Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/6SMHKgPuiaRQS4-RaRiKmHiLNis.roa
File: 6SMHKgPuiaRQS4-RaRiKmHiLNis.roa (raw, json)
Hash identifier: ALOgFkIGvN5oAftWCtnAUhrmTG9GwoXcVW3OP5ho5UA=
Subject key identifier: E9:23:07:2A:03:EE:89:A4:50:4B:8F:91:69:18:8A:98:78:8B:36:2B
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 018477014DEE97AA4731F4F06D892E4F2F52
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/6SMHKgPuiaRQS4-RaRiKmHiLNis.roa
Signing time: Mon 14 Nov 2022 16:38:04 +0000
ROA not before: Mon 14 Nov 2022 16:38:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204773
IP address blocks: 2a13:3000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:77:01:4d:ee:97:aa:47:31:f4:f0:6d:89:2e:4f:2f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Nov 14 16:38:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e923072a03ee89a4504b8f9169188a98788b362b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:b3:20:6b:5b:44:a8:65:4b:5c:09:50:36:
d5:e8:1a:61:a4:fb:96:1a:f1:d1:09:22:00:e5:e0:
0a:7d:1d:14:08:11:83:60:aa:76:20:7f:8c:cb:82:
d0:71:34:a8:cf:23:fb:25:14:e3:44:5d:ca:2b:7e:
55:79:bf:3a:7f:a6:9a:1b:32:31:af:b1:fa:68:d8:
5a:5b:34:c9:b8:83:33:fc:b5:75:b0:0b:a0:51:f0:
3b:e9:8c:79:ab:1c:51:84:1d:d2:47:8f:20:cd:e2:
2a:b9:7d:dc:52:c3:5c:50:09:75:b2:40:d6:ae:fe:
18:95:8c:6c:10:e8:c0:c5:1b:3d:02:96:c5:a0:7f:
7f:c3:29:34:30:80:5b:5c:ac:f2:c6:db:d3:3b:4e:
67:9b:4f:65:d6:5e:c2:9f:57:87:b8:be:8e:a6:5b:
eb:68:22:49:14:0a:62:45:13:36:b4:23:be:6c:cd:
9c:c7:33:d9:a9:d2:14:d2:d4:9e:79:b1:62:01:80:
2b:6d:c9:76:9b:15:05:3d:8e:49:a8:ac:86:77:15:
b3:ca:04:cd:b6:7b:cf:98:7f:52:f1:91:47:03:0a:
39:43:d5:8a:b5:30:e3:12:09:4b:1f:e8:d2:7f:40:
94:1e:7b:30:ac:fd:ac:eb:8b:b2:76:3a:31:e5:03:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:23:07:2A:03:EE:89:A4:50:4B:8F:91:69:18:8A:98:78:8B:36:2B
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/6SMHKgPuiaRQS4-RaRiKmHiLNis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3000::/29
Signature Algorithm: sha256WithRSAEncryption
7e:1e:27:bf:06:1e:25:54:60:b2:1e:ab:98:b3:25:eb:eb:f5:
91:29:fc:fa:1e:53:64:fc:76:43:c8:ea:ff:03:9e:58:69:4c:
c3:ef:91:34:b1:e7:29:5c:b6:93:46:92:2e:bd:e1:78:d9:f4:
f8:e1:a0:f0:72:7e:1c:da:8e:bc:d6:98:ec:eb:a4:6b:0c:34:
d6:00:4a:5c:b2:1c:e7:1d:35:31:ca:01:42:d0:81:95:9b:7c:
81:0a:6e:e8:9a:5c:eb:3c:87:20:9e:a2:22:2d:74:a1:72:38:
81:5e:8b:97:1c:0a:84:b5:b9:f7:3e:9a:5c:bd:54:91:47:5d:
40:88:f8:9a:d5:d1:05:43:db:6e:66:75:81:34:8b:ab:f5:d4:
58:88:b9:76:9e:50:aa:2e:a1:c7:49:71:8c:c4:bf:17:30:08:
61:ab:3d:c2:59:e7:ad:dd:aa:b5:e1:d2:99:f7:7e:3b:ef:ca:
aa:9a:be:b5:9d:30:62:ec:4c:48:c7:48:92:d6:1c:07:75:4a:
f1:66:b6:e2:bf:06:f6:19:f1:64:2c:45:83:d1:3c:b1:fb:61:
0b:2e:b0:58:ac:3a:56:3e:4a:6b:75:35:53:14:41:05:39:ca:
8e:5e:54:89:06:b7:09:a0:fb:e7:f2:58:b8:98:65:bb:89:1a:
e5:c0:c2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:38 2025 by rpki-client