Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Q5cImx9axvgqCXapnDkZpIqclrY.roa
File: Q5cImx9axvgqCXapnDkZpIqclrY.roa (raw, json)
Hash identifier: ZGDCQevtUSXXoZUPNk9KSnHx/USTxPMahGVFXhjBYRs=
Subject key identifier: 43:97:08:9B:1F:5A:C6:F8:2A:09:76:A9:9C:39:19:A4:8A:9C:96:B6
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 07E24225
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Q5cImx9axvgqCXapnDkZpIqclrY.roa
Signing time: Sat 01 Jan 2022 05:52:13 +0000
ROA not before: Sat 01 Jan 2022 05:52:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210960
IP address blocks: 2a0e:b704::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132268581 (0x7e24225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 1 05:52:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4397089b1f5ac6f82a0976a99c3919a48a9c96b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:98:b9:5f:5c:e2:f5:64:55:52:34:8a:3b:
cc:68:12:42:7c:5f:85:0f:3c:9c:96:d9:c1:61:c0:
45:46:bb:72:0c:6e:fa:aa:24:28:0c:87:5e:0d:20:
67:40:18:55:d5:e5:40:55:56:fa:82:e9:a1:3d:af:
37:29:02:9a:2f:36:01:77:1d:20:f4:53:2a:c8:2d:
78:17:6e:8b:62:e4:39:42:c2:09:54:48:10:95:91:
6c:4a:19:86:36:90:5d:43:35:69:4a:37:c3:4c:6d:
d9:7d:13:56:d9:03:4c:90:cc:8f:bb:7d:e9:e5:fb:
ec:d4:fd:2c:a6:8e:07:55:f9:d5:cd:77:6a:29:f4:
56:ad:b3:6f:ed:28:15:33:36:d4:f1:03:93:91:86:
98:c4:de:77:34:cf:6c:2f:9e:a9:e1:97:e7:42:5a:
c1:26:b0:dd:68:3e:0c:2b:0e:6f:22:93:fc:86:37:
4a:6f:06:60:25:35:cf:0e:db:80:ca:c9:85:b6:b8:
6b:01:d4:6f:ab:90:e7:13:32:9b:37:78:4b:8f:37:
2d:20:6b:02:59:99:2b:89:e6:49:e4:e8:52:d0:82:
ba:dc:76:61:cd:92:ee:fc:7d:b9:e2:44:f8:5b:e9:
24:44:b4:05:7c:10:8b:8d:a7:8a:91:dd:0c:64:2f:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:08:9B:1F:5A:C6:F8:2A:09:76:A9:9C:39:19:A4:8A:9C:96:B6
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Q5cImx9axvgqCXapnDkZpIqclrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b704::/32
Signature Algorithm: sha256WithRSAEncryption
82:67:22:b1:6b:f3:b6:92:5a:a1:64:4d:47:fa:34:0a:2b:fd:
1d:0c:bd:80:0a:13:b1:4c:e5:a2:68:5a:ea:62:f9:3c:0b:2f:
fd:23:12:bb:b2:f2:b5:55:9e:35:99:96:76:f0:2b:e1:e6:b2:
0e:27:9a:fa:e5:e2:1c:a2:e6:cb:1f:14:24:8f:58:d8:94:a3:
7f:0a:58:2b:7e:12:3d:0a:31:2a:8b:87:0f:2f:66:9e:07:33:
e0:48:56:ed:75:a2:d0:e2:0d:c1:c7:44:c1:6d:09:ad:90:eb:
0f:8e:4c:ca:79:f2:22:61:f6:4c:cb:26:04:a3:95:ae:10:08:
49:24:f1:46:20:0b:34:76:1e:91:05:13:ca:1a:e9:4b:23:f1:
18:90:10:72:ee:f3:fa:b1:11:3d:fa:e6:5c:33:0f:d8:48:1c:
bf:42:b2:47:57:48:3e:8f:58:38:61:69:d3:0a:f3:67:a5:6f:
98:67:df:29:18:3e:30:3a:a3:89:70:2a:e2:4b:be:b3:9e:29:
6b:b4:62:60:8f:8d:cc:42:ed:61:68:9a:34:4a:f6:ca:88:77:
06:35:40:7d:f5:68:02:a2:25:07:0a:55:42:d6:72:88:e1:4a:
d8:b0:78:7c:02:0c:30:3f:8c:13:91:02:e0:b9:87:3a:db:b5:
f0:4c:ba:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:12 2024 by rpki-client on console-ams.rpki-client.org