Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/xTt6-KquvTfZ_n26XTfAqeZtpus.roa
File: xTt6-KquvTfZ_n26XTfAqeZtpus.roa (raw, json)
Hash identifier: HDRsaWmJjtjdAAlI6FiU62/p59eo6cNrWQK2zEw2opI=
Subject key identifier: C5:3B:7A:F8:AA:AE:BD:37:D9:FE:7D:BA:5D:37:C0:A9:E6:6D:A6:EB
Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial: 37641703
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/xTt6-KquvTfZ_n26XTfAqeZtpus.roa
Signing time: Sat 01 Jan 2022 08:59:26 +0000
ROA not before: Sat 01 Jan 2022 08:59:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16223
IP address blocks: 2a00:1210:fffd::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929306371 (0x37641703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Validity
Not Before: Jan 1 08:59:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c53b7af8aaaebd37d9fe7dba5d37c0a9e66da6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:9a:1c:cf:26:c0:ca:46:12:7f:c2:6e:c4:
cf:3d:65:3b:42:ed:66:c0:22:19:d7:38:2e:2f:b1:
b6:94:2f:01:da:5b:05:ab:4f:c7:b5:16:b5:a1:4f:
8e:fa:1a:af:ee:3a:43:61:34:e8:01:16:f1:6b:74:
bb:05:d6:f1:1b:c6:3c:9b:7b:36:95:b0:44:86:c2:
0d:08:0b:fd:b2:fc:90:d5:e7:81:3b:c6:ad:98:3e:
14:79:fa:3a:be:12:5d:5c:0d:2d:31:43:a6:31:14:
cd:78:8f:7d:93:0a:77:cf:0e:bb:7a:ca:05:f8:9e:
5c:9c:f6:e9:47:d2:38:be:05:6f:76:10:41:2c:7a:
d5:16:cb:b9:fb:61:2b:26:e2:2f:83:52:c6:de:48:
e2:d9:bd:c7:ee:8a:5b:08:6c:69:50:89:2e:16:9c:
88:86:89:e9:1d:3b:5f:62:92:b5:54:46:3f:61:5a:
2c:2a:90:cd:8c:72:da:96:f8:b0:a0:8d:72:42:3c:
70:99:92:24:c5:1d:6b:a4:67:64:eb:26:39:7e:32:
ef:27:7e:4c:b8:54:a9:a5:1e:8a:dc:38:4c:45:2f:
55:32:42:45:90:f1:d2:b3:ed:90:80:bf:c4:f2:80:
49:24:b5:1e:ae:4e:89:de:30:03:46:2a:6e:37:ed:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3B:7A:F8:AA:AE:BD:37:D9:FE:7D:BA:5D:37:C0:A9:E6:6D:A6:EB
X509v3 Authority Key Identifier:
keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/xTt6-KquvTfZ_n26XTfAqeZtpus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1210:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
09:d9:73:33:d8:86:9c:53:48:33:ee:41:ac:d4:8b:4b:8c:ca:
64:17:b9:ad:c1:ab:92:82:e3:c4:da:91:34:6e:a1:28:b0:6b:
7a:99:6d:93:7a:b2:c3:42:d6:83:ee:d8:da:a2:f4:cd:44:dc:
b6:5d:5d:6e:02:bb:2a:24:09:f6:c7:b0:72:53:2c:0b:55:30:
36:ec:da:78:6f:1b:c3:8c:b9:11:fc:db:e8:8e:fb:53:82:14:
e2:e5:24:88:9e:f6:76:d5:5a:ee:9f:b8:34:53:91:96:ed:04:
ad:dc:df:73:e1:fb:32:29:5b:6d:49:ae:40:fd:4d:84:20:c6:
86:f1:ff:ee:2d:4a:e8:83:48:72:c4:ab:38:d7:01:90:1c:02:
05:a8:aa:d8:20:99:0d:2d:04:6a:5a:4a:f2:95:27:0a:97:50:
40:d2:02:23:cb:68:6b:70:9e:33:3c:ae:70:5b:44:af:22:9e:
53:5e:c1:b3:b6:83:85:a1:ef:53:f6:0d:e8:2d:5a:bc:f5:f5:
b4:6b:73:e5:be:3e:b7:a8:37:e2:2f:b5:57:0f:9e:b6:17:5c:
98:80:6c:5c:7d:61:f1:68:db:81:30:d3:28:75:ee:47:b1:8b:
29:e8:74:0f:32:55:7a:8a:09:4b:58:1f:92:3a:9e:05:ec:b1:
c9:4d:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:04 2024 by rpki-client on console-ams.rpki-client.org