Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6n1fPeupqvIAs-sEPoRebrCx_xQ.roa
File: 6n1fPeupqvIAs-sEPoRebrCx_xQ.roa (raw, json)
Hash identifier: ASq+tQ7JR6A2He4ck8GbNpVpkSTZrpNRd3tJAZetAg4=
Subject key identifier: EA:7D:5F:3D:EB:A9:AA:F2:00:B3:EB:04:3E:84:5E:6E:B0:B1:FF:14
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 08BEA86C
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6n1fPeupqvIAs-sEPoRebrCx_xQ.roa
Signing time: Tue 08 Mar 2022 22:15:12 +0000
ROA not before: Tue 08 Mar 2022 22:15:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50840
IP address blocks: 2a0f:5701:3200::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146712684 (0x8bea86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Mar 8 22:15:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea7d5f3deba9aaf200b3eb043e845e6eb0b1ff14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:52:c3:b9:d1:79:02:17:2e:d7:52:20:10:
5d:07:b9:35:68:c8:00:eb:98:6b:f1:3e:f6:c7:e5:
7f:ab:c5:33:cb:12:1f:6c:49:d1:b6:04:8d:8b:98:
0e:cb:97:46:a6:f8:d3:c3:80:e9:97:3f:24:6d:cf:
aa:85:5b:e3:85:80:55:7c:29:38:5e:bd:90:f7:57:
96:80:08:bc:88:9f:24:ec:bb:c1:ef:75:89:3a:bd:
d6:db:df:ee:f4:36:14:d4:cf:9a:cd:77:7b:8c:82:
a3:05:74:64:26:5f:73:c4:9c:08:ad:30:df:14:bf:
20:a0:a4:8e:91:51:73:ea:f7:e8:9f:34:a3:0f:3b:
6f:08:90:29:70:40:bd:83:62:72:e5:63:4d:1d:b6:
b3:05:e4:5d:9c:26:08:bb:2c:f8:81:32:6e:aa:08:
26:d9:ec:3d:5a:3c:82:0c:64:7d:0c:4d:a7:55:36:
4d:7f:6e:a8:5f:de:d8:ff:93:a3:d5:43:29:d5:29:
bd:ab:ec:e9:fa:fb:23:39:88:e8:8d:cb:14:60:32:
49:b1:a3:4d:6b:fa:85:8b:bc:e0:c4:a1:d3:06:56:
1a:bd:2e:a5:d3:bd:6c:32:a1:3d:ca:18:5d:86:9f:
21:70:3a:ed:a3:39:00:fa:19:de:ae:1d:54:a5:36:
f8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7D:5F:3D:EB:A9:AA:F2:00:B3:EB:04:3E:84:5E:6E:B0:B1:FF:14
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6n1fPeupqvIAs-sEPoRebrCx_xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5701:3200::/40
Signature Algorithm: sha256WithRSAEncryption
35:31:77:61:57:68:e3:83:20:aa:55:48:5b:55:5c:d4:f7:61:
f7:64:1a:4b:e2:52:fd:ba:cc:dd:56:c1:19:35:04:3e:c9:be:
54:b5:ee:85:fc:ad:c1:d7:69:8d:c1:98:3f:fa:49:af:90:12:
99:fe:58:5d:1d:99:51:72:40:ae:ef:b0:f9:47:25:be:6a:e0:
f4:17:42:1b:4f:69:a1:89:f7:f2:04:80:16:99:92:36:91:99:
70:dc:67:f1:6c:81:bc:19:14:28:5d:6a:c6:a8:d7:cb:79:68:
e6:a8:d6:bb:a7:61:bd:d3:34:41:33:75:9f:bc:b3:79:36:e7:
c4:60:97:73:23:4b:92:a1:7a:b8:a9:5d:c1:c4:ca:f5:72:c8:
06:c4:61:93:c9:55:97:74:f3:55:34:20:4f:98:32:45:1d:75:
94:32:9d:95:9a:4a:c7:c6:e5:ac:9d:56:24:cc:3e:74:83:fb:
a6:ec:b9:18:fc:cc:7f:1c:c8:1a:63:26:8d:07:a6:e9:99:75:
cf:2d:9c:cb:2a:0c:f0:cd:ed:66:23:f2:19:9b:4a:70:15:9b:
fc:f0:1f:a9:90:17:24:ae:94:bc:d2:71:9e:40:55:08:6a:7d:
59:ee:8d:95:9c:dd:77:f7:c8:a2:90:f2:d7:82:ee:11:46:02:
5b:19:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org