Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/C9ND1osTnX9JQ3z5aiGACmlH0k8.roa
File: C9ND1osTnX9JQ3z5aiGACmlH0k8.roa (raw, json)
Hash identifier: d4CFPl0ef6/Gvt/9mf8LSxFqJpV6BO8qrqOntn3Sa6c=
Subject key identifier: 0B:D3:43:D6:8B:13:9D:7F:49:43:7C:F9:6A:21:80:0A:69:47:D2:4F
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 081BFC05
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/C9ND1osTnX9JQ3z5aiGACmlH0k8.roa
Signing time: Sat 01 Jan 2022 06:55:58 +0000
ROA not before: Sat 01 Jan 2022 06:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212049
IP address blocks: 2a0f:5707:aaf0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136051717 (0x81bfc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 06:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bd343d68b139d7f49437cf96a21800a6947d24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6f:83:ea:37:c7:7a:b8:94:58:5f:0d:54:55:
47:45:6d:16:f4:3d:55:2d:40:ee:78:49:89:14:71:
e1:b6:5b:9d:2e:21:52:0c:41:2b:b1:5e:d6:bb:7b:
11:35:2c:a7:73:b4:91:8e:bf:3d:6e:4b:95:07:7e:
c6:e1:b1:38:84:b7:88:75:e4:ea:32:69:8d:a0:20:
59:6f:a5:05:ef:6b:43:19:7d:2d:b5:bc:23:06:da:
b7:20:10:13:14:a8:08:cd:74:df:dd:35:60:51:37:
2e:ad:06:fe:39:47:3e:e4:e1:ee:b9:46:34:55:8b:
70:da:4a:ca:9b:c1:4c:9c:58:69:76:77:f2:af:bc:
30:f6:5f:81:63:94:fa:50:9b:1e:0b:05:ba:e1:b6:
5a:2b:55:22:1a:52:c0:9d:04:4b:09:7f:ec:d9:55:
48:84:5a:80:dc:1e:00:83:a3:f9:60:1b:3e:45:5f:
53:83:95:80:d8:05:63:20:36:b1:00:9c:48:4b:2e:
fa:59:e6:d7:ea:d3:cf:b5:03:c4:eb:58:86:40:bc:
bd:44:1e:7e:e3:27:4c:b3:bf:03:db:25:b9:5f:b9:
3f:15:96:6f:9c:36:b7:92:8a:d7:ff:78:45:e1:3b:
46:eb:bd:0d:16:68:07:bf:2c:eb:f8:f4:db:e1:62:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D3:43:D6:8B:13:9D:7F:49:43:7C:F9:6A:21:80:0A:69:47:D2:4F
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/C9ND1osTnX9JQ3z5aiGACmlH0k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aaf0::/44
Signature Algorithm: sha256WithRSAEncryption
1a:24:93:fd:8b:20:7a:2c:85:0d:bf:af:f5:ee:27:28:53:e7:
f6:4b:de:3d:ff:88:b4:1f:00:ad:1a:7d:8a:4b:94:64:90:1f:
8a:1c:d5:f1:f8:37:93:4c:33:35:1d:95:9e:09:85:70:93:84:
8a:33:4e:ab:69:27:ac:ae:91:b4:4c:65:f5:8e:fc:78:5b:fb:
c9:6e:00:2a:66:ce:99:79:62:08:26:9f:2f:e3:de:b0:31:ad:
1c:8c:3d:94:11:2b:ed:f6:09:42:aa:0e:bd:05:28:01:2c:a4:
d2:7c:7f:78:b7:83:3b:fe:ee:75:ac:52:de:6a:5f:3f:bf:dd:
4a:5e:30:08:3c:70:4f:de:c8:dd:b2:00:7f:6e:08:f7:5b:f6:
25:b5:e7:04:34:dd:32:c5:4d:d9:11:41:df:af:bc:d4:45:f5:
c7:d5:62:a0:bf:35:57:d3:d3:b5:4a:25:49:b7:f8:a8:16:fb:
3d:d2:75:3e:2f:8e:81:70:3f:40:dd:3d:e5:16:94:8a:42:eb:
20:98:de:cc:bc:da:24:04:f9:6f:ac:a8:78:97:11:40:53:94:
04:4b:a4:2b:63:46:1a:a5:be:0b:8c:dd:88:68:ec:88:41:3c:
0d:51:29:53:11:5f:46:ff:34:6c:db:68:7d:5d:1a:04:07:c6:
3c:f7:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org