Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/1-khJ6m0h8ZRBWTHyk3CcgtS6PgE.roa
File: 1-khJ6m0h8ZRBWTHyk3CcgtS6PgE.roa (raw, json)
Hash identifier: /FfnJ5w/+JETeq+MAue5Ol2iWRJ20UOYu7lwq7DhAlo=
Subject key identifier: FA:48:49:EA:6D:21:F1:94:41:59:31:F2:93:70:9C:82:D4:BA:3E:01
Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial: 14554196
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/1-khJ6m0h8ZRBWTHyk3CcgtS6PgE.roa
Signing time: Tue 18 Jan 2022 08:05:36 +0000
ROA not before: Tue 18 Jan 2022 08:05:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202623
IP address blocks: 2a06:98c0:3604::/48 maxlen: 48
2a06:98c0:3607::/48 maxlen: 48
2a06:98c0:3602::/48 maxlen: 48
2a06:98c0:3605::/48 maxlen: 48
2a06:98c0:1400::/48 maxlen: 48
2a06:98c0:3603::/48 maxlen: 48
2a06:98c0:3606::/48 maxlen: 48
2a06:98c0:1401::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341131670 (0x14554196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Validity
Not Before: Jan 18 08:05:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa4849ea6d21f194415931f293709c82d4ba3e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:db:a6:f3:ed:8f:1e:22:e0:9d:21:c1:98:cf:
74:f3:0e:44:53:25:13:38:65:47:23:e9:6b:15:36:
20:eb:72:bf:9c:d6:3e:c1:bb:81:40:c0:06:d1:4e:
ca:3e:6c:2b:ae:b2:73:75:b6:57:59:1a:8e:29:8b:
a7:dc:f3:40:f3:40:56:d2:22:0c:f7:31:9f:77:1f:
6c:ca:16:47:7b:eb:a0:7f:de:4d:aa:9f:db:a0:d5:
1a:c5:4a:fa:e6:d4:25:f5:29:49:26:6b:d0:4f:86:
08:d4:5a:ca:83:5d:52:4b:f3:84:62:a1:fb:ea:f5:
88:39:10:b1:df:d1:5e:de:f9:78:53:6c:d3:d7:90:
6f:04:c8:79:76:9b:d1:9a:8e:16:8c:97:f8:50:ef:
40:cf:2f:91:a7:b2:fc:18:cc:b0:6b:3a:01:3c:67:
64:8e:63:86:c8:6a:04:bb:43:ba:a9:97:0a:b8:9b:
56:a0:d5:40:38:95:55:6c:6e:52:88:a1:f0:4d:af:
e3:ac:0a:5e:19:32:b7:c7:c2:ed:f0:0e:e8:bb:07:
cb:4b:a8:c7:77:9b:40:61:26:a7:13:f6:9f:be:3a:
7e:84:35:0f:a3:7e:37:e9:fc:95:a0:1a:58:e4:e4:
d8:c0:41:e9:d8:56:9f:48:26:1b:ab:93:86:81:7d:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:48:49:EA:6D:21:F1:94:41:59:31:F2:93:70:9C:82:D4:BA:3E:01
X509v3 Authority Key Identifier:
keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/1-khJ6m0h8ZRBWTHyk3CcgtS6PgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:98c0:1400::/47
2a06:98c0:3602::-2a06:98c0:3607:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2c:bc:7f:d0:0b:38:05:dc:82:6b:ab:53:8d:1c:7a:f3:38:ae:
70:32:53:d0:d6:5c:3d:7a:3b:29:30:6c:9f:32:df:00:2d:4c:
e2:8f:25:33:a6:0e:33:2e:21:79:31:af:24:88:ce:1d:87:01:
0e:b4:dd:08:4a:f3:25:1f:2b:db:88:2f:57:9f:e5:6c:a7:aa:
d0:18:df:3d:c7:44:e8:66:e2:ce:0b:48:09:6b:ff:0c:48:a2:
57:07:5d:4a:3b:bf:79:c2:67:12:4f:69:50:05:d4:50:29:c1:
cd:fc:a6:04:0b:f4:ba:56:09:61:84:42:84:57:ce:7a:05:52:
d3:c9:0d:d3:73:84:9e:93:4d:1f:a5:8c:b5:fc:d5:a7:1b:29:
c6:b3:73:fd:da:44:09:ae:b2:09:48:1c:0f:b5:83:0b:5b:10:
e5:5f:b4:f5:22:85:93:c5:5d:b1:fe:6d:7c:f1:41:65:73:87:
ad:db:ab:24:0d:f3:6a:9a:d5:f5:fa:73:20:69:92:9c:28:91:
44:87:fd:64:a9:67:4b:c0:d2:23:0f:f9:11:d9:98:af:93:5a:
b5:a5:38:96:c1:78:18:e8:45:cd:b5:d3:58:c0:13:79:50:2f:
b6:77:5a:ae:7a:6f:79:a5:10:bd:53:07:65:6d:c1:1e:5a:91:
9b:af:c8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:48 2024 by rpki-client on console-ams.rpki-client.org