Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/powFFAohWqy2xH_h6PCqd2f5pKA.roa
File: powFFAohWqy2xH_h6PCqd2f5pKA.roa (raw, json)
Hash identifier: ELvp+9+9WGmPsNdz6Sx++xv5roC3BSqm4OKDXcw2CbA=
Subject key identifier: A6:8C:05:14:0A:21:5A:AC:B6:C4:7F:E1:E8:F0:AA:77:67:F9:A4:A0
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38D26CB0
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/powFFAohWqy2xH_h6PCqd2f5pKA.roa
Signing time: Sat 01 Jan 2022 07:55:13 +0000
ROA not before: Sat 01 Jan 2022 07:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3333
IP address blocks: 2001:610:240::/42 maxlen: 42
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953314480 (0x38d26cb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a68c05140a215aacb6c47fe1e8f0aa7767f9a4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:74:9b:26:d0:06:78:1d:8e:a6:93:20:5e:
ae:35:2b:95:59:36:6c:fa:fb:17:a5:f4:02:c3:39:
6e:5f:99:62:76:d5:29:a1:b0:cf:66:64:73:2b:c8:
6f:b7:ba:91:34:74:0f:7a:e7:6c:e6:75:62:ea:4c:
43:28:02:d6:00:3a:24:81:a3:e7:4c:66:47:39:57:
51:20:3f:c7:9f:2f:25:1c:dd:1b:22:71:ee:4e:5f:
e7:83:c8:fe:3b:3c:76:79:ed:3f:dc:4b:0b:34:f5:
f6:9e:b8:e4:af:7f:11:7c:59:17:d6:f1:65:b9:44:
58:06:84:9e:cb:12:83:8b:ea:0e:58:58:cc:4e:fe:
08:57:bd:b5:18:06:5e:6c:04:82:da:f0:70:e3:3e:
47:33:f4:72:89:03:b0:15:82:1e:a8:36:cd:f8:a9:
a1:00:33:d8:3d:28:fe:bf:7c:62:b1:41:bb:80:46:
9c:0c:cd:8b:9c:5b:3d:75:11:70:86:93:6d:60:c3:
9a:b3:b1:86:51:20:de:33:42:c9:bc:95:7c:bd:29:
61:d5:98:9f:e6:af:82:17:71:a5:70:b3:4d:49:31:
63:c5:16:db:ea:2d:6d:67:99:f9:4a:55:f7:95:56:
d0:30:ed:e1:f0:8b:47:03:8c:30:69:60:d6:2f:b9:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8C:05:14:0A:21:5A:AC:B6:C4:7F:E1:E8:F0:AA:77:67:F9:A4:A0
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/powFFAohWqy2xH_h6PCqd2f5pKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:610:240::/42
Signature Algorithm: sha256WithRSAEncryption
50:04:6c:fd:e9:a8:15:e4:83:aa:28:95:6a:b3:8d:dc:cd:a4:
86:cd:1d:07:3c:35:9b:ac:69:d5:b4:bb:bd:5b:00:d3:dc:3c:
31:62:2d:3e:7d:8f:cd:b3:2f:c8:2c:a0:a3:43:2b:b3:f1:69:
0e:b9:b4:b3:20:71:d6:e5:bc:bb:f9:db:5d:a2:07:9a:6e:82:
3d:01:60:db:5a:ef:b0:aa:c0:ee:89:0f:7e:c9:fe:fb:c4:a3:
b6:90:b9:85:c0:ec:07:bf:9e:62:c8:6f:6d:88:93:56:7a:94:
78:55:82:2e:0a:0e:3d:c0:59:39:c6:4b:51:15:a7:90:66:0a:
6e:f4:e3:3e:52:c4:02:e3:f7:13:af:19:99:f5:4d:7a:fd:76:
62:f9:92:26:5c:e8:97:9a:e4:0c:90:c3:ef:de:c6:ef:71:e8:
90:59:5b:15:9d:f3:32:4d:4b:03:a9:3b:12:f3:98:9b:b5:f5:
d7:06:eb:39:30:90:32:6b:55:eb:4d:94:c4:f6:d2:4e:b3:c7:
ed:82:d4:07:fa:7a:ac:51:80:22:dd:c4:2b:7e:bc:1d:7c:48:
08:ad:9d:9f:69:9d:74:85:67:50:40:a7:24:59:13:91:64:5b:
2b:ac:13:84:ee:77:e2:e5:92:95:c6:b3:48:ee:cf:bf:13:f3:
17:16:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org