Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/jEBEeecy76WbYcw3ynYDws0mpEY.roa
File: jEBEeecy76WbYcw3ynYDws0mpEY.roa (raw, json)
Hash identifier: MPaASRDdG+9D6Eo3WROkVpoOrxLSocILUUgz+ghGde4=
Subject key identifier: 8C:40:44:79:E7:32:EF:A5:9B:61:CC:37:CA:76:03:C2:CD:26:A4:46
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 0100F143
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/jEBEeecy76WbYcw3ynYDws0mpEY.roa
Signing time: Wed 13 Apr 2022 13:24:10 +0000
ROA not before: Wed 13 Apr 2022 13:24:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211398
IP address blocks: 2001:678:f30::/48 maxlen: 48
2a12:4940::/32 maxlen: 48
2a12:4946:46::/48 maxlen: 48
2a12:4946:3005::/48 maxlen: 48
2a12:4946:1655::/48 maxlen: 48
2a12:4946:1650::/48 maxlen: 48
2a12:4946:1900::/48 maxlen: 48
2a12:4946:1800::/48 maxlen: 48
2a12:4946:1700::/48 maxlen: 48
2a12:4946:1600::/48 maxlen: 48
2a12:4942::/31 maxlen: 48
2a12:4946:6960::/44 maxlen: 48
2a12:4946:1658::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16838979 (0x100f143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Apr 13 13:24:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c404479e732efa59b61cc37ca7603c2cd26a446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:19:86:ca:32:8f:7e:b5:b1:b7:52:50:1f:e9:
21:a8:df:61:36:e1:b5:45:ad:c4:87:4d:36:1f:a6:
b2:3e:59:aa:08:fc:4e:b1:de:6e:0d:09:aa:7a:bf:
26:12:47:f6:b9:52:1a:6b:8a:9f:40:dc:1a:21:d2:
13:8d:0a:4d:29:53:13:6e:6c:c2:cf:ab:a0:29:21:
b0:d3:72:d1:39:95:9d:16:c0:05:b7:06:8d:80:26:
73:01:8a:44:67:72:2b:06:ca:e7:17:cd:e4:d6:02:
c1:f0:c4:e4:e4:61:51:c1:66:c3:d9:6e:62:fe:4a:
9b:76:a2:ee:f1:53:e4:01:0e:50:0b:bf:7a:e3:f3:
38:dd:e8:cb:af:16:00:e9:74:cc:ba:bd:10:d2:0b:
83:18:09:7e:82:a2:61:14:5f:c9:89:de:e3:8e:eb:
c9:c9:a1:59:d3:a8:75:24:90:46:8e:c1:5e:fa:08:
7d:48:cf:6a:b9:61:7a:60:39:9d:77:f5:c9:42:da:
c4:5e:ae:49:83:be:75:d4:45:10:5c:57:46:65:ec:
57:71:b0:c3:8a:58:d5:ed:7a:4c:07:57:fd:16:e1:
db:35:61:fd:82:f1:86:31:d2:57:d0:aa:d7:be:a1:
73:94:c6:bc:08:28:d9:3b:1d:5e:c1:9f:7e:8d:b9:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:40:44:79:E7:32:EF:A5:9B:61:CC:37:CA:76:03:C2:CD:26:A4:46
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/jEBEeecy76WbYcw3ynYDws0mpEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f30::/48
2a12:4940::/32
2a12:4942::/31
2a12:4946:46::/48
2a12:4946:1600::/48
2a12:4946:1650::/48
2a12:4946:1655::/48
2a12:4946:1658::/48
2a12:4946:1700::/48
2a12:4946:1800::/48
2a12:4946:1900::/48
2a12:4946:3005::/48
2a12:4946:6960::/44
Signature Algorithm: sha256WithRSAEncryption
21:ed:80:95:a3:2b:e1:8f:27:44:98:58:d8:cc:41:a9:bf:3a:
1a:e9:9f:bc:4a:3b:d9:88:0a:1d:a5:c4:d7:32:4c:bd:94:a9:
c7:3b:72:ff:f8:12:72:69:6a:92:43:1a:5c:b1:a1:5e:74:9b:
50:f5:fc:16:1a:f3:fa:00:2e:5c:95:c3:c3:40:0d:cf:56:1c:
2e:57:79:d6:8d:28:f7:97:1e:83:d9:69:42:92:26:10:ae:c5:
47:1a:93:6c:ae:20:08:3a:b7:2d:59:9b:82:cd:b6:7f:b8:0e:
88:ea:b2:7e:bc:ba:41:d7:c7:14:be:fb:da:c4:09:86:09:4e:
6d:90:a1:73:75:21:a4:78:50:1d:6f:c4:ac:9d:45:68:d6:06:
34:1f:52:67:e8:0e:ff:f2:c0:1d:fa:23:e6:b8:10:d5:30:0e:
a1:7b:6d:90:e0:58:3c:20:bf:96:ea:11:48:57:07:3a:d2:62:
eb:bb:c4:92:31:b7:e2:16:70:e7:49:07:e8:01:e7:c4:e6:e6:
37:bc:39:21:b0:ee:3c:c2:69:15:2d:f6:77:12:58:87:b7:0e:
ec:6c:ac:cc:e7:7f:15:a0:26:ba:ac:88:75:05:3b:f8:92:50:
26:f4:8a:82:b6:c2:28:9d:19:c4:d0:a6:66:e9:32:3a:cf:29:
8e:a2:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:29 2024 by rpki-client on console-ams.rpki-client.org