Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/1-MG_QWw8rKhfJw9URWncjt66Do8.roa
File: 1-MG_QWw8rKhfJw9URWncjt66Do8.roa (raw, json)
Hash identifier: iAgG3CUtCtwz1YW9dJEmdzdT5jLQ4a/zhJT1dYCyZfo=
Subject key identifier: F8:C1:BF:41:6C:3C:AC:A8:5F:27:0F:54:45:69:DC:8E:DE:BA:0E:8F
Certificate issuer: /CN=b5b537918dd90251eb36538e7181ce933c7ef845
Certificate serial: 060D1C46
Authority key identifier: B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/1-MG_QWw8rKhfJw9URWncjt66Do8.roa
Signing time: Sat 01 Jan 2022 00:58:22 +0000
ROA not before: Sat 01 Jan 2022 00:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207394
IP address blocks: 2001:67c:25ec::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101522502 (0x60d1c46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b537918dd90251eb36538e7181ce933c7ef845
Validity
Not Before: Jan 1 00:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8c1bf416c3caca85f270f544569dc8edeba0e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:c5:3c:1c:52:48:45:d6:20:b1:1d:21:8f:
79:36:ed:53:1e:b6:4c:0f:0d:f5:87:b2:31:06:0d:
9a:6d:1e:f8:cf:7d:a0:c0:58:d9:85:06:57:17:3b:
d2:b9:8c:f2:af:91:86:20:91:55:77:9d:5b:ab:cf:
7f:65:1d:14:8b:c7:69:27:f6:84:38:e2:1b:57:7a:
9f:e0:ca:b6:ab:9f:f4:ed:ac:1f:76:27:69:53:9e:
ef:20:9a:1a:80:68:78:f6:47:8c:a5:9f:aa:d3:14:
67:b2:a7:4e:48:42:f1:b5:89:4a:ea:b3:b7:9f:c2:
50:06:6a:41:4c:bc:21:39:c4:39:33:c9:7f:e2:8a:
be:29:2a:a9:b3:33:4b:0b:4e:6b:79:61:ca:58:4b:
ed:ec:46:3c:e2:47:31:83:20:50:a1:ca:8d:53:6f:
a0:88:ba:18:93:52:ed:b4:d9:ad:25:da:c3:77:c0:
10:f7:88:0a:3c:75:d1:53:42:47:c6:03:db:16:87:
4c:e6:25:e4:49:ed:a9:fe:fc:b5:48:00:20:ef:97:
f6:72:16:73:fd:a6:dc:f1:d9:5f:6d:94:41:48:45:
22:37:21:8e:bc:75:32:24:37:f0:fb:4f:a9:ba:7f:
7a:b7:15:5c:b3:e6:ce:5d:23:3c:2e:7a:6d:37:79:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C1:BF:41:6C:3C:AC:A8:5F:27:0F:54:45:69:DC:8E:DE:BA:0E:8F
X509v3 Authority Key Identifier:
keyid:B5:B5:37:91:8D:D9:02:51:EB:36:53:8E:71:81:CE:93:3C:7E:F8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU3kY3ZAlHrNlOOcYHOkzx--EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/1-MG_QWw8rKhfJw9URWncjt66Do8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7486fd-3f81-4540-aaaa-0b3ed25f66e9/1/tbU3kY3ZAlHrNlOOcYHOkzx--EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:25ec::/48
Signature Algorithm: sha256WithRSAEncryption
81:11:10:a1:92:af:26:8e:9c:1b:15:03:65:b8:96:84:54:a6:
61:62:74:be:32:47:2c:b8:fd:28:0e:06:65:bf:50:7c:d7:f6:
23:80:9b:34:a4:d2:77:42:e5:cd:17:09:2e:53:2a:bb:46:c5:
75:38:9c:5f:e6:18:e8:68:2e:17:2f:df:83:ce:1c:c8:e4:fb:
aa:dc:c0:c4:fd:6a:1e:03:d1:a0:e3:d0:bd:f8:96:48:2d:ec:
7c:fa:69:67:43:78:77:57:96:f5:c0:2f:bc:1d:c2:17:89:3a:
4e:a7:1a:05:5b:f0:2e:14:b7:ca:be:74:f6:85:c2:f9:b1:99:
de:d2:43:84:59:07:63:fb:83:f9:f8:8b:4d:bd:ca:da:f3:ea:
1b:e4:9d:5e:a4:00:61:c4:f1:47:22:79:43:bb:1f:d1:74:c0:
27:e7:4e:b4:4c:24:ee:a4:de:d2:c3:67:45:c8:87:d7:2c:38:
84:11:8f:01:59:44:f7:53:c5:02:68:dc:b7:7d:62:13:42:73:
c2:eb:3e:d5:41:1c:a3:a1:2b:44:8f:b2:b6:31:88:96:81:9d:
a7:49:f7:66:30:0f:6b:85:f9:7c:71:82:c9:b3:78:47:99:c0:
33:a1:b3:b6:33:3b:b4:cc:e9:1e:ff:6f:c6:38:6f:9d:5d:64:
e8:1c:57:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:05 2024 by rpki-client on console-ams.rpki-client.org