Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/zHJBm6nJ79KL_GVH1ZfTzPR3dp0.roa
File: zHJBm6nJ79KL_GVH1ZfTzPR3dp0.roa (raw, json)
Hash identifier: HT3/tGjsyqT/ZzYfWWrCXdvLzSo5pxhnpZBaRP9xcmg=
Subject key identifier: CC:72:41:9B:A9:C9:EF:D2:8B:FC:65:47:D5:97:D3:CC:F4:77:76:9D
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 07C0DF3F
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/zHJBm6nJ79KL_GVH1ZfTzPR3dp0.roa
Signing time: Sat 01 Jan 2022 15:02:50 +0000
ROA not before: Sat 01 Jan 2022 15:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60915
IP address blocks: 2001:6d0:4004::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130080575 (0x7c0df3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 15:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc72419ba9c9efd28bfc6547d597d3ccf477769d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:70:6f:12:26:f2:40:04:fb:99:a7:94:0f:
78:da:43:8a:82:54:b2:94:ae:69:55:46:82:37:be:
b4:82:2b:d8:a1:47:18:63:63:36:c5:8a:91:8f:cc:
f9:d3:d0:60:e3:16:a7:17:7d:14:ef:55:8b:fe:0d:
e9:a1:79:0f:77:77:29:56:1c:f1:92:a7:28:8e:ce:
ac:db:3f:0a:bd:35:98:28:a5:bb:ac:bc:dd:eb:5a:
d8:dc:92:55:a7:f9:3d:6f:93:0c:f6:bb:90:32:51:
13:f9:59:83:0c:fa:06:70:85:c5:b9:ca:f7:ca:cb:
57:62:89:12:4e:25:b0:51:ba:0d:bf:50:be:f6:1b:
c1:e2:2d:b9:66:d3:d3:89:af:60:51:e9:f1:10:d2:
87:a0:b6:f6:65:2b:a8:04:8c:7c:64:18:3c:9a:1d:
b2:72:3d:fd:fa:77:83:ff:b4:fb:69:ca:06:22:17:
2c:5a:eb:4e:77:4c:91:79:91:8d:f7:4d:c1:9d:d3:
c6:ec:f0:0b:03:17:aa:eb:f2:65:69:40:be:16:ea:
cb:5b:3e:ff:fe:34:bf:90:2e:2a:c1:76:5d:77:ee:
07:69:55:b9:ae:29:b9:58:2d:3b:52:27:8a:16:69:
b5:0b:64:5d:7a:80:59:4d:ff:67:16:ad:65:1f:38:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:72:41:9B:A9:C9:EF:D2:8B:FC:65:47:D5:97:D3:CC:F4:77:76:9D
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/zHJBm6nJ79KL_GVH1ZfTzPR3dp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:6d0:4004::/48
Signature Algorithm: sha256WithRSAEncryption
8a:54:95:f8:ff:48:b0:17:9f:1b:55:b9:d5:6e:9b:7c:8c:0c:
c5:f8:5a:7d:28:35:1e:c2:b4:38:f6:f7:54:e8:ae:d6:11:82:
3a:76:f3:50:75:9a:8a:78:fd:fc:0e:78:70:d6:8c:37:fe:f9:
b1:2c:8b:67:f2:40:63:82:27:1e:8c:3b:75:d4:7a:5c:ea:97:
93:64:e4:c5:1a:b4:aa:ae:c8:f5:49:f7:8d:a2:47:27:a9:0a:
e4:5c:b7:76:62:38:2b:75:53:82:a3:87:14:c8:dc:9c:fb:1c:
55:90:46:31:a5:80:51:2b:ad:10:3b:0b:ec:b1:8d:50:23:9e:
d7:9f:27:dc:32:06:1c:2b:b2:3d:1a:05:ba:d6:f6:e5:1f:de:
97:86:24:17:4e:0c:21:41:41:8c:f1:5f:fa:45:e4:73:4f:04:
55:d6:69:9d:ae:89:ee:ce:6f:c6:fe:68:be:69:46:4e:f3:ce:
90:05:5a:ed:a9:32:ac:28:c9:ab:4a:64:b2:48:a6:49:dc:eb:
b3:8a:9d:51:f6:49:2f:d6:b0:1e:26:9d:6a:4b:09:b5:41:95:
5a:0c:53:1a:f0:63:48:9f:83:78:da:0a:0d:b0:64:79:09:f1:
76:dd:0b:c9:e5:a9:d8:2c:2e:9d:95:95:2f:1d:dd:47:c3:89:
84:61:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:51 2024 by rpki-client on console-fra.rpki-client.org