Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/7r6jDVe_RHmnMuLygGLWLgyRz6k.roa
File: 7r6jDVe_RHmnMuLygGLWLgyRz6k.roa (raw, json)
Hash identifier: cikaKQX1mmz1bdDlNZZXxYyqO/wl52aNdVtgvjTCe0A=
Subject key identifier: EE:BE:A3:0D:57:BF:44:79:A7:32:E2:F2:80:62:D6:2E:0C:91:CF:A9
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 70B6C1
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/7r6jDVe_RHmnMuLygGLWLgyRz6k.roa
Signing time: Sat 01 Jan 2022 05:04:27 +0000
ROA not before: Sat 01 Jan 2022 05:04:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211586
IP address blocks: 2001:678:f18::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7386817 (0x70b6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Jan 1 05:04:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eebea30d57bf4479a732e2f28062d62e0c91cfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:65:31:fd:bb:34:7d:36:3b:29:dd:19:d4:
9f:1c:73:b5:c8:6b:c5:3b:b6:a2:f2:1e:2e:06:21:
12:ce:de:d6:73:a7:ab:24:53:cb:b8:d1:ec:13:79:
0c:25:6b:41:d2:57:a5:b1:31:55:d9:ac:a0:f4:d9:
16:5e:9a:b0:d7:2d:9e:50:de:db:a3:ab:89:ec:70:
64:f1:46:73:de:63:87:af:d9:91:fb:8a:de:2e:d4:
64:bc:ab:49:b9:d2:e6:53:ba:93:7b:32:dd:02:98:
d6:bb:62:ea:32:8a:66:ad:86:1f:c6:af:d8:b3:18:
07:c2:ba:09:f7:23:0b:5e:35:36:de:7a:4b:0a:82:
d9:90:70:83:06:cd:9b:39:5f:f5:54:dc:8b:73:22:
a0:12:81:88:c5:8c:85:5a:06:88:72:1a:7f:8c:18:
4d:65:2f:34:90:f6:3d:ce:2a:db:07:e3:8d:ab:70:
64:83:7f:74:ce:48:8e:29:6a:18:97:51:94:6e:f4:
36:d5:62:f3:1d:dd:29:e8:aa:f8:a6:49:f7:a0:c8:
22:7a:75:e2:a6:73:1a:76:8f:49:2e:a0:cf:23:a0:
32:4e:9e:0d:3b:05:c6:84:53:dc:e1:b3:31:7b:30:
c9:4a:8d:68:e4:67:7a:3f:ce:eb:83:08:b3:5d:ea:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BE:A3:0D:57:BF:44:79:A7:32:E2:F2:80:62:D6:2E:0C:91:CF:A9
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/7r6jDVe_RHmnMuLygGLWLgyRz6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f18::/48
Signature Algorithm: sha256WithRSAEncryption
95:37:af:29:77:69:96:b7:eb:15:81:02:f1:df:ed:62:d6:10:
67:5e:92:b9:49:34:11:e1:3b:19:11:77:99:14:8e:4f:2b:71:
87:4b:4a:4c:21:b7:d6:7e:f2:c0:db:15:f7:c7:fd:8a:7f:1e:
59:7e:8c:14:f2:4f:18:3b:08:4f:22:06:60:4d:34:05:e3:5d:
70:d5:33:e0:59:54:a7:3c:15:63:24:6d:be:e5:7b:f3:94:36:
50:8f:50:e1:d3:e6:fb:c6:4e:e6:e7:a6:53:43:5c:30:82:d7:
d5:c7:39:d8:e9:03:fa:20:60:c5:53:c4:41:84:59:9e:14:c3:
0b:f1:bb:db:96:9d:51:c3:aa:b4:61:de:ba:b3:ee:1a:3e:09:
a8:aa:1b:c8:05:71:a9:a8:98:f8:c3:5c:9b:fa:ca:23:35:49:
ec:3a:9f:9d:c6:52:b4:c0:12:56:62:45:07:12:0c:41:b5:e9:
10:07:ab:6f:50:b6:a7:e6:5e:0f:10:7c:5b:cc:15:77:ae:7d:
8e:68:70:d4:14:e3:34:cb:db:57:95:ac:43:a5:75:e4:ba:35:
38:c3:6d:7c:e0:af:f2:d7:88:a1:5d:51:d3:34:57:97:87:0c:
12:00:b2:fa:eb:63:a6:f9:88:78:37:36:5f:d1:92:b8:ee:39:
03:3f:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:05 2024 by rpki-client on console-fra.rpki-client.org