Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/gDirvfkvIA1NtCgdiljVcV7CfRQ.roa
File: gDirvfkvIA1NtCgdiljVcV7CfRQ.roa (raw, json)
Hash identifier: Ax6c0N9Olvr3fb2k2C1/IFFtXmZYX6mEUSeQ65hPePc=
Subject key identifier: 80:38:AB:BD:F9:2F:20:0D:4D:B4:28:1D:8A:58:D5:71:5E:C2:7D:14
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 116BF215
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/gDirvfkvIA1NtCgdiljVcV7CfRQ.roa
Signing time: Mon 30 May 2022 09:34:13 +0000
ROA not before: Mon 30 May 2022 09:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2a06:e881:73ff::/48 maxlen: 48
2a06:e881:9200::/48 maxlen: 48
2a06:e881:9201::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292286997 (0x116bf215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: May 30 09:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8038abbdf92f200d4db4281d8a58d5715ec27d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:73:87:21:79:12:c4:83:a1:07:ce:d8:79:
71:e6:0f:5f:19:0d:a9:b0:30:3f:43:fb:45:ee:f7:
5b:61:6e:ec:89:04:62:a4:b0:c7:42:3c:9f:09:a9:
26:33:63:fe:c6:92:8b:5d:32:9d:bc:d7:cf:68:9a:
a6:28:73:bc:dd:bb:f4:15:41:99:aa:26:fa:42:07:
cf:91:e0:2d:1b:5d:1d:82:6d:45:e2:b7:92:f4:46:
d4:ed:18:90:7b:03:31:71:04:22:74:95:2a:ec:d5:
da:93:3e:aa:80:60:d5:9d:68:ac:b4:a9:ca:ca:fd:
50:98:29:55:2e:50:b6:b7:f5:36:87:ca:c0:dc:6d:
c2:d8:5b:be:99:7a:01:a1:69:bf:ee:b5:b2:64:e7:
b2:28:48:29:e4:17:6a:53:6d:63:e6:a1:83:44:ef:
74:e4:d4:b3:90:e9:37:b3:7a:d7:f1:00:aa:a6:c5:
ef:21:3a:7c:a1:83:49:47:8c:a5:80:53:4d:c5:53:
eb:65:8b:85:ed:8b:bf:32:ae:9c:7e:2a:e5:01:0b:
c2:04:9f:55:70:c0:5d:4c:c7:77:ef:65:21:72:a0:
60:5f:3f:a5:36:b7:84:95:b9:5b:6e:35:d3:1f:3a:
01:fd:af:2c:36:26:52:3a:d3:16:6d:93:49:9f:50:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:38:AB:BD:F9:2F:20:0D:4D:B4:28:1D:8A:58:D5:71:5E:C2:7D:14
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/gDirvfkvIA1NtCgdiljVcV7CfRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:73ff::/48
2a06:e881:9200::/47
Signature Algorithm: sha256WithRSAEncryption
83:81:52:a9:aa:a5:b6:5c:e0:de:94:05:11:4d:9b:ba:c3:43:
f6:c0:42:32:05:d2:b2:b5:56:0f:c2:1a:c1:30:03:6d:08:26:
28:45:ef:55:e9:a4:1f:c2:81:18:80:f5:9e:cd:6a:55:82:8e:
d1:16:28:d7:4e:e9:92:51:e6:72:10:fc:78:86:b8:a4:a9:8f:
ba:69:2d:d1:0f:68:58:cb:73:ca:43:10:68:a5:a3:a5:3d:3e:
53:0b:66:a6:7e:59:72:77:51:63:c8:84:3b:ad:b0:ce:77:24:
45:da:27:24:f8:2a:94:b0:61:65:06:c2:da:f8:41:04:78:cd:
b9:da:4e:ea:dd:5e:b0:23:cc:e1:a2:f2:d6:54:6a:1d:34:0f:
5b:d6:1d:ed:b2:c9:3c:16:b6:16:2e:95:e9:70:0a:85:a3:ab:
9d:9e:14:14:fd:d3:cb:9e:72:df:61:19:4d:5f:8d:b1:aa:31:
f0:2a:8f:b5:a4:73:56:32:e8:0b:8e:e7:cf:90:1f:29:da:41:
df:3b:1c:ec:b0:60:1a:3a:df:21:d0:0a:cb:cf:c8:74:98:b0:
e6:10:99:ed:35:1a:d9:cc:35:6e:45:99:3a:2e:d0:7e:01:ab:
3d:b2:da:b4:0a:0a:01:83:e3:bf:28:84:63:70:fb:a3:33:e2:
e2:09:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-fra.rpki-client.org