Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/e-I048X6Q2VFc9q8AbUncMp-S3M.roa
File: e-I048X6Q2VFc9q8AbUncMp-S3M.roa (raw, json)
Hash identifier: XdLp7fzJRfkiYy86r/dd726w6Q6/p/JDoZiios6B4Zw=
Subject key identifier: 7B:E2:34:E3:C5:FA:43:65:45:73:DA:BC:01:B5:27:70:CA:7E:4B:73
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 0184684E74FD31E7DA7433ABA3A2E052F49E
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/e-I048X6Q2VFc9q8AbUncMp-S3M.roa
Signing time: Fri 11 Nov 2022 20:08:02 +0000
ROA not before: Fri 11 Nov 2022 20:08:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51345
IP address blocks: 2a13:1c47:ffff::/48 maxlen: 48
2a13:1c40::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:68:4e:74:fd:31:e7:da:74:33:ab:a3:a2:e0:52:f4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Nov 11 20:08:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7be234e3c5fa43654573dabc01b52770ca7e4b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:d7:4b:b0:ee:d7:7a:03:0f:72:45:fd:0a:
88:86:65:17:16:ac:78:41:67:da:5c:0f:ea:c7:3a:
ca:92:af:90:92:08:c7:59:e2:c0:0d:5c:6f:40:30:
28:71:39:f5:32:c2:b2:69:6b:b7:7e:ea:60:34:41:
ac:69:1e:78:c2:30:a2:0d:e8:74:7a:aa:3e:ef:b9:
8a:76:29:63:10:b1:3e:7c:4c:25:a3:ae:bd:5c:67:
0f:54:03:54:73:bc:26:03:b2:a0:1c:bb:b6:d2:08:
fa:6b:34:1b:24:8a:c1:98:20:01:52:54:54:6d:d0:
93:59:d9:29:77:ce:10:e0:c9:82:0c:6a:3e:c1:34:
46:c2:2d:1e:bf:6f:96:36:ca:bd:fe:ec:9c:3e:14:
35:e8:43:bf:0e:3b:7f:57:e2:6f:9f:20:9e:53:98:
d9:cd:08:8b:30:7e:81:97:f4:21:85:f0:78:2a:14:
3e:8a:20:15:47:74:1d:96:60:d5:ea:65:df:d5:86:
55:38:3c:8a:41:ec:c9:9b:56:bd:4e:5f:5b:79:ed:
d4:53:be:ea:7c:90:1a:62:a1:00:82:b9:d6:0e:97:
17:c9:aa:fa:b8:c3:8f:d0:5f:1c:61:13:d3:95:5b:
a7:60:fc:0d:df:42:ee:1c:3e:8f:47:c5:6d:67:72:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E2:34:E3:C5:FA:43:65:45:73:DA:BC:01:B5:27:70:CA:7E:4B:73
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/e-I048X6Q2VFc9q8AbUncMp-S3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c40::/32
2a13:1c47:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
bd:4f:99:00:df:e8:0e:c0:6e:4f:16:bd:c2:c2:d3:a9:72:49:
ad:76:39:14:f5:4d:f0:04:22:d1:b1:34:d5:1a:dd:d2:ce:7e:
9e:63:46:6f:e8:d6:15:77:ec:8e:02:e1:0a:fd:f2:56:ec:c4:
4d:de:19:7c:59:02:90:00:99:cf:4c:be:af:65:0b:13:c8:60:
04:5b:69:2d:5f:de:1a:9a:42:0e:d3:c4:41:89:43:13:07:60:
bb:2e:6a:98:40:65:d2:66:12:0f:62:41:71:02:99:f0:84:d9:
ab:df:2a:61:f4:dc:c0:c4:b3:4a:df:a2:a9:4b:1b:ce:da:2c:
67:c8:9f:d7:de:26:99:11:60:b6:3a:ec:6b:f0:43:56:88:0c:
f5:95:89:bb:ce:2f:fb:6b:d0:10:d3:2f:9e:39:83:b3:36:4a:
9d:d3:36:8e:61:93:6f:1c:99:c7:18:a0:1d:ff:03:c5:25:75:
3d:00:c0:60:05:35:5c:ec:37:78:df:d5:5c:64:4c:6b:8f:cd:
fb:79:f4:21:f5:26:37:79:17:eb:0e:7c:64:8a:03:c8:fc:b2:
2c:f2:92:cf:f8:a6:5e:5d:1a:8d:7d:cd:c1:b8:57:c4:90:ca:
76:55:30:31:4d:ef:e1:5f:2a:16:b5:3c:8f:6f:d8:85:ba:83:
91:74:e0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org