Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/HC4ndvVUr6NjEJ29MORbUyzsUNE.roa
File: HC4ndvVUr6NjEJ29MORbUyzsUNE.roa (raw, json)
Hash identifier: JCR89v4ConPSU0xUo3TBNsfQKi7ULJ1FTKnAd2LTY9o=
Subject key identifier: 1C:2E:27:76:F5:54:AF:A3:63:10:9D:BD:30:E4:5B:53:2C:EC:50:D1
Certificate issuer: /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial: 29A78ECA
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/HC4ndvVUr6NjEJ29MORbUyzsUNE.roa
Signing time: Sat 01 Jan 2022 10:56:15 +0000
ROA not before: Sat 01 Jan 2022 10:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41709
IP address blocks: 2001:67c:26f8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698846922 (0x29a78eca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Validity
Not Before: Jan 1 10:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c2e2776f554afa363109dbd30e45b532cec50d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:06:51:e8:b9:a4:f1:e8:a8:58:19:9f:e5:
0d:b0:0f:79:f0:20:30:43:90:e8:bc:47:dd:57:8b:
15:79:d0:67:ee:a1:4d:d3:f1:56:d5:a7:ae:1f:14:
0f:83:73:fe:43:1a:29:f1:34:67:a5:cf:bd:70:f3:
ed:0c:37:b8:88:9c:8a:c7:8c:33:65:ab:3a:9c:76:
1c:b4:a1:01:24:a7:2b:c1:64:33:ff:71:77:70:0a:
37:03:a0:08:68:fd:e7:8c:6a:41:8c:47:f7:35:dc:
ad:69:35:f7:99:42:c8:55:3a:eb:87:b7:08:5a:19:
30:32:09:bd:bc:25:c7:b5:6c:44:70:73:2d:2c:96:
89:1f:14:92:23:77:79:14:34:3c:19:7d:66:d3:6f:
d2:4f:e4:bd:32:21:83:f1:1d:3e:b2:d1:59:e0:dc:
3c:93:81:b4:6a:11:56:ae:4e:01:8a:4b:be:1d:ec:
7d:32:9c:6b:ef:8e:eb:b4:50:00:e1:4f:ea:5d:a0:
88:71:4c:73:7d:4b:26:29:cf:2c:7b:3c:7e:f2:35:
18:fa:07:80:3a:89:8a:76:ac:f7:a4:19:dd:d0:9f:
db:e4:b3:b4:54:e9:4f:6f:aa:00:7c:27:11:6b:5b:
10:c1:90:15:fb:99:55:06:3d:bb:f4:50:8b:ed:65:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2E:27:76:F5:54:AF:A3:63:10:9D:BD:30:E4:5B:53:2C:EC:50:D1
X509v3 Authority Key Identifier:
keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/HC4ndvVUr6NjEJ29MORbUyzsUNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:26f8::/48
Signature Algorithm: sha256WithRSAEncryption
1d:15:4f:50:94:2a:f2:72:97:22:ae:6e:33:ae:6e:87:ce:3c:
f7:aa:ea:64:07:61:15:1f:6e:c7:1f:1a:5f:55:07:c1:28:62:
d9:99:88:30:b7:8f:f5:06:cc:37:73:0e:46:0a:b6:02:1c:78:
80:0d:58:b6:bf:b3:ff:80:30:67:88:b9:71:96:17:4b:1c:9b:
5f:97:9b:2d:84:fd:6a:37:97:bc:3c:51:4e:cb:26:e3:33:b0:
a9:ce:a2:24:34:9f:fc:53:9f:e4:aa:d6:50:16:f3:4e:87:d0:
f0:8b:cb:f1:87:db:38:58:6e:a2:5c:0d:c2:ca:cc:ce:96:fe:
7e:fb:9e:71:51:4b:6e:17:99:6d:53:02:e4:fe:71:18:7d:57:
8e:1b:e9:ee:64:9e:c9:6a:8c:47:63:82:36:d0:bb:98:67:1a:
64:e9:2e:d7:0d:30:ca:cd:b6:0d:a2:db:18:a1:22:e3:4a:9e:
c0:86:d3:ff:5d:4d:ae:c9:ff:87:28:dc:77:7d:eb:f2:4a:ee:
c7:43:ec:c3:4e:a8:ac:37:3d:63:1d:ce:63:88:00:32:51:c5:
a3:06:79:c5:20:4f:15:77:79:f9:be:56:93:b1:c7:6d:58:bf:
b0:72:e2:45:0a:34:68:de:14:e7:9f:d2:67:af:08:ef:4b:5f:
c3:a5:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:28 2024 by rpki-client on console-ams.rpki-client.org