Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/2L6aAPiejMDpu0bgblhYOQvetAU.roa
File: 2L6aAPiejMDpu0bgblhYOQvetAU.roa (raw, json)
Hash identifier: rlXf9cpCXowsM1YpqdF9Wl+g6fs46pzEF3ikUJTyq+g=
Subject key identifier: D8:BE:9A:00:F8:9E:8C:C0:E9:BB:46:E0:6E:58:58:39:0B:DE:B4:05
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 1041EB
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/2L6aAPiejMDpu0bgblhYOQvetAU.roa
Signing time: Wed 19 Jan 2022 14:04:02 +0000
ROA not before: Wed 19 Jan 2022 14:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209768
IP address blocks: 2a12:5844::/30 maxlen: 30
2a12:5840:1f1::/48 maxlen: 48
2a12:5840:2111::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1065451 (0x1041eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jan 19 14:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8be9a00f89e8cc0e9bb46e06e5858390bdeb405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:d8:76:02:d8:c4:50:88:40:bd:31:e2:70:
2e:35:18:20:11:4d:90:e5:54:67:22:91:f7:65:04:
28:bb:1a:94:48:0a:9e:b1:fd:f3:03:ae:ae:94:7f:
77:72:39:94:e8:64:45:22:3a:de:69:70:62:7b:62:
29:4f:e9:b0:ed:33:d3:ca:14:e0:47:93:72:99:a3:
75:27:b0:c9:3e:06:3b:33:7c:4e:91:9a:e6:21:d0:
35:41:84:38:43:95:ab:2f:5e:94:93:60:69:a9:1b:
ed:f2:f7:e7:d3:01:7a:3f:05:fc:06:ba:33:05:cc:
d9:60:6d:22:a2:2f:2c:6e:ce:e9:bc:27:4c:b4:81:
9b:1c:62:74:28:d5:5c:72:c3:4a:6c:f7:37:c0:e2:
47:d2:49:3c:0f:95:35:0a:9e:50:83:0b:c7:88:7e:
0e:4e:59:c5:22:e0:5f:cc:53:9e:68:6b:9e:80:68:
bc:16:94:eb:61:0d:41:81:ba:97:a0:9b:a0:75:3f:
1c:aa:e8:25:85:5b:6a:fe:cf:59:ec:92:8f:8e:ac:
6d:7c:a7:1b:60:d7:6a:a0:92:21:fc:26:61:b7:2c:
36:4b:58:4d:1e:ff:60:fe:e5:19:6c:1a:24:2e:19:
d5:e7:13:32:57:5a:42:96:2e:31:ba:0e:80:b6:bf:
fe:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BE:9A:00:F8:9E:8C:C0:E9:BB:46:E0:6E:58:58:39:0B:DE:B4:05
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/2L6aAPiejMDpu0bgblhYOQvetAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5840:1f1::/48
2a12:5840:2111::/48
2a12:5844::/30
Signature Algorithm: sha256WithRSAEncryption
13:60:2b:c2:6f:ab:09:7f:4b:24:dc:4b:bc:9a:f5:50:c3:b4:
54:6c:a8:be:e8:bc:23:cd:42:95:df:bd:ff:7a:7d:5b:a4:64:
67:c7:4a:af:72:a1:0a:d7:eb:f4:28:30:bf:ba:44:67:83:08:
12:c0:52:86:52:e8:02:31:c9:75:bb:23:ad:29:b1:16:98:60:
9b:c1:65:57:19:b8:53:06:77:34:17:e9:fb:0c:24:9a:b7:e3:
e5:14:43:23:84:a6:77:39:cb:9c:d4:b5:2d:fb:45:f5:e8:b9:
58:10:3a:ea:dd:d0:0f:d8:96:72:9b:a3:3c:49:eb:38:6d:03:
70:fe:3d:db:0c:b5:44:0f:50:66:d0:b7:8c:38:d6:f7:13:68:
cc:54:22:07:68:20:dd:c2:cf:23:83:b7:85:c4:bb:e5:03:59:
d8:3f:e3:8b:29:9a:78:6b:2d:90:21:1b:a4:c3:2c:60:8c:b1:
86:c2:7d:25:4d:9f:83:a7:bd:8f:df:50:26:54:bb:1a:13:35:
ec:95:b5:77:bb:32:e6:6b:91:79:e2:22:69:07:2e:85:d1:b0:
37:98:4e:58:ab:5b:84:7c:06:18:60:43:0c:0c:19:32:62:4f:
0b:18:89:4f:4d:7a:d4:fa:ee:67:86:da:00:8c:6e:d6:ec:e9:
a6:87:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:36 2024 by rpki-client on console-ams.rpki-client.org