Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/kygqrdj9m7u7i8WoxFYYgIEykis.roa
File: kygqrdj9m7u7i8WoxFYYgIEykis.roa (raw, json)
Hash identifier: WTCurJ3+iqouYkX3K4ANZovd6JRiiUxoy33k0vXekqo=
Subject key identifier: 93:28:2A:AD:D8:FD:9B:BB:BB:8B:C5:A8:C4:56:18:80:81:32:92:2B
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 08198FCE
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/kygqrdj9m7u7i8WoxFYYgIEykis.roa
Signing time: Sat 01 Jan 2022 06:55:57 +0000
ROA not before: Sat 01 Jan 2022 06:55:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211684
IP address blocks: 2a0f:5707:b100::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135892942 (0x8198fce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 06:55:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93282aadd8fd9bbbbb8bc5a8c45618808132922b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:1d:2d:94:08:24:de:c8:c5:e1:d3:14:cc:
99:2a:98:9b:31:c8:bf:44:d2:c2:1b:ba:2a:7f:24:
51:6c:6f:a9:11:21:9d:6b:52:8b:e9:c9:6a:76:a5:
36:de:21:10:0c:42:95:06:e5:63:05:61:ea:24:b2:
89:50:b8:db:d7:10:94:16:e9:66:16:0c:3e:f5:08:
31:cf:7c:4b:59:1e:45:06:72:b2:bb:64:20:65:e1:
b0:11:17:d5:7a:70:7e:3c:b2:21:fa:2b:1c:08:95:
93:59:f5:91:31:97:9f:67:e9:42:6c:14:81:00:d3:
eb:6a:32:dc:95:8a:71:bf:b8:b6:8c:da:6a:42:66:
3e:1b:00:12:38:23:12:2b:a9:da:4b:15:e2:f8:d8:
4e:eb:d0:b7:11:68:24:e8:f6:66:fc:bd:2e:cb:02:
3d:5b:14:f5:4b:19:5a:8e:a9:5a:30:a8:0c:59:2f:
11:18:09:47:dd:56:e8:9c:63:b1:c0:5a:04:47:40:
93:9d:e0:78:16:98:fb:a3:8d:a4:b0:b2:c0:02:68:
b3:de:c8:53:d2:0a:37:a0:45:73:02:12:af:5c:95:
28:14:e2:30:b2:a9:ca:f1:de:27:39:9b:9f:dc:4a:
3b:88:d1:dc:44:7b:44:e4:e9:3c:6c:a4:15:5c:7c:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:28:2A:AD:D8:FD:9B:BB:BB:8B:C5:A8:C4:56:18:80:81:32:92:2B
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/kygqrdj9m7u7i8WoxFYYgIEykis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:b100::/44
Signature Algorithm: sha256WithRSAEncryption
4a:43:23:4f:0f:38:75:9d:29:34:2f:a7:3f:f4:b1:e8:19:23:
d5:62:29:d5:16:f2:34:55:0c:7d:62:38:de:4a:da:cb:5d:20:
b8:88:e8:79:a4:97:e7:67:65:6c:7c:bb:4c:5d:2f:bf:4b:48:
46:b7:d0:ca:24:cb:5a:e6:ca:c9:70:5e:b3:0c:9a:9b:97:ff:
31:41:ee:0e:cd:88:7b:26:2e:08:fb:40:2e:85:48:3e:14:7c:
54:b8:d7:71:b8:e1:70:7d:ff:29:1c:bc:33:85:a7:86:fa:a7:
c6:51:1c:41:de:7b:79:15:8d:fb:25:c2:31:d8:19:ef:18:4f:
80:a5:fb:fd:ab:bf:a1:dd:f3:58:a6:fd:bb:a2:78:ae:f5:e0:
76:6c:47:e0:c7:04:5e:49:1b:1d:f0:4a:14:f6:60:c2:0a:5e:
bd:ed:de:d2:7c:e5:43:bd:b1:04:9e:19:98:c8:2b:5b:8e:b0:
e9:44:4c:6e:00:db:6d:00:90:3b:6f:d5:68:db:9a:12:4b:a5:
fd:7d:4f:25:e9:c0:8c:b2:20:de:ec:42:a4:5f:5f:d3:0f:80:
9a:cd:5e:a5:46:35:d2:88:fb:42:67:41:77:7c:b3:e8:35:17:
4f:f3:89:72:76:b9:9c:5e:fc:ec:02:05:27:21:76:af:9e:b1:
82:de:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org