Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/qi-mz7u1GsQeo1ZSIjCzU8FzqgI.roa
File: qi-mz7u1GsQeo1ZSIjCzU8FzqgI.roa (raw, json)
Hash identifier: pcXNf5zeOPW4VGg3d7hY2CKsk8/cNT3y2GNrjJ52Vb0=
Subject key identifier: AA:2F:A6:CF:BB:B5:1A:C4:1E:A3:56:52:22:30:B3:53:C1:73:AA:02
Certificate issuer: /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial: 18D13858
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/qi-mz7u1GsQeo1ZSIjCzU8FzqgI.roa
Signing time: Sat 01 Jan 2022 08:02:51 +0000
ROA not before: Sat 01 Jan 2022 08:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1132
IP address blocks: 2001:67c:2c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416364632 (0x18d13858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Validity
Not Before: Jan 1 08:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa2fa6cfbbb51ac41ea356522230b353c173aa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9d:1c:1e:1c:91:19:79:27:51:3d:33:cb:11:
cd:96:17:c6:71:1e:f1:71:ad:5a:e3:4b:7d:24:e1:
59:ee:1b:05:18:f7:1b:e5:86:ee:45:68:0b:de:e6:
fa:cd:96:d3:95:1e:1e:a1:d2:85:51:c0:15:8b:35:
bc:4e:d7:51:9a:73:84:b8:4a:50:dd:97:9f:ec:5f:
f3:d8:63:91:20:96:8e:5c:22:dc:0b:41:ff:e9:94:
ee:4d:b1:75:ae:44:77:25:67:c8:b7:68:eb:bf:96:
72:99:f8:f8:33:36:55:3d:3f:63:50:42:d3:68:f1:
8e:e7:75:a2:49:e5:a8:9f:4f:cd:dd:0d:e5:8b:f4:
6f:38:18:7f:78:63:91:bd:1c:d2:cf:2d:51:db:a3:
f6:96:cd:b0:5e:9d:b3:3c:33:75:0f:34:3d:88:6b:
95:c5:a3:76:49:4c:13:74:3e:77:f2:f1:3b:49:72:
50:5a:1a:f3:9e:69:cc:7b:fa:5a:ef:0c:40:f8:b7:
62:b9:c8:89:a3:8a:c9:12:06:49:fd:72:44:1b:bc:
10:5f:d1:b6:99:1d:0a:78:78:0f:a2:63:9b:cd:84:
d5:fc:16:8e:60:94:33:dc:96:b9:74:61:c3:96:59:
74:1e:94:56:af:d1:ed:27:b4:95:21:36:df:11:e4:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2F:A6:CF:BB:B5:1A:C4:1E:A3:56:52:22:30:B3:53:C1:73:AA:02
X509v3 Authority Key Identifier:
keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/qi-mz7u1GsQeo1ZSIjCzU8FzqgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c::/48
Signature Algorithm: sha256WithRSAEncryption
95:57:5e:d1:6a:4b:24:9c:fb:95:04:54:df:dd:7d:cc:56:51:
cd:df:00:95:0a:9e:a3:79:af:7e:87:45:82:ce:af:c3:f5:d5:
a4:ee:f2:3a:02:9d:67:6f:d0:01:de:42:b2:84:b7:a5:fc:67:
5f:a7:76:10:bb:6b:d3:da:e7:84:86:c7:6e:a8:7c:a1:cc:80:
aa:cd:ce:3c:67:69:67:cd:82:07:97:fe:bf:ef:63:21:d1:9f:
c1:f1:22:fb:33:44:7a:89:ac:31:8f:4d:08:56:64:06:ff:15:
90:ab:33:5d:77:02:5e:40:01:94:0d:62:51:19:53:88:44:d6:
f2:f6:7c:0f:95:86:bf:2c:3f:7f:ff:96:cc:1e:76:87:f5:a0:
6d:15:7e:73:93:cc:18:d0:df:ab:bb:df:0c:c6:2a:df:46:73:
6d:9a:5a:dc:be:38:9e:02:bb:01:c6:3b:80:61:ed:35:0f:b3:
93:81:cc:72:e3:3e:a7:ec:cf:00:f0:97:41:40:8f:42:dd:d6:
a0:52:97:5e:a1:01:c4:dc:b7:45:e4:9e:28:d0:a1:8f:c9:30:
2d:24:f6:07:59:59:c7:5b:f2:c7:e0:41:ff:99:ed:e5:3a:3c:
9a:68:b4:04:49:05:fb:bd:46:87:e2:da:27:ff:33:e3:db:ab:
aa:88:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:36 2024 by rpki-client on console-ams.rpki-client.org