Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/3qT9GmstK-7UgJl2e70V30VPnQM.roa
File: 3qT9GmstK-7UgJl2e70V30VPnQM.roa (raw, json)
Hash identifier: GXWBYTB4lQNdo/Sg+ci869yjCIxwHYXCop757VHsB+g=
Subject key identifier: DE:A4:FD:1A:6B:2D:2B:EE:D4:80:99:76:7B:BD:15:DF:45:4F:9D:03
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0810DED0
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/3qT9GmstK-7UgJl2e70V30VPnQM.roa
Signing time: Sat 01 Jan 2022 06:55:53 +0000
ROA not before: Sat 01 Jan 2022 06:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208814
IP address blocks: 2a0f:5707:aa10::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135323344 (0x810ded0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 06:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dea4fd1a6b2d2beed48099767bbd15df454f9d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:df:71:90:ab:58:82:65:8f:13:33:4b:11:50:
ab:54:9d:64:4a:a1:2b:5b:07:b5:01:8b:ee:e0:d3:
c2:63:b1:4a:58:0d:ed:2b:1f:fd:99:24:5a:39:5c:
d4:91:d8:5e:f2:f2:d5:1f:b0:0c:eb:e5:89:e9:f1:
88:18:1e:95:66:1c:ea:f6:7c:32:d4:09:4c:2e:51:
da:f4:98:22:80:89:90:93:5d:d0:2d:93:f7:e2:de:
bb:ae:cb:90:69:9d:c6:15:3a:c0:37:4c:98:de:8a:
a4:70:a1:53:f9:97:c4:4c:8d:c8:53:d8:3f:dd:f0:
f9:90:df:b6:94:e3:72:9e:ef:03:e5:1d:47:68:bb:
77:c5:b1:82:a0:43:ca:b2:e9:c9:cf:b6:f0:d7:94:
80:10:70:e3:4a:5c:1f:ea:d3:e0:3f:4d:69:50:ca:
2b:f4:b5:a0:74:f5:d0:f8:16:3b:64:62:4d:55:aa:
9f:82:12:a9:83:b0:2e:03:fb:af:12:7a:87:30:19:
ca:f3:14:89:3e:30:69:de:e2:f9:ca:db:a1:a7:b5:
04:21:3c:48:92:74:1f:4e:b0:2e:fa:cf:11:68:8a:
7b:fb:3d:be:74:7b:40:50:73:67:65:ee:50:dd:04:
85:9a:35:6e:f3:88:18:44:b8:aa:3b:08:6f:37:d5:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:FD:1A:6B:2D:2B:EE:D4:80:99:76:7B:BD:15:DF:45:4F:9D:03
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/3qT9GmstK-7UgJl2e70V30VPnQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aa10::/44
Signature Algorithm: sha256WithRSAEncryption
7f:1b:f0:c2:a4:d9:bb:2b:53:be:60:13:89:e8:5e:b6:5d:0f:
60:90:46:d7:41:9d:3a:de:15:8f:1d:e1:87:d7:2b:d0:f4:d5:
01:63:8e:fd:a9:bf:4d:60:43:91:56:4f:ef:65:7f:ac:e4:4f:
cd:e7:77:64:ff:1b:47:42:59:8d:45:ae:67:35:ef:cc:58:f4:
c3:c0:47:15:a3:2f:88:34:73:49:eb:bb:51:ab:f2:7d:e0:e9:
94:37:00:76:36:4e:c6:72:bc:ce:1c:fc:22:ef:cd:5c:96:be:
fd:26:65:20:05:97:89:5b:d8:44:d0:6e:d2:69:18:88:21:1b:
96:ce:f4:25:e8:24:3a:15:4b:10:b8:74:c7:aa:2c:c0:7c:de:
bf:99:51:59:c1:69:65:87:38:cc:dc:18:b5:4a:0b:08:3c:40:
89:0d:79:d1:0f:92:16:21:f9:5c:03:7a:30:43:74:77:2e:87:
3b:99:62:eb:4d:50:69:54:a4:53:4e:5e:95:a9:b8:e0:92:9b:
06:e3:4f:02:57:2d:03:cb:a7:14:d5:43:c0:20:49:bd:b9:55:
57:56:91:c9:a6:ad:47:42:0b:46:0c:3a:29:18:a8:85:4d:db:
c0:73:cc:d0:f4:cf:9d:43:3c:2a:ee:c6:3e:d6:b6:5a:c5:61:
a7:10:a5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org