Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/SYtm0Pf-tfedF7Q1KhwK-wT7-xg.roa
File: SYtm0Pf-tfedF7Q1KhwK-wT7-xg.roa (raw, json)
Hash identifier: qQaw8zSn9t3+FjafHDCcK+1tf9fD/7nl8ttpIR32ID8=
Subject key identifier: 49:8B:66:D0:F7:FE:B5:F7:9D:17:B4:35:2A:1C:0A:FB:04:FB:FB:18
Certificate issuer: /CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Certificate serial: F568
Authority key identifier: C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/SYtm0Pf-tfedF7Q1KhwK-wT7-xg.roa
Signing time: Fri 01 Jul 2022 08:11:02 +0000
ROA not before: Fri 01 Jul 2022 08:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204881
IP address blocks: 2a12:fd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62824 (0xf568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Validity
Not Before: Jul 1 08:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=498b66d0f7feb5f79d17b4352a1c0afb04fbfb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:ce:7b:61:ec:d2:ad:6d:21:10:6a:dd:1a:
4b:2f:28:ff:81:28:56:44:ea:e0:ef:f9:6d:12:d8:
70:58:e6:8f:6d:1f:7c:8a:06:34:ac:de:94:b4:f8:
5c:79:96:ca:8b:8e:7b:7f:36:cb:4e:00:04:84:38:
1f:d4:16:eb:35:94:d8:43:8b:ba:34:11:8f:46:41:
87:02:49:fb:c9:8b:ec:22:e5:a5:71:9d:52:1b:9f:
9a:d7:38:61:14:96:de:4c:59:a7:f1:a7:43:9c:f0:
b3:ee:32:f9:1e:88:cd:96:c5:9d:ee:99:f1:1f:f0:
e7:41:d1:3d:b4:81:0d:4f:7b:3f:97:b9:36:92:cf:
f6:e3:6d:93:8c:0f:63:b2:36:89:62:b0:ba:71:60:
17:4c:81:94:ce:37:62:b9:76:10:1b:9e:6e:ae:55:
37:96:d1:69:42:06:cd:5d:c1:02:b5:2f:ff:03:03:
61:2d:98:7d:46:0c:4a:36:42:9f:a2:03:9b:e2:72:
02:70:e2:a3:d0:66:20:ba:b5:6f:a8:b6:c0:bb:45:
9c:85:86:ba:02:84:b0:75:de:db:8c:44:06:26:db:
10:3e:cf:66:40:69:4d:d3:b8:92:bd:6a:1e:93:1c:
b7:10:60:f7:93:c6:a7:a2:b4:86:f2:df:73:ab:86:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8B:66:D0:F7:FE:B5:F7:9D:17:B4:35:2A:1C:0A:FB:04:FB:FB:18
X509v3 Authority Key Identifier:
keyid:C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/SYtm0Pf-tfedF7Q1KhwK-wT7-xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
89:10:b3:db:c9:22:54:25:a5:84:a9:af:57:df:f9:de:84:c3:
f6:19:35:98:72:54:74:c2:b5:87:14:f1:b7:79:6f:84:a9:8b:
90:51:07:9f:41:69:6c:49:1f:d6:f4:b4:10:a9:a1:8f:74:36:
24:86:ee:2c:30:f5:fb:cb:4e:70:9e:88:17:9e:84:02:6a:27:
bc:3a:0b:33:99:8e:8d:98:78:c7:50:f4:4e:eb:c1:b0:ce:60:
7e:a3:d3:6a:eb:79:a6:dc:e9:cd:4b:c5:49:c9:a4:15:0f:c7:
9c:c4:64:4a:78:6b:da:e5:09:7c:9c:e6:8a:a9:39:69:d5:80:
dc:a4:79:23:f6:99:74:25:01:bb:a4:3b:af:23:d0:31:e6:8a:
03:68:84:2b:ee:b8:da:c8:6a:83:7f:a8:ab:ea:e1:a3:98:d3:
13:64:b8:e5:00:8a:b8:52:82:02:8c:ff:2d:22:01:f5:7b:70:
4c:6f:45:0a:67:90:95:1c:b2:32:d5:d0:5e:f4:4d:3c:18:c5:
93:e5:0d:9f:ba:38:1b:b6:32:51:e0:81:fb:16:c8:43:6a:ad:
96:94:8c:59:2e:26:78:1a:f9:13:bf:2b:e3:1d:c8:ea:bb:b4:
e3:ad:db:af:8a:19:10:e9:e6:18:fa:80:e8:2b:ba:54:48:31:
db:ec:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:59 2024 by rpki-client on console-fra.rpki-client.org