d3:
11:a6:3a:c8:9e:a6:34:72:74:c6:12:79:cb:26:42:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DF:57:50:E1:63:AB:DA:20:2A:A1:33:C4:86:E6:5E:F2:56:63:AA
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/6N9XUOFjq9ogKqEzxIbmXvJWY6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f10:141::/48
2a0b:8f80:100::/40
Signature Algorithm: sha256WithRSAEncryption
77:92:b0:2c:eb:d7:ff:2c:95:e8:01:ef:59:11:2e:0b:e5:ce:
77:bb:05:d9:94:73:9a:97:f2:1a:0e:90:62:31:30:a4:25:3d:
69:e9:04:f7:26:4d:e1:25:e7:e6:40:04:13:71:7a:84:07:5d:
fc:dd:38:f5:f6:ad:4a:f7:d9:5b:70:1a:f8:e0:47:4d:35:5a:
b1:02:a8:90:0d:1c:79:c5:00:6b:01:85:6d:eb:a1:2b:7f:4f:
dd:a6:de:cd:df:2a:64:ab:42:13:9c:63:e5:42:b4:a6:ef:e6:
e7:72:dd:19:8a:d7:88:24:2b:df:82:20:9e:f9:01:37:94:7e:
07:0e:6d:7c:35:cd:61:91:4a:03:61:22:62:d6:c5:66:2b:1d:
85:c2:85:49:ad:4a:0a:62:9c:ae:d9:cb:7d:9a:aa:d1:aa:34:
d4:08:96:2b:1f:15:5f:c2:68:9e:b2:00:5b:76:ad:82:a0:30:
79:c1:8f:ea:64:ef:b6:e6:0c:03:3f:ea:9f:46:c0:73:03:56:
f6:1b:d9:b7:a6:0c:a6:92:a8:f6:18:ab:7d:74:59:80:12:f0:
a9:b6:88:08:e7:d7:82:bf:8d:d5:eb:36:46:a0:a1:c1:0f:dd:
73:fc:70:f4:62:65:61:d5:eb:43:89:b3:62:9e:2a:90:92:62:
04:7a:bb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:11 2024 by rpki-client on console-ams.rpki-client.org