Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/QkmmLhsMj-_zpGCZ4okEXbVvslQ.roa
File: QkmmLhsMj-_zpGCZ4okEXbVvslQ.roa (raw, json)
Hash identifier: vmhKtp85Y9FPDkUNYyKvT4xOaV8bKQCbZ1T4kiFfVzU=
Subject key identifier: 42:49:A6:2E:1B:0C:8F:EF:F3:A4:60:99:E2:89:04:5D:B5:6F:B2:54
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 018E3BEE
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/QkmmLhsMj-_zpGCZ4okEXbVvslQ.roa
Signing time: Mon 04 Jul 2022 12:08:25 +0000
ROA not before: Mon 04 Jul 2022 12:08:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209768
IP address blocks: 2a12:5844:1212::/48 maxlen: 48
2a12:5840:1f2::/48 maxlen: 48
2a12:5844:100::/48 maxlen: 48
2a12:5840:1f0::/48 maxlen: 48
2a12:5840:1f1::/48 maxlen: 48
2a12:5840:2111::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26098670 (0x18e3bee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jul 4 12:08:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4249a62e1b0c8feff3a46099e289045db56fb254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:c7:14:ff:49:7d:6b:c7:67:02:84:78:c8:
3b:e5:da:8a:e8:1d:fb:a3:47:b7:0b:e8:f1:c7:7c:
75:6a:16:57:ca:d8:03:e5:3e:10:4c:94:a5:ac:0a:
a6:e0:0b:70:44:ec:c4:20:f6:cb:73:b3:19:d2:aa:
b6:73:dd:a3:5b:ec:e7:59:e7:c6:2e:b2:47:ed:45:
6d:00:6e:32:9e:7f:29:a0:1c:24:62:7d:c0:43:78:
4a:30:25:1a:bf:d9:20:f1:1b:3b:ad:20:fe:98:4d:
ed:8c:77:23:d2:55:03:2f:f5:8e:7e:78:07:32:f8:
8a:ba:06:ef:4f:61:19:d0:be:2a:94:c6:20:2a:ad:
8b:a4:d2:dd:08:b9:3f:b5:45:16:7f:b0:6d:0a:51:
3d:3a:db:2c:1b:73:03:79:89:db:94:8b:e8:14:1c:
bf:64:05:8f:99:ff:12:08:9d:d4:c2:f4:36:c7:7c:
9a:9e:1b:a0:cf:4a:f4:f8:43:b9:8b:36:e4:1d:94:
1d:fa:bd:a1:b4:c1:4d:11:a4:22:88:91:46:c1:c9:
2f:9e:d9:fd:f0:9d:f7:a0:17:85:d7:ef:1e:73:28:
17:1f:f4:b6:16:6f:35:eb:af:42:3a:32:2a:2c:53:
24:82:52:b7:4f:a6:7f:dc:02:b5:44:0b:e6:32:15:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:49:A6:2E:1B:0C:8F:EF:F3:A4:60:99:E2:89:04:5D:B5:6F:B2:54
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/QkmmLhsMj-_zpGCZ4okEXbVvslQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5840:1f0::-2a12:5840:1f2:ffff:ffff:ffff:ffff:ffff
2a12:5840:2111::/48
2a12:5844:100::/48
2a12:5844:1212::/48
Signature Algorithm: sha256WithRSAEncryption
55:c7:f6:68:b3:be:67:1f:2c:7f:be:8f:06:fa:cc:f4:53:34:
8d:1b:f9:d9:4e:3b:6e:a7:44:23:22:33:5a:e3:04:e5:59:27:
99:ea:a1:0d:0e:7b:a5:6d:b1:44:ec:13:cc:5c:63:99:27:61:
77:5f:a3:9d:6a:c8:53:b1:2f:44:6c:bb:a7:21:e8:1a:46:e7:
7e:72:c5:ea:ee:db:03:28:f8:fb:a4:2b:6a:0e:84:72:0c:7c:
1e:c7:14:81:bc:3f:ef:47:ce:2c:72:94:ea:07:2a:b6:3a:dd:
8a:1d:3d:49:fc:b1:ad:c6:63:f7:e2:08:6f:84:b6:83:22:a0:
5f:8e:54:06:cd:17:5e:36:08:ef:6b:68:fe:7a:6f:b3:f3:f4:
8b:4d:e1:9c:fa:c3:53:c0:da:dd:bc:57:9c:e6:97:c5:de:de:
f3:0a:6f:9f:10:7f:ee:e9:bc:52:cc:bf:82:e0:57:35:36:13:
b3:d9:04:3a:06:9c:6c:7f:87:94:e5:44:26:46:7a:43:83:82:
90:8c:84:2e:a8:16:75:52:1b:cb:3a:e1:73:38:6e:4e:63:e1:
55:42:90:36:f7:ee:42:17:77:d5:0b:20:a1:1b:1e:2c:f1:2c:
66:b7:4a:bd:20:71:7e:fb:d4:1a:d3:ff:eb:da:08:5e:69:b3:
20:24:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:35 2024 by rpki-client on console-fra.rpki-client.org