Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/De_e-4rmO8AymhPcRpTNxEg4WDY.roa
File: De_e-4rmO8AymhPcRpTNxEg4WDY.roa (raw, json)
Hash identifier: md4fo9NgHNsFZ26KwAmYUCXapTJEDqnGrPxKw2fDudU=
Subject key identifier: 0D:EF:DE:FB:8A:E6:3B:C0:32:9A:13:DC:46:94:CD:C4:48:38:58:36
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0181E53500C6A2085F20FC568E343AF17793
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/De_e-4rmO8AymhPcRpTNxEg4WDY.roa
Signing time: Sat 09 Jul 2022 23:04:24 +0000
ROA not before: Sat 09 Jul 2022 23:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210661
IP address blocks: 2a05:1e40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e5:35:00:c6:a2:08:5f:20:fc:56:8e:34:3a:f1:77:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jul 9 23:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0defdefb8ae63bc0329a13dc4694cdc448385836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:99:37:a1:07:f0:7a:d9:2e:be:4c:71:a0:
09:f7:1a:5b:d2:ea:11:a6:f2:f9:c6:f5:bc:24:16:
43:52:36:86:4f:e3:96:cb:13:37:ff:16:2f:d9:b1:
18:7c:d3:57:5f:9a:e8:2e:36:90:cb:c4:1d:7d:80:
62:6f:d2:e2:e9:61:2e:b1:3b:18:bd:63:18:f8:f4:
5f:ff:27:d9:ff:ef:eb:61:61:3e:2a:70:2a:a2:7d:
d3:0f:bc:0a:13:22:e5:58:99:79:68:fc:be:e2:cf:
8d:fb:09:a0:e5:3e:d4:29:4d:b2:82:b8:c0:6e:55:
a3:25:34:f9:5c:c0:48:0e:24:db:6c:ec:e3:de:55:
26:db:38:d6:fa:8e:a1:72:05:7c:77:f9:60:00:72:
b8:36:43:65:bb:a2:3b:f6:f0:23:f1:10:e9:f3:57:
c0:83:9f:05:7b:cb:2a:fa:85:21:72:6c:5b:6e:0f:
0e:e9:b3:19:24:68:3d:33:08:c5:e8:fe:64:7f:bf:
6d:b3:90:29:6f:3d:ae:d8:84:fe:08:22:4b:ed:5f:
3e:20:cf:97:52:56:b0:ca:98:db:17:ae:65:37:52:
02:59:42:64:82:9a:cb:e2:6b:ea:08:9a:19:05:0f:
a2:b0:f4:12:20:47:4d:0d:b0:47:48:bd:32:f3:e1:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EF:DE:FB:8A:E6:3B:C0:32:9A:13:DC:46:94:CD:C4:48:38:58:36
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/De_e-4rmO8AymhPcRpTNxEg4WDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1e40::/29
Signature Algorithm: sha256WithRSAEncryption
93:d6:47:f1:3a:c0:b9:51:a5:08:32:da:2b:7b:22:01:72:70:
d9:7c:7b:1f:63:87:13:ab:33:36:75:f7:99:e2:0e:3d:17:86:
79:05:66:23:fa:bf:00:40:c1:90:6d:28:df:42:91:6c:8d:fe:
62:e2:7b:27:a1:e9:19:a1:30:5a:53:c0:8e:35:6c:e0:b1:b7:
d6:02:38:1b:7e:21:05:df:5e:08:71:89:b2:f8:7c:ed:99:22:
e4:90:2e:ec:32:ee:76:34:f3:e8:54:f5:c8:c2:04:21:f5:d4:
b4:5d:61:b4:d2:4d:1b:29:b7:a6:03:5b:ed:27:05:7f:a1:5f:
9a:8d:69:71:e8:d7:f1:29:f1:cb:d1:d6:63:8b:3c:32:14:90:
56:f5:1d:59:41:d5:ba:2d:de:31:86:52:44:1a:51:37:ab:b8:
6c:71:70:54:91:7e:28:8b:7b:dc:aa:b5:86:03:6a:1b:d2:3d:
2d:89:bb:ac:e0:5e:1e:1d:84:5d:76:7b:a8:d1:90:04:50:1d:
8b:33:0d:8b:80:48:ba:18:41:2b:f1:7c:33:79:e1:a1:10:e0:
98:6c:37:3a:b8:ec:98:6b:f5:94:8d:70:a5:88:dc:4a:8d:2b:
52:e1:4c:01:94:8c:3a:6c:e7:04:c1:2f:16:5e:54:ca:bd:7f:
29:f6:d3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org