Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/HvKNt3im_d6WE7TzA1grfZMuOOs.roa
File: HvKNt3im_d6WE7TzA1grfZMuOOs.roa (raw, json)
Hash identifier: UHJkOoQbn/w00nMYbMZ9iPv79wRNZL9bAyHFk1cn5t4=
Subject key identifier: 1E:F2:8D:B7:78:A6:FD:DE:96:13:B4:F3:03:58:2B:7D:93:2E:38:EB
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 033BE1
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/HvKNt3im_d6WE7TzA1grfZMuOOs.roa
Signing time: Fri 17 Jun 2022 15:17:50 +0000
ROA not before: Fri 17 Jun 2022 15:17:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:2e00::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211937 (0x33be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jun 17 15:17:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ef28db778a6fdde9613b4f303582b7d932e38eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6e:d6:56:73:1d:fd:7a:56:3c:f1:6a:d8:dc:
65:e1:6a:f6:55:98:13:d2:b7:6a:c6:5b:53:b0:36:
d5:46:93:2d:6f:2f:07:c1:cd:fc:70:f1:1c:5b:c7:
b5:c4:af:db:f3:02:32:aa:54:96:ca:bb:eb:cd:0d:
1d:a7:35:2d:d1:77:91:e7:2a:3c:9e:8e:68:12:df:
5b:2e:8a:b5:28:88:2d:2f:b5:bc:cb:84:93:7f:71:
9a:44:05:db:ef:d3:8c:4e:24:14:2b:44:bd:32:a9:
a9:05:59:7b:78:bf:83:a4:da:79:54:7e:02:bb:f7:
f7:b7:2b:14:9c:0f:69:39:ed:b1:e4:c1:ad:b2:5e:
76:e4:11:a1:92:2e:90:53:ca:f3:60:bc:0e:a8:d0:
aa:e5:08:88:64:7d:03:b8:d7:d9:ae:57:83:02:65:
65:66:f5:c8:45:87:41:46:1c:6b:4e:3c:fd:f9:dc:
c9:76:10:4b:83:c6:3e:fa:e5:82:f7:f7:09:08:53:
0e:3f:a6:a7:16:31:6b:ea:32:1b:18:3e:9b:fb:63:
4e:fd:61:d8:7f:00:64:8a:a1:5c:9b:41:8d:43:85:
77:bd:42:b4:88:c1:15:73:7c:62:08:aa:c9:4d:d8:
04:83:94:6f:ef:b6:2b:ad:10:e8:31:11:9e:46:13:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F2:8D:B7:78:A6:FD:DE:96:13:B4:F3:03:58:2B:7D:93:2E:38:EB
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/HvKNt3im_d6WE7TzA1grfZMuOOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2e00::/36
Signature Algorithm: sha256WithRSAEncryption
39:d6:66:36:68:9c:e3:e2:c6:31:b2:af:c0:64:5f:f2:88:29:
85:c9:85:38:ce:65:fd:82:b5:a8:4a:2f:41:f1:2d:95:80:97:
13:95:33:29:b5:63:c3:5c:f8:9a:0e:d6:85:0d:a1:20:bf:58:
bd:da:73:e5:8c:6d:1e:93:c8:44:c4:9a:aa:1d:bc:c6:9b:a1:
ae:26:eb:5e:58:e3:f1:92:79:ec:6f:eb:a3:45:3e:b5:1f:ce:
60:1d:c3:2a:01:dc:b8:81:6b:c3:46:fb:fc:32:66:cc:a1:fe:
a7:f5:a7:fc:d0:6b:67:9b:5a:f7:f2:a1:cc:d9:7c:90:38:13:
56:66:8e:20:92:7e:df:43:f5:c3:be:67:75:54:b2:87:19:b0:
9d:7a:3c:d2:56:80:a0:37:c3:03:a0:7f:a5:8d:47:b9:9f:da:
c2:3a:2f:c3:b8:fd:00:cc:2e:8b:e0:2a:08:25:24:fa:63:50:
da:20:b4:85:df:77:4f:82:7a:a1:9d:28:7b:d3:0c:a2:36:c4:
b9:e5:8c:5d:a3:de:2a:27:35:d5:ce:26:82:54:c5:3c:6a:25:
33:e8:9a:7c:aa:10:c2:37:30:0e:54:11:d2:d5:8f:e5:38:8a:
01:eb:49:d9:a1:51:c7:d8:63:d8:49:d9:6a:41:d2:13:24:6f:
8f:e5:1b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:37 2024 by rpki-client on console-ams.rpki-client.org