Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Q-S67GVUq2ONM21zhrhej_HVVUM.roa
File: Q-S67GVUq2ONM21zhrhej_HVVUM.roa (raw, json)
Hash identifier: isE29Yu2SOYhejdsizWp2QhsqZi+SGx6lCWKBSC3gjM=
Subject key identifier: 43:E4:BA:EC:65:54:AB:63:8D:33:6D:73:86:B8:5E:8F:F1:D5:55:43
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 02F5A979
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Q-S67GVUq2ONM21zhrhej_HVVUM.roa
Signing time: Sat 01 Jan 2022 16:03:36 +0000
ROA not before: Sat 01 Jan 2022 16:03:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137490
IP address blocks: 2a0e:46c4:200::/48 maxlen: 48
2a0e:46c4:101::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49654137 (0x2f5a979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 16:03:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43e4baec6554ab638d336d7386b85e8ff1d55543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:d0:5a:03:4d:1d:6a:82:70:22:80:c0:11:
6e:f7:21:de:ef:7b:5d:b6:6a:cd:8c:38:88:dc:81:
20:86:ee:02:78:3b:90:cf:08:4c:e2:a7:21:0c:af:
3e:01:5a:60:be:ff:2a:78:91:94:c6:2e:e4:66:ff:
91:c1:1c:aa:10:80:a4:e4:04:95:7c:47:45:2a:24:
0a:78:75:45:af:8b:40:a5:c4:f8:87:5b:e8:c6:eb:
9e:1d:59:b3:f4:ee:9e:b9:28:92:97:3d:0c:0a:6d:
62:e8:ff:fe:a6:8a:29:a5:a9:64:88:13:9c:f1:ad:
16:53:30:6d:b5:1e:f6:55:9c:da:79:fe:c5:b1:93:
01:ba:ad:31:38:1b:84:af:3b:b3:c1:4e:67:a1:eb:
8a:97:a2:e7:28:b0:67:81:7f:e2:ee:a0:6c:79:cc:
69:8c:e9:fa:3b:8b:62:22:84:f7:5c:7b:ba:9e:39:
d1:15:37:bc:c3:56:fa:6a:f1:d8:0a:d7:6a:21:60:
16:8b:81:51:c8:bd:04:07:65:68:83:39:e3:f5:af:
58:6d:cf:3d:c7:dd:b9:e7:9f:1e:89:40:36:66:c3:
f9:12:94:5f:c7:c2:ae:27:a7:b5:12:3c:08:4d:0a:
22:2c:03:1d:c9:d6:22:e4:11:55:a6:af:25:02:d2:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E4:BA:EC:65:54:AB:63:8D:33:6D:73:86:B8:5E:8F:F1:D5:55:43
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Q-S67GVUq2ONM21zhrhej_HVVUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:101::/48
2a0e:46c4:200::/48
Signature Algorithm: sha256WithRSAEncryption
09:8e:f0:29:c0:4c:3e:c7:d8:c1:ff:e4:d2:de:7f:74:7f:74:
72:e8:2e:fb:30:2c:cd:f5:41:e2:33:03:21:5e:d4:2f:fb:39:
8e:18:f5:a1:4b:e1:d0:68:9f:92:dc:62:fe:3c:9e:90:0a:b6:
3b:d4:d3:31:47:91:46:53:bb:1c:3d:47:f4:f7:e5:05:a1:76:
2a:14:8c:e5:d1:ba:11:93:1c:58:b8:29:4e:39:7a:76:97:da:
90:9a:38:ea:35:68:cc:f5:0d:1f:5e:28:89:82:54:c3:d3:74:
f8:88:f7:c8:6c:e1:7c:5f:a1:8c:86:75:05:78:47:55:bc:69:
9a:15:f1:a3:88:36:25:ef:96:52:d8:c4:40:26:1d:83:a3:1f:
15:f2:92:36:99:94:aa:5e:a5:0a:d7:df:9f:33:df:63:2a:f8:
a5:f6:96:86:69:4e:40:a0:88:31:f0:c7:19:68:fd:59:9b:c9:
73:e1:1f:c7:96:66:ba:f6:4a:19:5e:26:c6:ab:44:0c:5a:7a:
7f:e3:16:ae:50:83:46:02:0f:67:4a:cc:b9:4c:5b:27:94:53:
4c:cf:d6:b8:d2:97:b2:9b:f1:cb:1c:f9:3c:f4:50:70:d3:3b:
f4:35:54:dc:56:5f:9d:db:76:19:78:9b:ef:b3:21:cd:74:4a:
78:18:c6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:15 2024 by rpki-client on console-fra.rpki-client.org