Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/MYTy3JhMQ9lWYKYDihHQx6rKL8E.roa
File: MYTy3JhMQ9lWYKYDihHQx6rKL8E.roa (raw, json)
Hash identifier: trJErIQAB2xPImjVIvs/AILd5CGR84Y5ZkSQCl7JgPc=
Subject key identifier: 31:84:F2:DC:98:4C:43:D9:56:60:A6:03:8A:11:D0:C7:AA:CA:2F:C1
Certificate issuer: /CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Certificate serial: 07797828
Authority key identifier: 9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/MYTy3JhMQ9lWYKYDihHQx6rKL8E.roa
Signing time: Sat 01 Jan 2022 04:01:34 +0000
ROA not before: Sat 01 Jan 2022 04:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2a0f:103::/32 maxlen: 32
2a0f:100::/30 maxlen: 30
2a0f:100::/29 maxlen: 29
2a0f:104::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125401128 (0x7797828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Validity
Not Before: Jan 1 04:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3184f2dc984c43d95660a6038a11d0c7aaca2fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:03:70:79:88:04:6f:c6:bb:77:f1:a1:f8:
de:7b:73:2e:12:be:ef:95:3c:43:0b:0d:da:84:72:
cd:36:1a:b3:cd:1b:ed:d3:ca:0d:d4:51:f0:2b:2a:
06:8c:19:ec:aa:3a:36:58:e7:0c:39:22:2f:7b:a5:
c8:62:45:b1:45:3a:8f:7c:4e:da:37:e8:b6:3e:08:
66:66:4a:b5:37:5f:02:1a:26:dd:2b:3a:bf:5c:43:
5e:3f:a7:2a:5d:f7:1c:27:37:e1:33:d4:c8:ec:aa:
98:21:2b:23:45:c1:b1:37:40:47:bf:85:b7:4b:d1:
06:55:6f:3a:d7:9a:27:07:b0:41:7b:ec:61:35:09:
fd:f1:53:c4:0f:c5:63:21:70:0d:5f:70:21:01:18:
40:37:8e:0e:c1:b4:43:a0:69:2f:17:9a:bb:2e:f0:
5e:ac:04:1d:fd:08:5f:62:c8:b2:e2:49:ec:9e:da:
35:c3:5b:dd:8e:7b:50:b5:4b:84:c7:86:3b:67:d2:
f9:8a:d0:0b:4f:e5:8c:61:49:60:5f:4a:e0:63:7a:
f9:35:12:61:cb:96:44:7f:8a:79:98:64:1c:cc:21:
08:e2:0e:6c:d8:99:95:61:4b:61:6a:c4:d0:ac:26:
f8:dd:61:a4:c9:39:50:42:f1:e6:0a:ea:e9:f4:09:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:84:F2:DC:98:4C:43:D9:56:60:A6:03:8A:11:D0:C7:AA:CA:2F:C1
X509v3 Authority Key Identifier:
keyid:9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/MYTy3JhMQ9lWYKYDihHQx6rKL8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:100::/29
Signature Algorithm: sha256WithRSAEncryption
8b:11:09:ea:55:73:92:9b:84:45:7f:62:bb:07:0b:ae:da:7f:
a3:fc:cf:e0:c4:3a:5b:b3:6a:a4:d2:4f:17:b6:af:b5:fe:49:
1a:19:d2:d9:b7:a2:7a:45:ae:7c:43:01:21:85:ee:c8:1f:aa:
04:b5:1e:ab:2f:38:a0:0f:f1:67:30:2b:a1:05:64:c3:11:12:
43:47:c2:39:e1:3d:53:49:bb:aa:b5:f4:a9:5f:87:83:e4:0e:
55:f5:08:49:e9:87:32:29:47:7e:88:dc:4a:07:a0:64:58:da:
42:c3:18:6f:6b:36:e9:b7:ec:b4:94:8c:75:a8:9d:c0:47:c1:
7a:a1:62:66:a2:c5:f8:85:0d:98:d1:22:85:f5:b1:01:74:06:
fb:b0:39:66:8f:1f:0d:fb:65:fe:b5:5d:34:b8:69:cd:51:04:
9b:b0:60:72:d6:a1:a4:8f:7e:3b:55:89:bc:54:66:7b:6d:d2:
cb:8d:e2:df:6a:9c:3b:6a:c3:4c:0b:3f:0d:ad:6a:8f:75:1c:
34:75:13:8f:6e:34:eb:12:70:0e:04:56:4a:16:99:3e:f5:df:
7d:21:c2:64:2a:57:10:04:82:91:c4:81:08:3e:8b:1f:86:00:
33:04:58:4e:f9:6a:16:a5:b0:11:ea:77:26:e4:74:ad:31:81:
26:ba:b6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:56 2024 by rpki-client on console-ams.rpki-client.org