Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/zA6QzF6XdyyIwrFUWVFbRQb7pL0.roa
File: zA6QzF6XdyyIwrFUWVFbRQb7pL0.roa (raw, json)
Hash identifier: /EAPak2e/XkM3cLbmyLoGB4PMm96u4cqYb8XQZf5o28=
Subject key identifier: CC:0E:90:CC:5E:97:77:2C:88:C2:B1:54:59:51:5B:45:06:FB:A4:BD
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01830D43DE745BB5DDB63072927F59E10A62
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/zA6QzF6XdyyIwrFUWVFbRQb7pL0.roa
Signing time: Mon 05 Sep 2022 10:48:15 +0000
ROA not before: Mon 05 Sep 2022 10:48:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203023
IP address blocks: 2a0e:aa07:e049::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:43:de:74:5b:b5:dd:b6:30:72:92:7f:59:e1:0a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Sep 5 10:48:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc0e90cc5e97772c88c2b15459515b4506fba4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:a6:29:0e:02:b6:b9:2d:73:08:45:66:e5:
bc:3a:dc:38:de:34:2a:b0:50:7a:0a:37:42:df:77:
a0:33:e8:41:a4:87:d8:3c:9a:46:c7:39:e3:a9:d8:
ff:03:fb:90:4f:18:93:fa:5e:18:c7:77:d5:d8:f9:
65:4a:42:2a:cd:38:5c:56:28:af:ab:53:80:29:d1:
6c:e2:c9:33:9f:81:7a:8a:75:a4:40:60:18:6a:44:
a4:6f:5e:f0:85:df:98:c1:97:53:b3:32:a1:62:ea:
c6:b2:b5:b0:4b:d2:31:9c:af:b3:2c:b4:04:f8:eb:
de:3b:d9:9a:ee:2e:9b:f7:b6:31:00:26:b3:c2:e5:
d3:01:04:96:0b:7e:e5:84:95:b9:c5:9f:b0:6e:d6:
97:a4:fa:f9:15:cb:24:be:1f:d0:27:5e:92:f3:10:
e9:2a:88:d3:2e:15:ac:bd:68:e1:e0:03:cf:4f:f1:
2c:00:c7:6a:3e:55:8f:a0:f1:82:97:ef:03:db:80:
ef:ff:2f:27:26:d1:27:1c:5e:d2:13:be:b8:4f:b0:
8c:a3:16:14:24:3f:4d:87:12:27:85:45:13:91:e4:
a5:15:e0:d2:89:8c:2f:d8:46:73:a1:9e:fa:76:a3:
36:fb:9b:04:f4:15:46:bf:2d:0a:38:b4:9c:c2:99:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0E:90:CC:5E:97:77:2C:88:C2:B1:54:59:51:5B:45:06:FB:A4:BD
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/zA6QzF6XdyyIwrFUWVFbRQb7pL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e049::/48
Signature Algorithm: sha256WithRSAEncryption
a3:21:97:c4:1b:4e:c6:18:e8:f2:e2:0b:1d:72:1a:a6:5e:d1:
5e:50:ff:dd:5c:b9:5f:5d:8e:b7:8d:99:7b:f5:c8:3e:24:ec:
43:e7:88:4b:d5:d6:ea:0e:ea:04:ec:78:55:28:d0:89:0c:44:
0b:b0:a6:1b:cf:cb:6d:33:a8:cb:03:35:d5:f0:3b:e1:68:c8:
b8:ae:d8:e4:b0:0a:5f:f9:01:fb:37:6b:ed:53:84:66:68:e4:
00:3d:9b:52:28:7e:34:27:81:e9:ef:bb:ad:6a:2a:3b:d9:d9:
23:6f:0f:1b:2f:15:c2:96:3b:54:c7:82:ad:ce:6e:89:58:aa:
7b:7f:c8:d4:9e:24:2b:8d:c4:5f:75:c9:93:5c:c1:82:bc:3e:
f3:13:67:18:5b:04:a2:3c:40:c1:9b:ee:d6:1f:5e:6b:5e:64:
ea:eb:1d:a6:d0:9b:30:79:fa:2c:0d:2e:19:13:eb:2a:a5:d0:
0b:0d:cc:b1:2c:0c:71:52:01:58:c5:fe:27:a5:8f:56:45:6e:
93:f4:20:6c:e7:85:12:10:68:cb:c0:e0:3c:8d:9c:d9:1c:4d:
c5:dd:32:00:02:51:11:20:b3:4f:99:d8:49:78:05:a1:ec:03:
95:27:a0:e1:4f:5b:96:2f:65:86:6d:db:4c:d6:73:8f:e6:04:
4f:53:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org