Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/F4nMcP4Frf8k7-MJ0fyNa8CAZ4E.roa
File: F4nMcP4Frf8k7-MJ0fyNa8CAZ4E.roa (raw, json)
Hash identifier: 2Tugi77O5DkTznw/zBEwIuMFHMV4p8DCHskrO3jFwJY=
Subject key identifier: 17:89:CC:70:FE:05:AD:FF:24:EF:E3:09:D1:FC:8D:6B:C0:80:67:81
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 049DE2
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/F4nMcP4Frf8k7-MJ0fyNa8CAZ4E.roa
Signing time: Wed 09 Mar 2022 20:14:29 +0000
ROA not before: Wed 09 Mar 2022 20:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49910
IP address blocks: 2a12:9940::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302562 (0x49de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Mar 9 20:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1789cc70fe05adff24efe309d1fc8d6bc0806781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:f0:25:16:a2:83:e1:c0:26:76:35:27:3c:
1b:eb:87:0d:df:0b:82:b1:8d:37:71:cf:a9:8b:69:
bd:71:9c:aa:e8:14:0d:c7:7f:42:11:50:d9:54:cc:
22:53:b6:41:83:b8:79:94:02:5e:04:b0:2e:2b:fc:
59:4a:ac:c4:aa:cd:80:b0:67:db:b7:34:2f:88:22:
3d:93:a0:c8:61:97:4b:6b:57:d6:ec:81:7d:3a:f9:
ad:18:f9:9b:b8:56:5e:62:4a:0e:6d:f7:67:00:b2:
63:ac:98:09:2a:a7:67:e8:29:5e:d7:5c:73:8c:57:
57:fd:ef:c8:43:69:9f:98:6b:14:ff:8c:6d:48:2d:
19:af:15:24:4f:3e:28:5d:cd:55:e0:1c:f7:b9:37:
92:e4:f5:1b:96:b6:88:43:38:ab:c6:e4:7a:d7:c4:
93:30:92:b4:28:bc:7e:dc:48:11:f9:45:c2:ff:ab:
a5:50:1e:f1:60:5c:b0:03:e4:9f:12:9e:48:12:84:
32:5b:b7:8b:89:a0:65:12:d9:d9:b0:f9:d3:c4:a1:
72:76:b8:d4:5b:57:b2:82:8d:73:8c:d5:3f:74:a4:
bc:10:db:66:4c:91:97:6e:87:18:31:d7:52:5b:5d:
10:84:77:97:06:49:31:a7:a4:3a:ea:e2:07:95:d5:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:89:CC:70:FE:05:AD:FF:24:EF:E3:09:D1:FC:8D:6B:C0:80:67:81
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/F4nMcP4Frf8k7-MJ0fyNa8CAZ4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9940::/29
Signature Algorithm: sha256WithRSAEncryption
53:57:85:55:aa:58:39:0a:77:9e:ac:d6:7c:63:87:dc:a4:c9:
c0:60:57:78:5f:ca:5c:da:1d:fc:58:ed:cf:40:16:01:0f:8b:
d9:04:00:00:4a:05:1b:91:2d:e0:cd:40:b1:72:48:fb:ea:89:
2d:b6:06:99:4d:2c:48:c6:0b:a4:ef:ab:75:1f:1e:9a:d5:a1:
7f:12:ff:19:df:d9:67:6d:51:a3:c7:9d:df:58:44:da:6f:12:
70:80:76:1a:3c:1c:85:71:3b:05:f3:ee:1b:01:2d:71:41:ca:
f0:1e:b2:b9:27:51:a2:f0:ca:5c:2d:24:18:d6:0e:a8:bd:3c:
58:e9:27:89:7c:c3:2e:d4:2d:77:15:a9:52:09:bc:b2:a6:90:
44:00:ae:75:48:cb:aa:a3:11:27:e8:29:e4:ee:90:a1:05:86:
a2:f2:bd:60:6b:e1:15:37:30:1a:d5:2a:31:87:41:b9:96:e1:
0d:7d:88:b6:9c:3d:16:e9:af:c5:75:8c:31:17:db:2b:81:3f:
0d:b1:f6:34:ea:b4:d3:15:a2:dc:b9:5d:f9:e3:a9:ea:57:d5:
08:3a:d3:77:81:ca:e9:71:43:a7:6b:b3:bc:0c:e8:92:33:a8:
ad:14:f3:2b:68:93:d2:4d:aa:d5:26:3d:88:7f:5d:a1:80:1a:
48:83:5a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:48 2024 by rpki-client on console-fra.rpki-client.org