Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/PecCMV8F1OoJ6_rEm5xJOTxVXVU.roa
File: PecCMV8F1OoJ6_rEm5xJOTxVXVU.roa (raw, json)
Hash identifier: AiaJ8obqj7ohER42YD367l0ncBEDoQnTc0k7CqbXNmM=
Subject key identifier: 3D:E7:02:31:5F:05:D4:EA:09:EB:FA:C4:9B:9C:49:39:3C:55:5D:55
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 0246ED
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/PecCMV8F1OoJ6_rEm5xJOTxVXVU.roa
Signing time: Tue 17 May 2022 17:39:28 +0000
ROA not before: Tue 17 May 2022 17:39:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47368
IP address blocks: 2001:67c:9fc::/48 maxlen: 48
2001:67c:9f4::/48 maxlen: 48
2001:67c:9f8::/48 maxlen: 48
2001:67c:9f0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149229 (0x246ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: May 17 17:39:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3de702315f05d4ea09ebfac49b9c49393c555d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ac:cf:fa:20:d5:94:45:7f:23:70:79:ae:6f:
1e:91:28:58:a6:19:47:a2:75:be:a8:6b:58:20:2b:
f4:62:4a:50:c6:5b:c6:c9:b4:4d:21:37:ea:72:24:
bd:51:8b:d6:03:6f:f7:2f:86:f1:4f:13:70:1c:9b:
cd:37:06:55:c8:10:97:15:c1:eb:a3:d5:06:71:b5:
c4:ec:6a:7e:dd:d9:e3:02:f7:a5:d2:5c:d0:2d:23:
15:4c:ac:f7:03:bd:a7:4b:b7:2d:ca:3d:a5:85:fa:
ac:c9:2c:d5:2f:39:e0:c0:0b:fc:cb:07:d5:61:24:
9a:33:b4:73:cb:52:5d:16:3f:09:04:9b:8e:08:9b:
fb:7c:fa:1c:1a:e4:af:0a:0a:c8:f3:38:48:d1:91:
df:dc:20:d1:19:6d:e8:8c:e6:2e:91:ec:82:52:28:
60:0a:33:68:e6:8e:20:6e:91:af:3d:a2:f4:c0:ff:
e7:17:9b:c8:6e:8e:5e:41:71:df:9e:45:49:2b:6a:
fa:d1:1f:73:2e:af:58:dc:3b:1f:ce:b7:1c:46:bc:
bc:be:3e:e7:fd:b4:6d:ae:56:e2:2f:41:65:3e:92:
e0:df:bc:4e:58:1b:97:57:7b:d3:4a:06:88:ee:4f:
dc:61:ad:a5:7b:9c:83:63:9c:7f:46:d5:65:53:bf:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E7:02:31:5F:05:D4:EA:09:EB:FA:C4:9B:9C:49:39:3C:55:5D:55
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/PecCMV8F1OoJ6_rEm5xJOTxVXVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9f0::/48
2001:67c:9f4::/48
2001:67c:9f8::/48
2001:67c:9fc::/48
Signature Algorithm: sha256WithRSAEncryption
6b:08:a5:f9:fb:a2:34:e3:03:ca:c3:9e:0c:89:1a:a5:00:fc:
ed:1e:fa:10:a0:3c:ba:75:07:b5:26:8d:6b:f6:04:2c:5a:62:
98:9d:ee:f7:56:76:b2:5f:b0:d1:e8:96:de:da:f0:b8:10:83:
48:6a:02:76:da:e9:e1:47:14:0c:0f:2b:74:4e:6a:53:e7:f2:
cf:27:cd:ad:1a:75:af:74:5e:db:f5:72:42:42:0f:e2:46:53:
d7:cc:32:cd:bc:5f:5b:2a:f5:c9:e6:c7:c7:90:45:15:d6:26:
26:33:0c:36:57:cd:99:f6:b6:e3:12:77:08:95:91:ae:36:8c:
aa:b4:c2:15:e8:d3:db:ef:1f:88:c5:2d:b2:1b:b5:ef:73:85:
91:30:47:d1:54:52:16:47:36:8a:14:bd:94:90:34:f9:25:22:
c9:d5:fc:37:a3:1c:f9:a1:88:66:a7:7b:c5:7b:ab:d7:6f:ea:
0b:fc:b8:2d:34:56:07:a4:82:ba:24:34:a2:cd:6c:ca:bb:18:
3a:e5:d9:c9:f3:10:4f:2a:58:63:c0:9e:9b:f8:b7:1d:5a:33:
c7:47:66:9d:25:bb:21:7f:6a:a7:3d:fb:96:91:99:96:bf:28:
6b:d9:d1:6d:e5:49:07:61:c2:23:23:21:eb:dc:81:9e:03:70:
3d:19:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:55 2024 by rpki-client on console-fra.rpki-client.org