Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/MO-yxjp5XCg1-vW3Qy3H6Il7ehc.roa
File: MO-yxjp5XCg1-vW3Qy3H6Il7ehc.roa (raw, json)
Hash identifier: w2Zxm7lY14w3kxOIPtpEkGgLo2pen0rjLGMIZzFvSJc=
Subject key identifier: 30:EF:B2:C6:3A:79:5C:28:35:FA:F5:B7:43:2D:C7:E8:89:7B:7A:17
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0579172D
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/MO-yxjp5XCg1-vW3Qy3H6Il7ehc.roa
Signing time: Sat 01 Jan 2022 05:01:14 +0000
ROA not before: Sat 01 Jan 2022 05:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17830
IP address blocks: 2a05:1083:ff00::/40 maxlen: 48
2a0c:e640::/36 maxlen: 48
2a0c:e640:6000::/36 maxlen: 48
2a0c:e640:1000::/44 maxlen: 48
2a0c:e640:1020::/44 maxlen: 48
2a0c:e640:1010::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91821869 (0x579172d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 05:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30efb2c63a795c2835faf5b7432dc7e8897b7a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:7f:bf:cb:ae:9a:7b:6f:2f:b6:26:3e:cd:
7c:6c:e4:e6:1a:d0:8d:4d:ae:12:6e:e7:61:38:b8:
74:4d:8a:8c:00:ff:96:b9:53:a2:8f:a9:30:33:13:
95:95:0a:8c:19:98:0d:ae:bd:3f:a6:4c:e8:ad:b1:
ff:10:89:a2:1e:2b:d2:2d:5b:91:bc:04:53:dc:a1:
ed:47:0a:1a:6a:45:d9:89:46:af:c8:90:2c:e0:c1:
11:5b:ce:46:03:8c:7e:71:ab:83:57:53:ca:d1:0d:
08:12:fe:56:49:bc:84:a1:d7:f6:3e:2a:bb:15:a4:
b3:a8:70:2d:a8:34:88:52:38:dc:1a:a4:6e:2b:ce:
58:91:bb:ad:21:2e:21:b2:4a:b4:79:c1:e5:28:09:
d7:f7:66:8e:9c:c3:3b:0e:7c:93:a6:1f:f0:bf:2e:
a1:55:f8:4c:d8:d7:22:83:67:ba:ab:34:41:f0:27:
b5:dd:85:0d:16:08:6b:ea:8f:5b:f0:44:8b:ba:a6:
8c:79:e4:e9:55:8d:94:5d:1f:3f:20:6d:76:51:40:
65:7b:43:39:79:75:82:d6:f7:30:a7:d3:09:f9:c7:
ca:2e:de:26:86:3d:94:9f:24:da:69:5b:5e:4f:a2:
05:29:3c:6a:67:50:db:1b:3d:0a:50:3e:13:57:b0:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EF:B2:C6:3A:79:5C:28:35:FA:F5:B7:43:2D:C7:E8:89:7B:7A:17
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/MO-yxjp5XCg1-vW3Qy3H6Il7ehc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1083:ff00::/40
2a0c:e640::-2a0c:e640:102f:ffff:ffff:ffff:ffff:ffff
2a0c:e640:6000::/36
Signature Algorithm: sha256WithRSAEncryption
7b:75:ca:e6:a8:e0:e2:62:8d:f9:e8:4f:ee:f2:2a:39:a2:40:
1c:32:9a:fa:be:31:d7:5f:0d:28:74:ca:f6:cf:3d:b3:81:81:
a7:31:5b:ce:8c:5a:c5:da:ee:6e:70:ab:1e:44:ab:14:55:62:
22:48:95:a4:74:15:fd:a9:4e:c5:d4:01:34:4b:63:4e:4c:6b:
e6:88:2e:b3:0f:bf:ff:35:e5:8d:c3:f5:b7:82:59:20:5d:b7:
9d:82:7f:de:3c:8e:a6:23:99:f6:dd:5e:f4:4b:45:18:ee:f0:
13:b6:f4:8a:da:0a:a4:10:67:a9:a3:a2:c5:30:ab:b0:e6:c8:
e5:f8:88:60:ca:9f:ae:0d:78:a3:d0:f9:72:42:58:42:81:33:
2e:3c:a9:d3:c8:a9:96:45:ad:7b:fe:6b:41:e4:8f:85:d8:ac:
e8:b6:ea:67:89:75:bc:18:73:05:17:6b:c7:97:e7:77:82:4d:
7b:b4:6f:cf:f6:a9:28:03:4a:c0:00:0e:6d:bd:51:eb:46:4d:
07:8a:88:32:2a:9c:ea:2d:28:6e:3f:47:62:c5:f4:56:d8:0f:
b8:69:82:f8:0b:98:92:70:93:20:e3:d0:5f:2c:3f:fa:9f:43:
3d:27:cc:9e:03:35:d6:b0:dc:49:b2:5e:57:24:72:51:81:a4:
e7:93:25:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org