Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/6MmkshMnyHoFOzqA71iaZ2miYwM.roa
File: 6MmkshMnyHoFOzqA71iaZ2miYwM.roa (raw, json)
Hash identifier: YM44JgYtX3uP8G0QoQf1cOKEHv3nAazNPeIFLt5Ybdo=
Subject key identifier: E8:C9:A4:B2:13:27:C8:7A:05:3B:3A:80:EF:58:9A:67:69:A2:63:03
Certificate issuer: /CN=50bb4c781a5b393ff07fb405e528179f5ab87726
Certificate serial: 0A85957B
Authority key identifier: 50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/6MmkshMnyHoFOzqA71iaZ2miYwM.roa
Signing time: Sat 01 Jan 2022 01:57:20 +0000
ROA not before: Sat 01 Jan 2022 01:57:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1103
IP address blocks: 129.125.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176526715 (0xa85957b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb4c781a5b393ff07fb405e528179f5ab87726
Validity
Not Before: Jan 1 01:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8c9a4b21327c87a053b3a80ef589a6769a26303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:1c:6e:fe:c4:12:d9:59:57:8e:9b:3d:a8:
10:b8:3c:64:35:13:c8:21:fa:01:34:04:8f:84:08:
70:62:62:d3:91:54:66:53:bc:9d:95:bc:68:c2:7e:
4c:35:77:37:ce:a4:ca:89:b4:4d:89:d0:0a:88:95:
f4:c8:21:0a:e8:75:24:49:12:00:36:66:a9:8c:94:
8c:28:ae:b2:de:f1:a5:45:08:84:0a:f5:85:21:11:
a7:ef:86:ae:b6:df:4e:74:15:cd:36:31:d1:65:b7:
6d:8e:cb:1e:b8:a1:c3:65:cf:b3:fa:dc:43:83:fd:
23:69:14:72:f7:e1:0c:68:d2:c5:37:ab:37:41:69:
0d:72:55:a0:3c:e8:a8:22:ff:05:19:54:ac:c2:e8:
14:b9:d2:c2:47:c5:57:5d:3a:49:f3:bd:37:c3:e2:
ac:2a:72:5d:53:5a:cb:5a:cd:67:d6:18:e1:03:23:
a3:4f:7f:7d:a3:44:c1:34:5e:f0:36:a4:44:53:6e:
09:4c:84:1f:93:cc:03:5b:b6:a6:0f:c9:8e:54:2b:
33:0c:65:96:e9:90:82:e1:6e:b4:ea:20:52:cb:9a:
94:74:7b:69:ae:8b:77:c6:52:6d:6c:57:58:1b:97:
9a:4e:49:98:35:65:cb:42:5e:f3:55:fd:cf:a8:14:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C9:A4:B2:13:27:C8:7A:05:3B:3A:80:EF:58:9A:67:69:A2:63:03
X509v3 Authority Key Identifier:
keyid:50:BB:4C:78:1A:5B:39:3F:F0:7F:B4:05:E5:28:17:9F:5A:B8:77:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULtMeBpbOT_wf7QF5SgXn1q4dyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/6MmkshMnyHoFOzqA71iaZ2miYwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b138e-1e19-4c7d-8ca4-b87f91c29b9e/1/ULtMeBpbOT_wf7QF5SgXn1q4dyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:29:58:4a:dc:92:4b:dc:1c:37:46:1c:c4:6a:6c:a6:88:aa:
56:ad:c3:65:34:04:57:8b:2c:dd:19:36:a1:76:6d:7e:5a:91:
a6:e0:70:15:c5:6c:50:64:b5:3a:df:e1:67:8c:ac:97:b6:c1:
8c:24:ef:c0:bc:07:db:c9:5d:48:cb:f7:2b:e0:ff:c3:74:be:
a9:e4:20:d4:79:38:f3:1f:9a:ce:4e:95:8c:e0:fa:39:d4:f8:
bb:fa:f9:7c:41:3e:e6:6f:dd:f0:6d:a0:74:92:e0:04:01:60:
48:52:25:2f:9b:3f:ed:f0:ab:c6:dd:58:5c:13:19:05:52:6a:
35:6d:df:09:43:29:21:34:ab:36:df:4c:ec:1f:95:2d:29:88:
a6:75:41:93:57:cd:26:6a:a6:2f:58:c7:14:88:98:d7:8a:dd:
21:72:3d:13:b6:55:25:a8:2c:8d:fc:b2:17:a9:7d:e0:95:c2:
72:a7:ec:96:19:c7:ad:83:01:f8:c0:4c:c4:5b:92:2a:dc:ca:
4b:77:87:1a:a7:1b:f0:5a:6c:2a:0b:d7:08:61:af:64:f0:5a:
8c:e1:46:dc:b1:59:e7:9c:cb:6f:0e:c3:8e:5d:37:e9:e4:d2:
c5:97:f3:8a:d5:a8:cd:5f:d1:33:6e:f0:7d:3d:3a:d4:67:f5:
98:17:48:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:19 2024 by rpki-client on console-ams.rpki-client.org