Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/xMTeDZelL9mWijANEgy3hxd_GJ0.roa
File: xMTeDZelL9mWijANEgy3hxd_GJ0.roa (raw, json)
Hash identifier: lKS7+8jbMsPrP1d0XDqFXmxWHfWK7U+FTmYteSIjU1E=
Subject key identifier: C4:C4:DE:0D:97:A5:2F:D9:96:8A:30:0D:12:0C:B7:87:17:7F:18:9D
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0820703F
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/xMTeDZelL9mWijANEgy3hxd_GJ0.roa
Signing time: Sat 01 Jan 2022 06:56:00 +0000
ROA not before: Sat 01 Jan 2022 06:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213377
IP address blocks: 2a0f:5707:aa70::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136343615 (0x820703f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 06:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4c4de0d97a52fd9968a300d120cb787177f189d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:d1:27:88:82:d4:3b:f9:d8:55:8e:dd:30:
4c:c4:f8:7a:e5:34:32:62:59:39:e6:27:37:1a:99:
b8:95:16:28:a5:e0:d6:96:1c:a8:89:58:87:c7:ed:
46:39:5c:72:b6:64:23:ed:02:97:46:2c:08:0d:ee:
a2:27:d7:3f:bb:a2:af:e8:76:40:29:69:47:ab:83:
48:bd:d7:4d:fb:e8:bb:71:ff:30:3c:ba:85:ff:39:
23:5d:08:81:e8:9f:f6:e1:78:44:fa:04:aa:cc:be:
19:35:86:79:02:3d:7c:60:fb:96:9e:0d:4f:0d:d9:
a9:68:3d:38:c3:85:ee:93:5c:fb:bb:60:cc:2c:30:
0d:19:56:a4:65:b5:b7:97:89:90:9b:4d:86:9b:a6:
07:19:a3:85:8a:47:50:93:17:08:d3:77:c6:33:3a:
68:0a:27:24:5f:f4:4c:0b:c9:43:10:ef:ac:ad:a8:
03:81:61:d3:4f:9a:6d:7f:1f:e7:bb:e7:a2:a8:9a:
a1:eb:79:a2:de:82:36:1b:f9:54:b6:6b:c1:9d:5d:
46:e0:3c:0a:46:44:c3:c6:33:e0:46:eb:e7:b1:1d:
c6:a5:62:16:f3:f8:44:55:d2:51:4e:36:70:8d:25:
59:1a:f9:e0:6b:a6:47:56:70:98:71:fd:3c:74:b3:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C4:DE:0D:97:A5:2F:D9:96:8A:30:0D:12:0C:B7:87:17:7F:18:9D
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/xMTeDZelL9mWijANEgy3hxd_GJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aa70::/44
Signature Algorithm: sha256WithRSAEncryption
2f:cf:b4:c5:1a:a7:1c:de:fb:1d:db:8d:71:be:4d:1a:e7:65:
e0:8b:11:28:30:6f:6b:8c:9d:3a:33:61:69:ea:d7:a5:e9:0d:
40:29:da:98:5d:4c:b3:8c:0d:88:4e:6b:1d:e0:de:5c:c7:1f:
83:46:2e:03:d8:09:47:86:3b:02:6c:dd:d1:ab:21:9e:6f:cc:
2f:bf:a4:ee:41:4a:7a:db:f0:07:b8:68:3b:b2:fc:98:f8:f8:
74:ec:c1:3a:96:05:30:04:64:52:69:a4:7a:68:bb:09:6b:1f:
0c:3f:ce:ae:f2:90:20:06:57:7a:3e:5f:7a:b1:2c:eb:8f:e0:
c5:a3:1f:30:15:12:4b:a4:56:85:79:26:49:0c:de:83:55:08:
2c:52:19:f9:5a:ca:90:58:b8:8a:6e:6a:81:b9:14:33:6e:fb:
7a:14:49:d4:0c:98:bf:9c:93:3c:3b:dc:e3:95:c9:d3:2f:bc:
c7:03:06:1f:4c:a6:0f:bf:9a:8b:30:c3:e6:a0:a8:1b:ce:b5:
df:36:fe:cb:9f:e5:95:27:f7:b6:a5:30:6c:14:30:31:77:78:
21:76:a8:38:01:15:e0:0a:7a:7b:6a:d4:27:ca:f4:a1:f9:13:
ef:9a:d8:e7:02:88:fe:a1:c4:2d:0b:53:d7:d6:5a:e2:cf:cc:
de:c1:01:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org