Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/40oIR8hXAcycFGD9kRfnrDsEYGE.roa
File: 40oIR8hXAcycFGD9kRfnrDsEYGE.roa (raw, json)
Hash identifier: +mVhSetNyLgkD8nc85amAzF7nKi7j2HPEMxRwx05OME=
Subject key identifier: E3:4A:08:47:C8:57:01:CC:9C:14:60:FD:91:17:E7:AC:3B:04:60:61
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0183A44765A8BF1E9A1272A10B7B4BC6E78F
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/40oIR8hXAcycFGD9kRfnrDsEYGE.roa
Signing time: Tue 04 Oct 2022 18:34:46 +0000
ROA not before: Tue 04 Oct 2022 18:34:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142553
IP address blocks: 2a0d:2587:3000::/36 maxlen: 48
2a0d:2587:4000::/36 maxlen: 48
2a0d:2587:2000::/36 maxlen: 48
2a0d:2587:5000::/36 maxlen: 48
2a0d:2587:1000::/36 maxlen: 48
2a0d:2587:6000::/36 maxlen: 48
2a0d:2587:7000::/36 maxlen: 48
2a0d:2587::/36 maxlen: 48
2a0d:2587:c240::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a4:47:65:a8:bf:1e:9a:12:72:a1:0b:7b:4b:c6:e7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Oct 4 18:34:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e34a0847c85701cc9c1460fd9117e7ac3b046061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:a9:67:8d:80:d4:07:e4:f4:9e:e2:4a:85:
9e:ca:27:64:c2:04:28:18:ad:6d:bc:1f:8e:30:d9:
86:81:2b:80:a0:29:67:a8:99:96:ae:58:46:38:ad:
93:0b:df:f8:0e:a7:c7:d1:70:24:58:39:7c:fb:56:
e2:88:8f:07:aa:03:6d:d8:a8:90:b3:7d:1e:27:b0:
a7:39:94:40:93:af:26:73:35:ed:81:26:3e:0f:b1:
89:85:aa:43:41:16:0c:ad:e2:51:56:9b:11:39:00:
08:e2:f7:65:d2:ac:6a:fc:09:4e:a9:4f:c6:66:e8:
ac:db:f1:f4:16:92:43:5c:e7:3f:46:ac:5a:86:b8:
c1:58:1b:f2:a4:4b:78:91:88:84:47:f6:a4:e3:22:
8e:d7:b7:5d:3b:b8:7b:3f:73:4a:3a:08:2e:d2:2a:
7b:0e:c3:96:8f:c1:30:2c:2e:97:13:15:0b:5b:af:
12:65:15:48:dc:73:db:51:4e:3d:37:fa:6f:d4:c1:
d0:59:7e:b4:d8:21:9d:de:cb:95:0a:96:dc:0c:77:
53:36:be:fc:fd:c2:33:89:a3:6a:72:bb:59:c9:bd:
e7:03:b2:a9:d1:6f:62:bc:51:ba:3d:da:a0:a7:b9:
b9:4c:7b:a0:9c:b1:77:1c:85:0b:cc:fb:0a:f8:c8:
42:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4A:08:47:C8:57:01:CC:9C:14:60:FD:91:17:E7:AC:3B:04:60:61
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/40oIR8hXAcycFGD9kRfnrDsEYGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2587::/33
2a0d:2587:c240::/44
Signature Algorithm: sha256WithRSAEncryption
9c:34:72:fd:78:fc:54:c1:89:68:58:13:99:a0:1d:49:2e:2c:
a9:1c:0f:ca:4b:3f:17:cc:2b:79:40:b4:e9:47:97:fd:bf:a7:
c8:12:26:72:c9:a6:47:16:df:56:52:95:04:f3:b1:83:eb:b6:
7d:6f:93:78:f6:0f:e0:91:85:bd:6e:83:83:ab:a2:dd:b6:bb:
8c:e0:9d:89:ae:99:3f:80:9e:01:18:7b:41:35:bc:71:73:59:
f8:54:4b:0d:18:a4:5f:1a:ad:c2:9e:68:d0:cf:d3:f9:ed:b4:
85:9d:5f:ed:31:91:85:f1:20:1c:b0:cc:0c:d2:47:13:b4:06:
ac:bf:a0:c2:57:05:7e:23:63:5d:69:9f:d6:19:95:71:af:5d:
77:58:c1:e0:6f:ee:f3:10:31:bb:2a:0a:8b:bc:b6:96:50:46:
27:d1:b0:fe:c6:d9:4b:53:d3:8c:49:36:4e:81:3d:53:dc:6d:
6f:fe:ec:51:66:ce:e6:a7:62:55:91:be:3e:69:e9:f6:47:03:
64:a5:4a:f6:a5:1b:ca:3c:5a:09:b5:72:3a:f1:e7:39:30:2f:
ba:f4:11:40:88:b0:c1:99:7d:17:d6:a4:5c:20:08:80:21:88:
23:d3:d9:3a:14:12:81:86:ca:0d:a3:35:90:a3:7a:2d:30:1d:
97:6f:c8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org