Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/d-STqDfVVz_NoElnE6zHqLk6zS4.roa
File: d-STqDfVVz_NoElnE6zHqLk6zS4.roa (raw, json)
Hash identifier: R1OXdMMeE+C3vhnsQOsa/q2IYNrWbapo/nhgqlRc3IU=
Subject key identifier: 77:E4:93:A8:37:D5:57:3F:CD:A0:49:67:13:AC:C7:A8:B9:3A:CD:2E
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 08041489
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/d-STqDfVVz_NoElnE6zHqLk6zS4.roa
Signing time: Sat 01 Jan 2022 06:55:47 +0000
ROA not before: Sat 01 Jan 2022 06:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139589
IP address blocks: 2a0f:5707:ac02::/48 maxlen: 48
2a0f:5707:ac01::/48 maxlen: 48
2a0f:5707:ac00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134485129 (0x8041489)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 06:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77e493a837d5573fcda0496713acc7a8b93acd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:3f:ee:ed:e5:ff:f3:a6:d7:ce:2d:12:3c:
5a:45:24:24:0f:f8:14:49:49:ca:6e:41:3f:73:f1:
09:f7:d7:25:c3:b7:c6:fe:ae:82:87:de:e1:6a:1e:
37:b7:e3:8f:3b:77:b2:73:e5:00:c6:82:df:73:0a:
c5:05:a7:19:de:f5:ed:10:4c:6e:38:49:a5:32:38:
c2:85:e5:a0:83:fe:96:61:e7:14:6b:80:91:aa:b0:
49:46:d1:13:64:e4:48:05:eb:8c:05:11:7c:8b:3b:
30:fe:ba:c7:81:55:0b:ee:7d:99:ff:60:70:52:4f:
5b:88:ef:81:dd:2b:c3:89:0a:62:f6:0c:2d:bd:d1:
12:cb:e8:7d:ea:cf:70:fd:1d:67:31:22:c5:c2:5f:
fc:0f:f9:61:e2:a9:7c:5f:99:e4:43:b1:62:30:99:
f5:0f:56:79:5f:1f:65:d8:a7:51:72:e9:e7:f2:f1:
d7:9e:27:41:87:71:64:e8:37:9d:2d:4b:f9:4d:1c:
78:81:42:f7:91:5e:11:d6:3c:3e:fc:a1:94:0f:fd:
c7:bc:49:27:32:c5:49:12:82:3a:68:7a:c2:2f:a3:
89:96:81:75:30:c9:32:bc:07:ec:19:2f:eb:20:a3:
06:ff:1d:b0:5f:ca:64:3a:df:3b:8d:2f:81:89:9e:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E4:93:A8:37:D5:57:3F:CD:A0:49:67:13:AC:C7:A8:B9:3A:CD:2E
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/d-STqDfVVz_NoElnE6zHqLk6zS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ac00::-2a0f:5707:ac02:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
58:07:4f:de:12:14:b3:80:73:e3:04:e7:cb:57:d1:87:1a:4b:
e0:d9:30:9e:73:dd:13:75:f6:e5:37:0e:47:51:77:74:9c:a0:
30:53:65:2e:ef:f3:b3:53:31:61:a9:6a:8e:93:90:a2:99:30:
56:dd:f9:c4:75:56:1d:bd:77:32:8f:30:be:70:75:73:9e:b2:
99:1d:75:e9:41:3f:dc:9c:79:f2:ef:41:b0:4f:98:76:5b:d5:
31:bf:f3:87:a9:08:50:64:93:34:8a:26:be:7f:7a:5c:82:2c:
c9:00:8e:19:c2:2f:31:ed:7a:39:57:23:ba:9e:22:a5:92:3b:
a0:f4:79:71:2c:de:8c:60:ef:ca:fe:92:19:af:30:0a:85:6a:
ae:d6:61:1a:5e:fd:3a:78:62:e1:50:1b:0e:0b:aa:79:20:b9:
66:f0:32:10:b7:f6:6a:8f:e4:ef:eb:90:b1:de:44:0f:a4:a5:
ef:fb:d5:a6:b4:ad:a5:82:5b:0f:be:0c:3c:bb:20:dc:12:aa:
09:e7:81:2e:80:5a:b1:ab:72:e0:37:4e:8d:08:b9:17:a3:1f:
37:e2:5a:79:38:8f:98:0b:c1:fd:65:14:8d:88:ab:9d:56:c0:
2f:bc:31:b4:4d:81:62:c9:aa:0e:41:25:43:ee:5e:08:b4:20:
6d:4f:bf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org