Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Z_mLL57U6J7UelvS8FmE7V0FaTw.roa
File: Z_mLL57U6J7UelvS8FmE7V0FaTw.roa (raw, json)
Hash identifier: h53eyJkdgvCi8525Dkq1IROsIEhQf3UBIdT3uIHkdEc=
Subject key identifier: 67:F9:8B:2F:9E:D4:E8:9E:D4:7A:5B:D2:F0:59:84:ED:5D:05:69:3C
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018336B0F7EAD7BE2DFB6559179C3BFEFB76
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Z_mLL57U6J7UelvS8FmE7V0FaTw.roa
Signing time: Tue 13 Sep 2022 11:51:50 +0000
ROA not before: Tue 13 Sep 2022 11:51:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211647
IP address blocks: 2a0e:aa07:e04a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:b0:f7:ea:d7:be:2d:fb:65:59:17:9c:3b:fe:fb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Sep 13 11:51:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67f98b2f9ed4e89ed47a5bd2f05984ed5d05693c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:4d:63:41:f5:78:a1:3b:e8:11:12:ef:25:
f8:76:d2:05:ed:a4:c7:5f:70:51:5d:77:38:8c:58:
02:a3:32:d0:e2:1e:73:27:07:7d:b9:95:bc:74:53:
36:2b:27:51:bf:e2:54:be:13:b4:44:9b:03:0c:44:
3e:f3:7a:31:e1:16:4a:a0:3a:16:95:2a:80:30:f3:
1b:30:1d:45:ef:65:27:f7:17:1b:56:21:1c:a1:75:
7c:ba:ec:21:ad:aa:4f:51:88:c9:e3:f3:67:23:05:
da:b1:a6:a1:7a:04:61:28:6e:53:79:fe:86:5b:32:
71:7e:fb:e0:f5:64:08:7a:13:2b:fd:f1:43:25:d6:
99:40:8e:98:2c:4c:2e:ef:06:59:65:97:98:b9:92:
88:4f:f6:52:80:43:4f:df:15:fc:6a:43:4a:5f:64:
3b:27:3d:aa:a9:b6:0e:f2:d0:1b:56:05:91:99:4b:
cd:ee:79:7a:ed:9e:0d:8e:ce:bd:03:38:d8:00:f9:
c5:cd:50:7f:02:fa:ab:e1:68:76:93:ec:d7:62:7b:
77:52:14:ea:3d:a7:b9:97:7e:5d:17:43:91:7f:a5:
92:62:92:a2:bc:dc:e3:32:81:30:d5:e0:ed:7b:7e:
0c:b4:52:34:43:37:ba:1c:a8:26:c7:92:ee:cd:74:
41:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F9:8B:2F:9E:D4:E8:9E:D4:7A:5B:D2:F0:59:84:ED:5D:05:69:3C
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Z_mLL57U6J7UelvS8FmE7V0FaTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e04a::/48
Signature Algorithm: sha256WithRSAEncryption
0c:2f:f5:4b:27:14:dd:a3:20:25:0a:cd:f9:b5:80:1a:f2:d2:
3d:90:5c:ef:3c:b7:71:48:1f:f0:f9:5d:7d:4e:24:16:e0:f8:
36:c1:a2:b8:08:e2:64:a6:95:5f:44:01:d5:ca:5f:af:d1:bc:
8e:27:0b:26:f7:93:75:b3:a9:55:fd:59:54:d1:bf:57:c8:05:
3b:97:c4:09:62:25:6c:0b:3b:42:59:fb:30:49:7e:f3:25:87:
e4:98:a0:b5:a0:0c:c2:42:0c:2a:dc:de:21:d8:7b:de:e7:8b:
c0:15:bc:ec:5d:fe:10:3e:bf:8f:59:74:dc:f0:27:4c:12:34:
b5:29:15:a8:98:04:84:b0:a3:65:f8:f7:ef:31:b3:ac:35:70:
7a:01:6f:72:71:65:46:b2:76:ea:7c:4e:78:04:7e:c3:52:e6:
c1:4e:0c:5b:02:9f:52:09:4e:f2:d1:79:3d:ae:ed:bf:92:c5:
6b:1f:fe:56:c8:f2:3c:e4:26:dd:36:ba:55:e0:ab:c7:64:20:
64:91:b3:06:5e:fd:16:79:49:a7:1d:89:f8:78:4a:eb:ea:08:
20:e0:29:55:45:62:3e:df:c8:f0:c8:74:a0:41:ed:a1:51:86:
6c:ce:42:47:c0:51:a5:35:c1:10:44:10:e3:ee:10:6a:cb:06:
d1:1b:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org