Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/n9MUU6XroSXJ0ED2mrPi-MDH4Cg.roa
File: n9MUU6XroSXJ0ED2mrPi-MDH4Cg.roa (raw, json)
Hash identifier: JAfasLNtvrXsvHJax4Z8vwTClUOOVmbEFnVVngkPuDw=
Subject key identifier: 9F:D3:14:53:A5:EB:A1:25:C9:D0:40:F6:9A:B3:E2:F8:C0:C7:E0:28
Certificate issuer: /CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Certificate serial: 021E69D8
Authority key identifier: FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/n9MUU6XroSXJ0ED2mrPi-MDH4Cg.roa
Signing time: Wed 23 Feb 2022 13:20:09 +0000
ROA not before: Wed 23 Feb 2022 13:20:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 2a11:2800::/48 maxlen: 48
2a11:2800:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35547608 (0x21e69d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Validity
Not Before: Feb 23 13:20:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fd31453a5eba125c9d040f69ab3e2f8c0c7e028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:d7:e8:89:88:fc:c3:5c:6d:a2:70:b8:07:
72:96:98:8d:de:c1:a0:3d:4c:2f:12:cf:79:f3:8d:
ec:ee:32:ce:dc:f4:89:27:ed:a0:6f:aa:ff:cb:a2:
6d:19:52:45:1a:37:ce:5a:5e:6f:da:f1:1d:a8:6a:
be:4d:da:82:79:5e:a1:ab:d5:c7:33:3c:58:9f:c5:
29:12:20:9d:3b:ad:44:91:fb:25:1f:b6:60:17:b6:
5f:99:03:76:74:f1:f5:51:a7:a6:cd:8d:4e:60:e6:
53:4b:a2:13:7b:a6:e4:4b:67:32:d0:0e:d7:22:c2:
af:b6:d8:a9:ba:09:2c:97:fc:0c:0d:81:77:50:7c:
37:e0:ed:3d:cf:97:d6:09:ea:6b:35:0d:86:f5:5f:
e1:77:f3:d3:84:10:e1:4c:f0:46:d7:69:f6:ea:a0:
43:77:77:0d:00:e1:0e:d8:ce:49:98:92:35:50:10:
72:1d:0c:14:b1:2c:bc:a7:09:19:16:50:db:93:3e:
4d:b1:51:aa:4c:14:fc:3b:04:38:87:9a:fc:67:93:
58:58:e2:89:37:ee:a7:64:d7:a0:5a:27:09:31:41:
26:52:1c:2f:e3:d6:4a:19:78:a5:bb:a5:0c:35:c6:
a3:e4:71:ea:83:71:88:65:72:9c:f4:96:99:77:ce:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D3:14:53:A5:EB:A1:25:C9:D0:40:F6:9A:B3:E2:F8:C0:C7:E0:28
X509v3 Authority Key Identifier:
keyid:FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/n9MUU6XroSXJ0ED2mrPi-MDH4Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2800::/47
Signature Algorithm: sha256WithRSAEncryption
32:2a:4c:77:af:75:5e:7b:80:23:97:b3:fb:cf:82:96:4e:1f:
bc:8d:bc:9d:cd:39:dd:93:9a:4d:54:b1:42:3f:52:df:2d:21:
e4:7c:8d:ad:e2:20:6a:2a:a3:1e:2a:cf:2a:e0:87:38:73:23:
0e:d3:34:d5:c2:38:ac:8f:e0:67:fe:f4:3a:00:15:dd:4e:81:
a8:d2:d9:de:a4:41:ff:cf:32:9a:85:84:e8:e6:16:f8:7e:fb:
20:99:b7:37:62:45:24:ea:06:08:b4:10:83:cc:e6:d2:c4:0d:
8c:f3:b3:d6:0c:74:5e:1c:3b:bb:5e:f2:fc:09:db:46:32:71:
c5:27:7c:83:cd:cc:b4:21:2d:4b:48:7c:a7:40:fb:00:20:f0:
91:7c:38:de:84:1f:91:50:b7:90:a8:e5:d1:33:af:dd:62:a8:
25:95:96:06:ad:62:39:8a:6d:d1:d5:55:0a:17:8b:a2:7a:66:
6b:1b:1a:37:c7:8b:3e:58:87:0d:27:12:de:10:d5:f2:eb:b3:
08:e7:22:4c:02:ce:28:ff:c8:a6:e5:bc:cd:2a:5e:81:97:90:
76:87:d1:52:c7:c2:06:90:6c:b8:79:ad:f9:05:2c:0f:9c:33:
8d:be:ce:c8:ef:c4:c6:41:13:a2:7a:88:70:a9:a9:93:20:7e:
18:8f:8f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:31 2024 by rpki-client on console-fra.rpki-client.org