Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/Q9ou4LcNjZ-Zb8vUG_UyUaZiG8s.roa
File: Q9ou4LcNjZ-Zb8vUG_UyUaZiG8s.roa (raw, json)
Hash identifier: Wd/mj2fAM5oFxRZP2G5RJypOuOwMuV8EEZzBc4Bq3sA=
Subject key identifier: 43:DA:2E:E0:B7:0D:8D:9F:99:6F:CB:D4:1B:F5:32:51:A6:62:1B:CB
Certificate issuer: /CN=b7510b651bfbdf09c8486a8136200005befb497d
Certificate serial: 0246D8
Authority key identifier: B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/Q9ou4LcNjZ-Zb8vUG_UyUaZiG8s.roa
Signing time: Tue 31 May 2022 16:51:13 +0000
ROA not before: Tue 31 May 2022 16:51:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56997
IP address blocks: 2001:67c:a00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149208 (0x246d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7510b651bfbdf09c8486a8136200005befb497d
Validity
Not Before: May 31 16:51:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43da2ee0b70d8d9f996fcbd41bf53251a6621bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:88:d8:e1:d8:3c:b3:ac:c8:a2:b2:6a:75:e3:
06:85:21:bc:50:bd:c4:17:c7:90:ae:26:75:ae:01:
7b:db:6b:b5:d5:1b:63:9f:4d:ba:bb:8a:05:39:ec:
4f:4d:0a:8a:3b:e5:72:e8:fd:58:4f:83:bd:4b:28:
56:d9:ec:48:57:e9:c6:57:68:bf:ef:4e:2b:b9:78:
a4:91:0d:a1:a7:1f:ba:ea:ab:81:ac:69:0a:79:f0:
11:f1:c6:fd:a2:5e:18:3e:d3:65:a3:e2:ea:b3:79:
a1:f5:fa:08:39:98:78:2e:c3:bf:e1:a3:ae:bf:2d:
f7:34:a3:44:00:8e:16:07:29:18:5f:6e:37:cd:a0:
5d:fc:86:5c:c6:97:28:89:18:84:d1:10:73:12:96:
24:60:25:99:da:15:47:d7:ad:15:63:7b:a6:8e:fb:
37:f1:1d:ac:89:b8:bd:f4:03:0a:45:45:ac:7a:59:
7d:e0:a8:cc:87:54:ba:d4:08:65:c4:1b:28:05:51:
18:37:11:23:fd:ef:f3:7b:bf:c1:a9:ff:c6:fe:33:
2a:e6:a2:cb:df:ad:6f:b2:64:ed:8c:cb:c4:78:70:
ae:33:a1:0f:63:68:ea:a5:89:2c:60:45:e6:08:21:
ed:3c:02:22:6a:99:cc:c9:f1:e3:02:6e:24:80:e9:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DA:2E:E0:B7:0D:8D:9F:99:6F:CB:D4:1B:F5:32:51:A6:62:1B:CB
X509v3 Authority Key Identifier:
keyid:B7:51:0B:65:1B:FB:DF:09:C8:48:6A:81:36:20:00:05:BE:FB:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1ELZRv73wnISGqBNiAABb77SX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/Q9ou4LcNjZ-Zb8vUG_UyUaZiG8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bff1c3-0084-42bb-bcf7-2cb8877fd970/1/t1ELZRv73wnISGqBNiAABb77SX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a00::/48
Signature Algorithm: sha256WithRSAEncryption
94:84:88:16:7e:37:b4:20:f1:0f:52:30:b5:c1:80:24:9f:95:
a2:f9:e8:3b:4f:de:ed:45:e1:8d:c9:89:c4:3d:3a:df:a5:f6:
e7:ab:a4:57:5e:2a:0f:c3:33:08:e5:86:11:db:3e:97:9e:94:
7f:67:d1:8d:3c:1e:a3:18:87:87:a6:a6:a3:11:8a:37:e1:47:
dd:f2:b6:2a:5f:2b:15:92:cf:d6:4d:68:0c:59:b5:b3:27:56:
07:bb:da:25:f8:f2:31:f7:55:d5:2d:ad:a9:7a:3a:0e:de:35:
2a:a0:3c:2f:33:c5:75:d4:62:4f:2b:34:ef:67:55:2a:5b:02:
c6:d3:aa:bb:e0:c8:be:b2:13:0b:53:52:6f:a4:bb:97:17:07:
da:ae:b3:3b:3f:0a:8c:69:34:e2:ea:96:d5:b3:81:e1:bf:6e:
ab:ec:3f:c2:6d:49:70:1d:02:28:77:42:ea:4d:29:cc:dd:70:
fd:88:07:7d:2e:42:08:06:c2:e0:1b:07:44:8c:82:03:31:21:
86:82:3f:2d:6f:76:50:00:b7:d3:89:f2:f6:7d:bd:b0:2c:61:
9a:92:74:16:c0:07:18:5a:64:2f:57:57:a8:2f:9b:cc:6e:4e:
9c:98:44:8c:ce:00:82:e1:e1:29:31:c8:88:8a:dc:ba:67:5b:
6e:9c:62:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:42 2024 by rpki-client on console-ams.rpki-client.org