Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/KV4ViFjSIm9ExcNSqBAmjMj06Ao.roa
File: KV4ViFjSIm9ExcNSqBAmjMj06Ao.roa (raw, json)
Hash identifier: LyOkl7VgbqvcFmli95MRbCFwaShAYwt5bdx1376Lg9s=
Subject key identifier: 29:5E:15:88:58:D2:22:6F:44:C5:C3:52:A8:10:26:8C:C8:F4:E8:0A
Certificate issuer: /CN=4d946f4df2237491a68dfa407be41fae84bbda66
Certificate serial: E32107
Authority key identifier: 4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/KV4ViFjSIm9ExcNSqBAmjMj06Ao.roa
Signing time: Sat 01 Jan 2022 13:00:21 +0000
ROA not before: Sat 01 Jan 2022 13:00:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210729
IP address blocks: 2001:67c:1bc8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14885127 (0xe32107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d946f4df2237491a68dfa407be41fae84bbda66
Validity
Not Before: Jan 1 13:00:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=295e158858d2226f44c5c352a810268cc8f4e80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:2f:97:f0:fd:86:72:da:42:80:ca:80:42:
40:e1:92:a4:b2:47:cf:aa:0b:da:90:37:35:b4:78:
29:b0:71:9a:ef:d0:19:89:36:67:5a:da:cd:83:50:
7c:90:54:3e:44:23:51:33:92:d9:9e:52:25:4d:50:
3e:e6:e2:c3:80:17:23:2e:e5:19:50:0f:ee:39:bd:
0e:d7:bd:a6:ad:10:30:9f:79:4a:2c:bc:52:b1:a7:
1f:76:a3:36:9f:34:a2:0d:18:42:bb:5c:c9:e9:44:
b7:c1:37:c2:85:5c:a1:bc:63:79:be:2a:b9:23:53:
c1:ab:83:24:21:b9:8c:c8:ed:ab:c8:4f:de:53:fd:
1f:7c:8a:79:ec:e1:4e:d8:50:2e:03:82:62:50:e2:
49:d3:f0:40:c7:c9:e3:a7:38:a2:69:a5:15:c5:52:
0f:2e:3a:ea:8a:fd:ee:7a:59:6f:28:e0:b9:68:b1:
7e:0f:ed:2a:12:ff:75:b0:c7:e4:0c:2e:1a:02:04:
8b:ae:5b:03:26:7c:12:5e:d7:68:04:f0:57:1b:a5:
27:6a:9c:61:13:00:1f:21:78:13:cf:da:3a:ad:5e:
a7:89:15:ac:8f:89:14:37:6b:06:bc:a9:50:38:6d:
4c:25:25:90:59:ef:25:dd:02:97:c0:33:07:50:f9:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:15:88:58:D2:22:6F:44:C5:C3:52:A8:10:26:8C:C8:F4:E8:0A
X509v3 Authority Key Identifier:
keyid:4D:94:6F:4D:F2:23:74:91:A6:8D:FA:40:7B:E4:1F:AE:84:BB:DA:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZRvTfIjdJGmjfpAe-QfroS72mY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/KV4ViFjSIm9ExcNSqBAmjMj06Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cbfd1e-1202-40c1-bdf0-c24ee0494541/1/TZRvTfIjdJGmjfpAe-QfroS72mY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1bc8::/48
Signature Algorithm: sha256WithRSAEncryption
36:9a:73:7b:18:24:9a:40:f3:23:99:67:fe:20:f0:8c:48:b9:
5a:cf:bd:f7:20:f8:ee:38:ba:59:55:44:36:aa:7e:0b:f2:0f:
f1:08:00:ed:d3:9c:20:ca:05:96:e9:ed:cf:fa:ae:e1:a3:4f:
fa:cd:70:88:81:d2:24:c6:bf:50:33:b4:46:7d:5a:46:40:f9:
6c:64:e7:4f:c1:2e:cc:25:fb:19:d3:77:4b:43:fe:99:81:5b:
2e:a2:45:52:e7:f8:fb:15:27:bb:25:cb:d0:24:55:3c:4b:45:
f3:9a:05:8d:1a:5b:a8:57:5a:a6:1b:32:ff:e9:1a:09:20:d1:
93:f1:91:57:ab:65:1b:ee:ed:4c:27:6b:b9:c1:e6:a4:c3:f4:
8b:c9:84:b9:33:e3:09:00:28:cf:41:53:57:8a:85:e8:9b:bd:
92:1c:46:7d:66:30:cb:a4:38:ff:16:5a:13:10:68:1c:84:ad:
58:b9:5f:ff:b1:8e:ec:79:5a:26:79:9b:74:69:b3:80:69:6a:
c7:c9:6a:83:36:58:94:70:9b:17:46:23:80:cb:70:01:fa:fc:
4e:0f:09:9e:a6:ad:9a:f9:75:ad:cc:bf:a6:b8:69:84:72:0c:
5b:5a:db:a0:ce:9e:e0:ee:b6:33:cf:01:e3:d1:4a:ee:01:03:
46:89:d3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:25 2024 by rpki-client on console-ams.rpki-client.org