Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/awykcNPBWTTsh3C2dgOkbSJQqEA.roa
File: awykcNPBWTTsh3C2dgOkbSJQqEA.roa (raw, json)
Hash identifier: E7QGybSEZKHYids4dv9MAr9sj0oGJVWEHFwfL2sChtk=
Subject key identifier: 6B:0C:A4:70:D3:C1:59:34:EC:87:70:B6:76:03:A4:6D:22:50:A8:40
Certificate issuer: /CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
Certificate serial: 05C39D7D
Authority key identifier: AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/awykcNPBWTTsh3C2dgOkbSJQqEA.roa
Signing time: Sat 01 Jan 2022 03:55:23 +0000
ROA not before: Sat 01 Jan 2022 03:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47937
IP address blocks: 2001:678:c70::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96705917 (0x5c39d7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
Validity
Not Before: Jan 1 03:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b0ca470d3c15934ec8770b67603a46d2250a840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:4a:6c:9e:c7:38:71:60:ad:9e:b5:70:a0:
a2:1e:7b:24:f1:65:8d:a4:a2:11:9f:7a:aa:89:ba:
97:be:0b:3f:1f:09:f0:8e:1b:56:d3:39:c2:03:84:
30:ba:95:b4:3b:76:a7:9e:33:93:fa:ab:c7:60:5d:
be:f4:15:f8:4c:4d:09:89:35:d1:13:76:9c:4b:06:
70:6f:87:af:57:31:fa:d3:dd:03:7c:33:17:1f:39:
60:78:3f:0f:1e:0b:df:eb:02:ca:73:e9:36:2b:5b:
25:87:8c:dd:60:19:43:75:cd:c4:33:58:e3:c3:27:
02:34:a7:96:52:18:bd:83:78:6f:b2:6c:6c:cc:a6:
30:b9:ff:51:c7:c4:d3:e3:4a:d0:7a:e8:19:86:ba:
aa:85:47:b8:c1:68:fc:93:56:56:0a:36:67:d9:aa:
bc:99:4e:d4:bd:e3:1e:97:b0:3c:b2:78:02:8f:fb:
59:7a:f0:b8:f0:31:11:ac:f1:ae:35:61:44:ca:b3:
d5:a2:ea:41:6b:e9:fb:c1:65:8e:c6:e6:65:f1:1b:
54:99:62:9a:6f:f5:c6:cf:d2:3a:17:b7:e4:41:69:
63:ac:f8:74:11:b6:ed:69:3f:fd:65:ad:1e:9d:4c:
76:0d:85:e2:98:0f:c9:f4:a3:0f:aa:63:3e:d2:f2:
3c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0C:A4:70:D3:C1:59:34:EC:87:70:B6:76:03:A4:6D:22:50:A8:40
X509v3 Authority Key Identifier:
keyid:AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/awykcNPBWTTsh3C2dgOkbSJQqEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c70::/48
Signature Algorithm: sha256WithRSAEncryption
06:94:ac:75:c5:e8:3d:f2:04:d2:cc:bd:3a:78:da:c1:a0:28:
85:4f:d1:2f:e6:1f:21:2b:0b:0c:13:9e:39:fa:c1:14:f2:a8:
35:d3:8b:4d:4a:54:cc:cc:fc:43:d8:7f:48:12:2b:5c:ae:af:
63:37:61:19:b4:76:64:6b:50:8e:53:cb:42:30:9b:aa:9b:64:
1f:c2:92:aa:ef:82:82:27:cb:89:24:a0:5a:64:18:7f:8d:0f:
43:e3:47:08:80:8f:b4:23:00:11:51:61:f4:5d:af:83:ff:c0:
76:88:f5:b0:9a:4e:d9:28:ea:b4:95:0f:c9:70:67:cc:ae:d4:
3f:3a:17:af:32:bf:b9:89:d5:80:02:be:a3:12:9a:0b:15:33:
a6:38:ec:7a:b0:9c:0d:25:5d:a5:60:d6:5a:30:ce:ec:87:41:
2e:ad:7f:6a:75:02:19:eb:3a:eb:f8:26:c1:f3:9f:72:41:7c:
b3:c3:a4:5b:6f:da:2c:ae:e8:41:0b:cd:bc:1b:ef:25:1e:fe:
aa:09:49:65:fb:29:0b:ec:3d:3f:2e:37:26:92:ac:5d:65:43:
cc:26:15:bb:d5:18:78:02:ef:09:a4:ba:4e:bd:c2:e0:19:f3:
b5:f4:9f:29:72:2d:d9:4c:e4:c7:2f:22:d0:a0:e6:95:93:1d:
cb:5a:91:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:58 2024 by rpki-client on console-ams.rpki-client.org