Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Q-ABfCifFpO5J9b_h_JYYn7Rd7A.roa
File: Q-ABfCifFpO5J9b_h_JYYn7Rd7A.roa (raw, json)
Hash identifier: j4hGjnAUJZjfuXLJEURaiAU+uzbmQ6N2C8GDP0pAic0=
Subject key identifier: 43:E0:01:7C:28:9F:16:93:B9:27:D6:FF:87:F2:58:62:7E:D1:77:B0
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 080552D5
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Q-ABfCifFpO5J9b_h_JYYn7Rd7A.roa
Signing time: Sat 01 Jan 2022 06:55:48 +0000
ROA not before: Sat 01 Jan 2022 06:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139949
IP address blocks: 2a0f:5701:fe06::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134566613 (0x80552d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 06:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43e0017c289f1693b927d6ff87f258627ed177b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:79:c7:30:db:32:a2:08:1c:87:05:53:97:
d8:15:d0:f0:68:60:ab:e5:49:ee:f3:db:0e:18:09:
08:2c:f0:4c:92:05:3e:6a:83:76:11:13:48:9a:f9:
5f:0a:18:01:f7:40:a0:a2:e8:08:6f:81:3b:6c:72:
9b:43:26:a4:d0:f3:22:0a:70:c7:a6:cf:70:c4:e1:
02:ca:7a:19:25:2b:3f:10:29:7b:25:4c:e0:83:70:
97:87:03:21:91:f9:90:c0:c4:77:16:93:15:f2:17:
28:b3:ca:84:c0:a6:cf:30:93:df:07:75:a7:5b:66:
42:66:74:f8:c6:d2:92:b7:0f:12:bd:b8:34:44:c9:
14:64:75:a5:1a:15:d6:09:b9:f7:78:b4:26:04:6e:
5a:fb:27:5e:ee:c8:2f:bd:ce:78:05:00:69:ee:28:
69:4a:64:b1:b3:54:cd:0f:f9:3b:05:2a:73:5c:f3:
3b:4a:9a:67:10:b1:8e:4f:2a:d3:dc:f2:b7:69:6d:
e5:42:e2:60:47:bd:8c:34:3d:77:22:0c:d9:8f:32:
f2:d4:b4:92:74:f3:6c:ac:7b:d5:34:98:bb:41:5e:
2f:5b:22:79:a0:43:a7:58:20:ec:fc:be:41:c7:7d:
02:c1:be:7f:e3:56:a6:dd:f6:13:3d:9b:f5:69:30:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E0:01:7C:28:9F:16:93:B9:27:D6:FF:87:F2:58:62:7E:D1:77:B0
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Q-ABfCifFpO5J9b_h_JYYn7Rd7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5701:fe06::/48
Signature Algorithm: sha256WithRSAEncryption
74:42:fc:a9:db:dc:7f:4b:ee:ce:b4:38:13:07:59:c7:f4:08:
2e:57:92:18:96:b7:38:ec:9c:6b:b6:8d:20:01:8d:85:d1:c6:
82:28:ae:32:06:1d:c1:d8:17:69:97:76:40:27:b5:9e:a7:02:
6d:08:be:e4:44:fb:88:97:f8:5c:76:b0:82:e1:5f:31:95:cb:
30:b8:4a:bd:31:3d:1d:cf:0c:d5:1c:51:e0:7a:19:da:b2:f1:
e8:11:89:0a:b9:3f:ca:8a:ed:7c:cb:e0:46:1c:24:ee:09:36:
c7:36:a2:33:5a:31:63:36:09:76:3d:40:bc:54:d2:bf:cd:32:
e5:9f:80:32:6e:9a:b0:88:a4:08:cd:a6:60:a4:b4:eb:75:00:
54:95:b4:ad:03:47:4e:ce:b1:f7:81:93:68:6e:cf:22:6f:d6:
2f:8a:15:69:bf:a1:b2:93:8c:8e:e4:1c:36:b6:c9:00:29:ed:
fe:40:3c:bf:ab:16:fe:a5:94:b0:de:3b:af:05:92:a3:1f:2e:
08:c0:0e:43:fe:f2:e8:c7:76:17:fd:ca:ad:45:58:76:7a:ec:
46:82:18:67:a5:3b:23:7d:d5:09:4c:d0:7d:66:fc:0e:e3:7c:
5b:3b:33:ce:b0:61:05:b5:91:c4:90:7c:90:c1:30:3c:ba:33:
1f:4b:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org