Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/44HeALcT1wJ0_Gx8CSBqDBylR6A.roa
File: 44HeALcT1wJ0_Gx8CSBqDBylR6A.roa (raw, json)
Hash identifier: lCl5kfuepYRvICt6LMUA1kxnTo1qV+EMEpr4bCWFKTk=
Subject key identifier: E3:81:DE:00:B7:13:D7:02:74:FC:6C:7C:09:20:6A:0C:1C:A5:47:A0
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 090A3A95
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/44HeALcT1wJ0_Gx8CSBqDBylR6A.roa
Signing time: Sat 01 Jan 2022 08:54:18 +0000
ROA not before: Sat 01 Jan 2022 08:54:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212144
IP address blocks: 2a01:64e0::/32 maxlen: 32
2a06:a640::/29 maxlen: 29
2a06:da80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151665301 (0x90a3a95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 1 08:54:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e381de00b713d70274fc6c7c09206a0c1ca547a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:6f:f4:17:0d:2f:3d:d3:d6:01:6b:67:fc:
83:a4:11:bf:d9:ab:d8:73:9f:a1:5f:6a:a9:7e:0d:
14:a2:2e:64:e5:a4:81:c5:70:00:d9:47:f8:4e:9e:
9d:24:c4:3a:26:0a:97:ee:78:a1:5b:1d:e3:b3:d8:
4c:26:ce:5c:3d:70:1a:ad:9f:6c:f6:65:35:8a:40:
22:ad:32:d2:cd:a2:06:72:5e:cb:ab:4d:c7:00:fb:
8b:7f:fe:a7:fe:47:d4:13:46:72:6d:81:32:1c:a5:
27:0f:fc:e3:20:87:bf:89:76:17:d5:95:59:1c:20:
59:2d:3e:23:9f:b6:11:d7:53:68:21:be:16:9a:4e:
af:2b:86:a3:fe:12:48:30:fb:78:84:d9:12:4c:62:
42:27:7c:69:0f:67:70:f9:f5:0e:88:97:d7:f8:b0:
20:ae:43:fc:1b:8a:b0:ac:03:e2:0d:36:19:db:86:
1b:2c:6a:8e:ed:8c:fd:32:a1:b8:30:55:92:e4:7e:
b4:0b:dd:6a:38:a5:d8:09:21:e0:cd:cd:19:a9:4a:
6e:24:88:67:41:c0:60:4a:d5:c1:ca:1e:a1:13:34:
86:cc:7e:23:0e:d4:2e:5e:d6:64:57:52:9f:9d:03:
94:71:20:2d:c3:02:f9:53:a5:d9:a5:9d:a3:7b:ae:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:81:DE:00:B7:13:D7:02:74:FC:6C:7C:09:20:6A:0C:1C:A5:47:A0
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/44HeALcT1wJ0_Gx8CSBqDBylR6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:64e0::/32
2a06:a640::/29
2a06:da80::/29
Signature Algorithm: sha256WithRSAEncryption
af:0e:05:ca:58:17:a7:d4:af:a7:8f:3e:fe:c5:91:73:cf:32:
c3:2f:7b:aa:3a:c2:bd:0d:49:4e:ef:40:60:b0:0d:89:85:80:
d9:92:3b:01:cb:4a:b7:60:42:04:6f:fd:5a:4c:47:32:5b:d9:
64:e7:3a:c8:22:d2:8b:3d:44:ec:ce:b2:f6:96:a3:f4:c5:36:
92:51:c1:35:88:37:96:7c:35:60:f5:0e:26:52:44:f9:d3:88:
b7:1d:d0:a1:9f:61:c0:e1:55:79:42:d7:b7:7c:a5:f9:eb:a3:
84:07:2e:ca:dd:ac:ff:7a:8d:43:2e:1d:f2:17:87:ad:ff:0a:
15:2c:17:3c:ca:f8:29:8a:8d:ab:e1:63:1a:c3:69:f8:44:27:
11:b7:56:ef:32:cf:c7:ce:cf:72:49:1b:51:c9:55:43:af:8d:
cc:4a:53:75:0d:af:f5:17:93:b5:fc:9b:70:e2:45:86:36:73:
c3:b5:a7:90:da:32:93:b5:eb:bb:36:61:9b:ec:10:98:d8:7b:
59:4b:bc:0f:19:42:78:56:d6:bf:c5:13:d3:0d:72:84:c7:ca:
49:36:d6:cc:fb:8b:9a:39:05:4e:fa:be:af:43:71:18:2a:9e:
79:8c:cb:0c:b3:55:f7:37:25:c2:a7:40:35:6b:ef:15:db:60:
3a:d6:53:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:30 2024 by rpki-client on console-ams.rpki-client.org