Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/M4oa5gha5j2fMYa4wFzfEFHym3Y.roa
File: M4oa5gha5j2fMYa4wFzfEFHym3Y.roa (raw, json)
Hash identifier: Onf43nB6OsQZGGmY9N9SrphgrVmp2pwlQJfFHhsffkc=
Subject key identifier: 33:8A:1A:E6:08:5A:E6:3D:9F:31:86:B8:C0:5C:DF:10:51:F2:9B:76
Certificate issuer: /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial: 0C9DAEE4
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/M4oa5gha5j2fMYa4wFzfEFHym3Y.roa
Signing time: Tue 21 Jun 2022 09:06:44 +0000
ROA not before: Tue 21 Jun 2022 09:06:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200306
IP address blocks: 2001:678:7e0::/48 maxlen: 48
2001:67c:2c40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211660516 (0xc9daee4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Validity
Not Before: Jun 21 09:06:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=338a1ae6085ae63d9f3186b8c05cdf1051f29b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:25:15:10:a8:99:88:69:f0:92:71:41:03:
ad:ff:eb:f8:91:5c:15:a0:df:ab:ea:53:a6:e3:cc:
fc:c7:1c:4a:c0:da:bc:8e:99:28:18:37:ec:fa:57:
d5:60:4f:bc:dd:ce:1d:20:a9:f3:c7:9b:bd:a2:a7:
74:16:13:10:81:3b:bc:f1:be:02:9d:44:b4:af:26:
83:c6:a5:67:d6:bd:89:49:da:84:ef:21:bb:fe:b7:
22:05:2e:5e:45:cb:36:2b:05:ef:d3:95:c6:a3:d7:
8a:44:9d:2e:43:0b:77:dd:b4:4e:42:85:32:a4:e6:
7a:67:e0:b5:0c:b1:18:5c:f8:d8:4b:e7:c5:a1:b9:
63:2d:4c:0f:47:36:c2:fc:c7:49:48:d7:ce:95:a4:
c6:b7:d6:6d:10:40:1e:51:56:9f:ed:f3:37:2b:c4:
45:8c:bd:f0:5c:3c:a5:f0:bf:4e:70:9b:59:eb:65:
63:39:9b:aa:d1:49:22:aa:03:e2:5a:a9:20:d0:37:
6f:34:e0:ce:7a:a9:38:85:ef:59:a9:15:cb:c4:a1:
86:bb:65:a3:61:1e:01:d8:2a:8d:92:a3:33:2d:f8:
67:8a:4d:17:d2:2a:c4:db:61:ee:4c:51:79:04:1c:
e6:cf:18:35:e7:5f:21:5e:e5:a6:d6:92:b5:30:b1:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8A:1A:E6:08:5A:E6:3D:9F:31:86:B8:C0:5C:DF:10:51:F2:9B:76
X509v3 Authority Key Identifier:
keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/M4oa5gha5j2fMYa4wFzfEFHym3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:7e0::/48
2001:67c:2c40::/48
Signature Algorithm: sha256WithRSAEncryption
8a:b5:64:2a:ab:73:6f:ea:ec:24:04:6d:64:79:4d:72:fa:8b:
eb:3d:6b:0f:5d:0b:f2:f2:e3:e9:2e:d2:a4:57:ea:ee:78:40:
c3:ef:24:84:b5:3d:3d:56:b1:59:14:74:80:ca:06:83:fa:1a:
b0:61:f5:67:09:c7:14:6f:f7:9b:eb:aa:a6:24:d2:1a:e0:d4:
6f:50:d9:76:fd:d1:a6:7a:62:39:92:92:5d:76:0d:39:79:b0:
3b:b6:4e:af:17:58:b8:c2:03:ca:01:4d:ea:b4:96:bc:41:f6:
f4:72:17:c2:a2:98:84:49:e3:75:78:9a:51:72:d5:9a:ec:a9:
ca:5c:4e:54:d2:9d:ef:1b:95:f5:32:05:8a:76:20:74:33:b0:
40:56:9a:f6:df:95:39:7b:80:44:f0:ae:f1:96:d6:6e:be:1b:
d9:62:0c:09:1a:b7:9c:44:c2:d7:16:06:eb:fc:c6:4c:77:c3:
fc:07:57:f6:e8:33:68:a6:1a:ce:d6:8e:d5:85:2a:39:ed:c4:
69:49:bf:6c:97:44:ff:86:79:15:f9:23:34:84:bb:a4:f5:20:
08:71:bf:58:71:9a:8f:86:23:36:df:b1:8b:67:84:06:e4:d1:
f5:ce:ef:6a:be:14:1f:cc:3e:09:53:64:94:1a:47:9b:34:58:
30:73:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:24 2024 by rpki-client on console-ams.rpki-client.org