Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/eEEE_Ikbx4rQFTrg2BXFDlUzTdI.roa
File: eEEE_Ikbx4rQFTrg2BXFDlUzTdI.roa (raw, json)
Hash identifier: ePHr18S4XTcIstP1/F9ZUf4aZM757vWLR4bhOmPUGTw=
Subject key identifier: 78:41:04:FC:89:1B:C7:8A:D0:15:3A:E0:D8:15:C5:0E:55:33:4D:D2
Certificate issuer: /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial: 20939919
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/eEEE_Ikbx4rQFTrg2BXFDlUzTdI.roa
Signing time: Sat 01 Jan 2022 16:11:25 +0000
ROA not before: Sat 01 Jan 2022 16:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2119
IP address blocks: 2001:1400:ffef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546543897 (0x20939919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Validity
Not Before: Jan 1 16:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=784104fc891bc78ad0153ae0d815c50e55334dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:e2:20:a1:64:91:bc:02:d6:24:93:42:76:
54:cd:17:2e:5e:de:8b:78:f4:e9:b3:97:94:ff:37:
f9:9c:42:19:26:b9:a6:9c:28:8e:3e:f5:a1:99:cf:
36:b8:0f:6a:99:e0:34:e8:68:5e:e8:72:69:42:50:
a5:65:a7:79:ca:eb:a9:b0:e1:a4:2f:b9:51:d2:df:
d3:7d:82:c7:da:e1:5b:92:df:77:de:03:72:34:46:
09:fe:ab:d3:ab:fc:34:8f:e4:2d:44:66:cf:cd:04:
56:f3:ee:18:5b:36:1f:33:d7:fb:49:22:9f:ee:2b:
0d:4d:ef:e2:2e:22:b0:01:c1:8b:0c:c7:1e:df:48:
da:f1:9f:90:34:17:36:44:c1:c7:56:33:0c:cf:89:
ea:b3:27:68:b9:9b:28:3f:fb:db:f8:8d:15:ac:29:
2b:eb:b7:cf:8d:67:7a:f3:8c:58:c2:66:27:df:01:
10:91:64:1a:95:48:58:8b:e4:4d:59:c0:2e:de:82:
21:89:53:42:be:2a:04:cf:4f:a2:6e:1d:82:56:09:
83:43:12:42:ae:b1:bc:98:cb:85:56:51:4c:ba:4c:
b4:da:84:69:46:5b:12:d8:e8:83:45:23:a0:67:ec:
85:80:59:74:e2:8d:07:10:ac:1a:5e:3a:b4:ad:ce:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:41:04:FC:89:1B:C7:8A:D0:15:3A:E0:D8:15:C5:0E:55:33:4D:D2
X509v3 Authority Key Identifier:
keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/eEEE_Ikbx4rQFTrg2BXFDlUzTdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1400:ffef::/48
Signature Algorithm: sha256WithRSAEncryption
61:a4:6d:93:c1:75:59:d5:f9:75:8f:e2:0c:d8:59:3e:2f:46:
23:08:26:d2:bd:8e:2f:d6:4c:57:36:b8:20:21:63:2e:93:e4:
32:cf:57:56:04:5d:9a:fe:9f:00:c3:f0:82:1b:49:8d:3d:93:
c3:4b:38:49:0c:fc:cd:be:02:21:95:b7:4e:2e:9f:cb:64:7c:
ef:e3:7b:d3:90:0f:55:44:a5:d7:a7:90:e9:7b:e5:61:88:24:
9c:fc:1a:82:72:cb:ac:96:9e:9b:62:02:79:4a:52:46:62:1d:
d0:2c:5c:8c:8d:15:5a:0c:83:fa:ee:06:18:aa:5c:d5:f9:d5:
8b:df:9a:b8:8f:98:06:fa:76:2f:69:23:38:55:94:55:da:3f:
48:fa:47:ae:77:ad:44:21:25:cb:08:37:52:b2:e9:19:42:e2:
8f:e6:61:f3:52:a3:f6:e4:f6:71:24:4c:24:01:dd:80:7f:cd:
55:5c:84:f9:66:c4:87:78:46:58:1f:9b:f4:d5:75:54:3c:0e:
b9:f2:50:32:32:46:ec:4e:ce:b5:d6:d0:48:70:d3:1d:bd:51:
19:57:d6:f6:d5:b0:db:cd:13:30:cf:91:ab:cf:8d:1b:be:10:
8b:6d:da:39:3f:be:78:4f:38:02:d1:82:24:05:ff:22:8d:61:
24:e0:75:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-fra.rpki-client.org