Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/4vKGUMmqHI4LwiWEWf1My4PNqWI.roa
File: 4vKGUMmqHI4LwiWEWf1My4PNqWI.roa (raw, json)
Hash identifier: iGa3pMt1dmVy4GUzsy7mHf85pUpocOf3gOnJjgIRiqc=
Subject key identifier: E2:F2:86:50:C9:AA:1C:8E:0B:C2:25:84:59:FD:4C:CB:83:CD:A9:62
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 01848C8012D76C1BAE1068EC16E2260B00B5
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/4vKGUMmqHI4LwiWEWf1My4PNqWI.roa
Signing time: Fri 18 Nov 2022 20:48:34 +0000
ROA not before: Fri 18 Nov 2022 20:48:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51345
IP address blocks: 2a13:1c47:ffff::/48 maxlen: 48
2a13:1c40::/32 maxlen: 48
2a13:1c40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8c:80:12:d7:6c:1b:ae:10:68:ec:16:e2:26:0b:00:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Nov 18 20:48:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2f28650c9aa1c8e0bc2258459fd4ccb83cda962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:29:10:e9:9f:a9:13:66:5b:c5:d3:49:d1:
93:2c:ff:8f:32:96:fb:50:ce:64:37:33:50:ef:fd:
d1:08:df:d4:a7:0a:77:f0:8d:d0:b3:96:c3:9f:26:
7a:d0:98:a5:92:95:31:6c:3e:85:03:4f:d8:2a:94:
bc:f6:ca:c5:77:fe:39:03:2d:78:4e:ca:f7:a7:f1:
84:b2:11:38:36:85:bd:d1:ac:ec:da:f8:16:0b:3e:
39:9b:ff:e0:68:fb:71:f8:b3:6d:16:aa:8a:02:47:
4a:84:6d:42:a6:e0:ba:dd:ba:60:ec:fb:1e:92:52:
b8:8f:8d:c4:e1:49:11:dc:b1:9f:f3:ad:27:5c:46:
25:ca:22:2a:e6:4b:98:05:2f:2e:3f:63:1a:57:c0:
87:a1:e2:2d:ab:6d:38:d0:f8:70:a2:f5:75:2e:0a:
d4:2c:19:73:2b:f8:ab:ed:2a:ae:af:42:ce:62:26:
ec:df:a6:c4:83:3b:cf:cd:72:f7:c2:ff:24:ad:1a:
24:c8:24:85:40:f9:f6:b2:52:57:bd:9e:fd:d9:6e:
ca:3e:4d:db:04:44:c3:b8:18:27:79:5e:d5:c1:4f:
8b:9c:30:fd:4c:f1:1a:3a:50:24:a8:68:cc:30:b5:
66:5f:97:07:96:cb:22:0b:af:ab:bb:9e:fb:b3:a9:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F2:86:50:C9:AA:1C:8E:0B:C2:25:84:59:FD:4C:CB:83:CD:A9:62
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/4vKGUMmqHI4LwiWEWf1My4PNqWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
6d:32:80:1d:86:c9:a2:5e:4e:91:e7:4d:f8:02:97:11:d7:e2:
d3:16:17:53:2c:2c:ab:7e:bf:5d:fc:6d:af:e0:5b:2d:d0:88:
13:0c:ee:81:89:66:d2:39:0c:b7:db:e3:dd:b4:2e:ba:77:33:
52:c0:40:96:41:a5:1d:e9:ec:46:79:3c:fc:f4:7e:92:44:52:
18:fd:dd:d1:f8:e0:f8:b2:06:b8:b0:9f:5d:c3:c2:8b:a3:f0:
a3:43:f8:1a:ad:8f:f5:f3:38:bc:8a:7b:cd:4a:42:4e:fe:01:
ac:dc:53:4f:af:de:dc:12:a4:0a:4e:f1:88:4d:f3:81:3d:f5:
75:e4:4f:2e:ba:a5:75:c5:40:6b:ae:8f:02:6b:2d:84:bf:21:
35:66:85:74:8d:7b:ce:c8:c7:5e:37:a4:23:5b:76:95:ea:85:
d6:b7:4e:90:b0:07:54:eb:a3:9b:c4:a8:fc:2f:8e:8e:88:db:
69:7b:48:91:0a:57:a5:74:16:6a:6a:dc:90:02:e1:96:67:50:
4d:aa:92:06:b1:6b:08:36:93:17:80:b1:1f:c7:a3:e7:1d:1b:
41:29:0f:17:55:15:78:e2:10:ff:c4:ef:33:83:be:4c:e6:c7:
81:78:f4:ab:e6:de:df:67:e4:a1:00:be:3d:f0:79:a4:1b:4f:
dc:29:eb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org