Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/OO9Q7ybQTd0NjXHDucYzlFhUYeM.roa
File: OO9Q7ybQTd0NjXHDucYzlFhUYeM.roa (raw, json)
Hash identifier: cjU5eL2JHHD69p8r7VCht6DnHD5RKQaRbY5AJiOnL5I=
Subject key identifier: 38:EF:50:EF:26:D0:4D:DD:0D:8D:71:C3:B9:C6:33:94:58:54:61:E3
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: C7E1CB
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/OO9Q7ybQTd0NjXHDucYzlFhUYeM.roa
Signing time: Wed 06 Apr 2022 17:33:18 +0000
ROA not before: Wed 06 Apr 2022 17:33:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212104
IP address blocks: 2a12:5844:1110::/44 maxlen: 44
2a12:5844:1111::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13099467 (0xc7e1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Apr 6 17:33:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38ef50ef26d04ddd0d8d71c3b9c63394585461e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:f7:d2:6c:aa:71:c0:40:bf:12:41:e6:b7:
83:60:c4:83:d4:2f:81:8b:93:84:52:a5:56:67:09:
78:37:4b:51:a8:9f:99:6c:36:45:f2:e3:5b:c5:bf:
d0:f0:e3:57:94:c2:c1:10:fb:9c:0b:c5:7e:47:68:
00:33:37:4a:72:1b:18:4b:78:43:f8:e5:af:09:a8:
03:dd:d8:ad:57:a4:ac:a8:85:12:3c:05:79:5d:5d:
7e:53:8f:9b:9a:71:52:26:36:dd:47:37:bd:4d:58:
82:74:c0:1b:06:24:34:61:b7:9f:77:40:1a:1a:6e:
d8:b2:52:21:76:61:19:d6:44:a6:4d:48:0e:25:c0:
5d:7d:1c:73:bb:4f:7a:dd:ab:ad:cc:55:12:cd:86:
25:68:46:a1:71:71:da:f7:d6:88:57:f1:2c:bd:16:
21:dc:7f:35:17:03:18:b9:44:1f:08:1e:3d:29:13:
53:42:f6:39:86:13:a5:ef:05:f3:be:75:88:f7:6a:
4d:c2:57:08:e2:bd:d9:f4:b9:88:2a:f9:14:c9:5d:
ec:8b:24:78:ea:1e:ca:ad:08:fd:8b:a7:c8:52:ef:
93:00:f5:51:ed:07:88:4c:db:ae:2c:56:98:73:d8:
74:15:e6:e0:7b:b9:e0:92:4b:a0:82:9c:77:39:af:
18:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EF:50:EF:26:D0:4D:DD:0D:8D:71:C3:B9:C6:33:94:58:54:61:E3
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/OO9Q7ybQTd0NjXHDucYzlFhUYeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5844:1110::/44
Signature Algorithm: sha256WithRSAEncryption
b5:28:fa:ad:5e:8a:de:7c:ee:4c:e8:5c:86:98:79:89:84:0a:
c7:20:18:88:20:e4:f5:15:b9:25:67:0f:95:1c:c2:5b:39:72:
af:bc:33:a9:a1:8c:e2:ab:58:b0:19:33:fb:5f:9f:1d:73:84:
62:88:a5:a2:f0:2b:d7:b8:3f:6f:5c:60:b8:a0:4a:b9:76:14:
b8:bd:bd:5a:65:75:8f:7c:f3:ff:eb:a5:26:9c:b4:a8:45:1a:
24:a8:17:30:a3:3e:ac:08:b5:d6:62:6c:85:5e:eb:84:ac:07:
47:a6:fd:58:67:25:f0:d0:ff:6b:9b:17:9f:cc:72:61:1e:c5:
7d:bd:a5:67:55:d5:f8:d8:49:86:c7:9d:33:60:ea:b9:10:43:
4f:fe:94:f4:69:a6:83:ab:0b:0e:b2:df:5d:af:24:65:bb:c2:
88:79:95:d9:f2:4b:cd:c3:b9:50:6a:54:0b:d2:bf:14:61:3d:
b3:93:4e:50:7e:52:61:58:57:ac:13:e8:fc:eb:2c:90:fb:0d:
2b:2b:ba:76:47:dc:b8:e3:8a:d9:54:9b:5e:03:d9:d3:6f:9f:
2d:40:2a:97:c4:d4:7d:d0:54:06:0e:0a:c6:25:6a:bd:7d:03:
f0:31:e5:ab:6d:08:a4:f5:13:67:82:1a:8a:89:fd:fe:a4:29:
3a:4d:19:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:35 2024 by rpki-client on console-fra.rpki-client.org