Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/9dp6XsHHg2lrV6_K9eETlxddxuA.roa
File: 9dp6XsHHg2lrV6_K9eETlxddxuA.roa (raw, json)
Hash identifier: 2NlRtTlvy145H2FoKbssdAJJV1Pz+cB1Rf85/Os/vjA=
Subject key identifier: F5:DA:7A:5E:C1:C7:83:69:6B:57:AF:CA:F5:E1:13:97:17:5D:C6:E0
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 08144DDA
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/9dp6XsHHg2lrV6_K9eETlxddxuA.roa
Signing time: Sat 01 Jan 2022 02:52:56 +0000
ROA not before: Sat 01 Jan 2022 02:52:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2a07:e02:41::/48 maxlen: 48
2a07:e00:19f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135548378 (0x8144dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Jan 1 02:52:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5da7a5ec1c783696b57afcaf5e11397175dc6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:f2:c6:48:8d:0c:28:54:e3:6a:6a:f5:22:
c2:94:26:d3:24:4a:5c:a0:75:9c:74:3b:4d:54:93:
19:c5:4d:60:c5:d5:03:e3:d6:cd:ea:d2:be:b1:1f:
5c:10:40:7c:9d:b0:a8:1e:26:5f:44:a1:79:9d:1f:
18:53:d6:81:ba:f6:bf:51:20:1e:36:ad:23:41:a1:
f0:91:12:d3:30:15:28:ee:ab:80:79:11:c1:6f:10:
c9:fb:71:c8:fc:c5:ac:8f:36:c6:e1:12:89:27:b9:
99:14:1b:24:29:bb:21:99:c6:02:7a:3b:3a:63:58:
7a:07:eb:f6:26:5a:58:84:64:ec:2a:91:56:a6:fb:
e8:40:eb:c1:65:b8:fb:ef:91:62:2d:2f:18:b1:c1:
81:cd:e8:40:5a:53:47:01:12:75:71:44:b8:eb:b0:
d4:72:bb:e9:89:e5:51:f5:5c:90:35:66:02:b8:4a:
92:a9:6f:de:2e:3b:33:bc:30:a2:2d:37:7c:a6:34:
20:1a:ed:a0:b8:d4:50:17:4c:21:c4:7c:f0:e9:d0:
17:0c:ea:63:b2:eb:cc:6a:a5:cb:bb:97:88:d9:fb:
4d:27:09:c9:c6:b7:e1:a9:ac:e3:52:57:a1:84:f8:
d5:45:ac:9b:93:21:ce:1b:59:33:d5:10:8d:24:02:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DA:7A:5E:C1:C7:83:69:6B:57:AF:CA:F5:E1:13:97:17:5D:C6:E0
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/9dp6XsHHg2lrV6_K9eETlxddxuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e00:19f::/48
2a07:e02:41::/48
Signature Algorithm: sha256WithRSAEncryption
82:61:e1:ea:ec:71:11:b1:dc:b4:c3:5e:29:b5:b8:f7:ca:1f:
be:0c:83:a7:1c:f3:8a:99:32:be:27:89:0f:22:6c:9c:2c:fa:
94:71:f6:38:fb:af:7b:29:a8:64:3f:67:e6:97:9e:27:3e:aa:
0f:90:f8:01:ec:18:2c:99:dc:b8:96:49:91:ad:e7:ad:3c:67:
8a:49:6a:90:53:cb:45:b8:d8:7c:51:99:a7:7a:7e:ca:56:72:
08:6e:4e:b4:3a:0f:87:8f:06:71:12:4e:a5:d0:cd:db:80:35:
f7:db:e7:e4:ac:d3:a2:65:01:5f:a2:80:3a:bd:ff:42:37:83:
d0:7b:b4:ba:38:ee:fc:3b:5a:19:c7:76:e6:d9:2c:f0:af:8c:
ac:30:b0:48:1a:60:91:96:83:42:ef:4e:51:46:79:a5:56:62:
18:f0:8e:1c:ba:42:8a:29:04:44:15:d1:e0:da:39:64:77:93:
86:df:9e:bb:a2:7c:9f:6d:bf:28:3b:bd:6a:bf:13:65:00:92:
b2:1b:c0:ae:ee:d2:20:39:42:1f:39:7c:df:fd:0b:d1:91:fd:
81:55:f8:a4:59:d0:21:da:ff:d0:3f:ec:48:f0:b1:53:56:95:
92:21:25:17:77:a5:81:fb:93:06:63:8f:18:18:c7:66:56:b2:
b5:91:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:28 2024 by rpki-client on console-fra.rpki-client.org