Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/9mFNxBepnjVX9fatQXKeTjRyoQQ.roa
File: 9mFNxBepnjVX9fatQXKeTjRyoQQ.roa (raw, json)
Hash identifier: Z5/5iT2hxfWCqx268EXD9URFxoClYrIVvvPBpnZqpi4=
Subject key identifier: F6:61:4D:C4:17:A9:9E:35:57:F5:F6:AD:41:72:9E:4E:34:72:A1:04
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0586E134
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/9mFNxBepnjVX9fatQXKeTjRyoQQ.roa
Signing time: Sat 01 Jan 2022 05:01:21 +0000
ROA not before: Sat 01 Jan 2022 05:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142418
IP address blocks: 2a0d:2686::/32 maxlen: 48
2a0d:2586::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92725556 (0x586e134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 05:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6614dc417a99e3557f5f6ad41729e4e3472a104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:0a:30:a8:e3:73:fa:e7:44:50:b1:b9:1a:
19:d2:0c:62:67:62:b2:41:f0:97:47:33:74:d5:d2:
22:ab:36:a2:01:fd:7a:f4:9d:a2:15:ea:da:5c:48:
eb:c8:34:9b:c8:32:18:0c:35:41:c6:32:2b:a2:47:
de:97:80:c6:46:55:64:75:4f:cf:53:e0:71:18:f1:
4a:77:23:3f:07:3d:b2:ec:4d:d2:58:19:cc:d2:7b:
b4:8a:c1:81:44:70:f2:3f:87:ea:fa:b2:f6:14:6e:
d1:ce:e4:ce:b0:7f:9e:96:97:a7:3f:fd:92:7e:7a:
c8:2f:c2:50:3d:92:e8:3b:b7:dc:e9:27:b5:3b:ca:
d0:f2:b3:14:eb:95:37:eb:ec:2c:3a:cb:1a:3b:f4:
28:67:c8:34:98:37:9d:6a:fe:11:bb:8f:af:bb:68:
77:f7:43:b2:cd:11:be:29:3a:f9:b2:7a:c2:13:23:
14:b0:38:3f:72:26:70:39:14:38:a2:0c:17:16:e3:
ca:17:6b:5a:76:57:99:61:0d:30:6e:c5:22:37:82:
b1:82:5f:c8:fb:1b:d4:15:f1:07:94:54:67:5a:fe:
e6:2f:51:e9:ec:cc:30:2b:98:7b:7a:41:d2:ec:41:
7d:58:df:62:8d:91:2e:2b:76:63:df:21:c3:5c:80:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:61:4D:C4:17:A9:9E:35:57:F5:F6:AD:41:72:9E:4E:34:72:A1:04
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/9mFNxBepnjVX9fatQXKeTjRyoQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2586::/32
2a0d:2686::/32
Signature Algorithm: sha256WithRSAEncryption
68:db:5f:b1:b5:f1:24:1d:b5:2c:72:46:da:91:bf:e9:ca:e2:
d9:17:fa:ef:f9:3a:a8:69:dd:19:fb:b5:14:1d:b6:a1:83:c4:
96:18:f8:19:cb:64:9b:43:35:40:42:f0:77:75:67:c1:3a:6b:
1a:1e:ad:d3:ee:09:c7:07:3d:f3:b7:3f:f9:3a:a9:19:8d:90:
53:b6:d2:3f:60:75:00:e9:56:47:7a:d2:2c:f9:9d:1b:0b:e1:
4b:71:dc:79:d1:9e:59:bb:3c:38:59:02:60:86:4b:c9:fe:aa:
12:36:0b:e0:bd:cc:c9:2d:da:96:f9:c2:f3:dd:dd:d5:38:28:
26:c8:5e:bd:84:b6:90:26:fd:03:4f:c4:f2:6a:3e:98:8d:99:
6a:51:c9:86:30:94:d0:1b:64:35:4c:1e:95:17:b5:5a:b5:8c:
7e:22:b6:96:60:7a:4a:ec:a9:42:ed:2c:14:59:38:22:7f:06:
a3:66:e6:59:c1:1d:98:c1:98:72:72:13:ce:ca:9f:18:64:25:
b0:85:f8:12:e8:be:51:4b:80:01:8c:10:7f:79:64:0d:41:4b:
60:51:2e:00:6f:ee:97:16:30:26:bd:58:73:45:19:a4:e5:ef:
bf:1a:bc:30:82:b3:77:50:e7:df:f7:3c:98:06:52:5a:d4:d8:
b5:f7:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org