Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/1-k0X5z5Q1wNukFt6yUjs94DEuEE.roa
File: 1-k0X5z5Q1wNukFt6yUjs94DEuEE.roa (raw, json)
Hash identifier: l/yivoiLKWE3zkET/D2URWXZ3rdf6sCBHHq9gHC6USs=
Subject key identifier: FA:4D:17:E7:3E:50:D7:03:6E:90:5B:7A:C9:48:EC:F7:80:C4:B8:41
Certificate issuer: /CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Certificate serial: 080E7727
Authority key identifier: 75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/1-k0X5z5Q1wNukFt6yUjs94DEuEE.roa
Signing time: Sat 01 Jan 2022 15:00:59 +0000
ROA not before: Sat 01 Jan 2022 15:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208713
IP address blocks: 2001:678:a84::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135165735 (0x80e7727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75579b3dd8b092be90da9f7480ea761e9cd26486
Validity
Not Before: Jan 1 15:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa4d17e73e50d7036e905b7ac948ecf780c4b841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:1b:eb:e1:4d:c6:8b:eb:bd:c0:5c:a0:74:
a5:76:7f:4d:59:35:08:aa:2a:30:34:fd:1c:c2:5e:
41:0f:4d:83:ea:ea:dd:cd:3d:04:d2:fe:ba:14:b4:
96:4e:7e:c1:4d:43:27:f9:bb:8f:71:10:cf:f0:f4:
ab:e0:73:45:2f:75:24:1e:0d:6b:28:f0:6c:cc:e8:
b3:17:c5:c4:ce:8b:68:91:85:e1:29:f5:16:81:45:
0d:24:10:21:51:2d:da:d9:a1:a2:f1:f0:74:ec:d9:
1f:0d:6a:39:2f:6f:80:09:05:54:65:ce:fb:1b:08:
3a:cd:3b:b6:3b:8c:6a:ad:c1:9a:17:2a:07:11:f1:
27:08:7a:d9:94:1a:03:18:30:2e:b2:23:82:22:49:
23:97:fb:85:c8:69:7f:11:c1:f9:ba:6f:ce:da:8b:
4d:62:d5:10:fb:61:57:ae:3b:28:7c:4f:0a:80:3c:
c0:76:3d:81:d9:e3:2b:e8:d2:04:e5:bf:86:96:4c:
37:6d:5e:0c:64:6d:da:04:87:2f:25:81:4d:a0:69:
97:60:7b:73:d5:96:0c:b7:f9:da:a3:69:ae:f0:59:
3e:4c:77:a7:89:fb:31:5f:ba:08:68:03:6b:79:0a:
99:63:82:f3:ab:18:bf:2e:a2:0c:e0:b6:35:03:d6:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4D:17:E7:3E:50:D7:03:6E:90:5B:7A:C9:48:EC:F7:80:C4:B8:41
X509v3 Authority Key Identifier:
keyid:75:57:9B:3D:D8:B0:92:BE:90:DA:9F:74:80:EA:76:1E:9C:D2:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVebPdiwkr6Q2p90gOp2HpzSZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/1-k0X5z5Q1wNukFt6yUjs94DEuEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6cc297-105b-425c-b983-956330170670/1/dVebPdiwkr6Q2p90gOp2HpzSZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a84::/48
Signature Algorithm: sha256WithRSAEncryption
61:de:5c:56:44:0a:34:9a:f7:0a:fe:83:dc:d4:18:ba:5c:27:
f1:06:63:b9:a0:05:9e:de:4d:35:b6:f4:32:45:7c:e4:1e:0d:
26:da:d7:dd:0d:d8:d8:d4:7d:bb:7b:43:ed:73:75:50:25:99:
38:04:85:05:94:bd:7e:49:8d:c3:70:de:c4:02:f9:89:12:27:
cd:3c:78:e1:f6:f5:e5:80:c0:af:b2:a5:74:65:7f:f9:ff:fb:
4d:38:ee:06:8b:39:9c:60:dc:fa:ed:2f:b3:b4:d2:a9:09:ad:
77:75:22:5b:44:3d:dd:16:94:7b:26:c0:f1:6c:ad:0a:54:41:
6e:bd:a6:b7:e5:89:46:a3:6d:5f:f2:51:b1:66:ff:3b:01:99:
f0:27:9e:c6:4f:17:08:a5:02:d9:da:27:fd:83:28:3a:34:d8:
5f:36:9d:07:c9:d3:a3:76:52:63:16:85:b5:4e:6f:9f:af:3e:
e3:5c:eb:3e:70:8d:00:f4:6a:e4:09:8b:92:ef:07:ea:46:b4:
a9:af:e9:b8:5c:f9:9d:c8:ca:df:61:82:da:09:3d:d0:d9:50:
3c:32:82:f3:8b:ac:41:a9:73:0c:35:f1:c8:14:1e:f1:33:57:
63:31:3a:cb:71:4c:8a:b9:34:41:9d:03:c2:cb:ac:65:41:02:
e3:0a:52:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:46 2024 by rpki-client on console-fra.rpki-client.org