Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/7viGMeGm4LTzhYJ8GHm2DXY3x4Q.roa
File: 7viGMeGm4LTzhYJ8GHm2DXY3x4Q.roa (raw, json)
Hash identifier: TmRDJ54o024Q5bs5H9eYKKKhL0lrpj2QEWuSmg3gbQA=
Subject key identifier: EE:F8:86:31:E1:A6:E0:B4:F3:85:82:7C:18:79:B6:0D:76:37:C7:84
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 085B1DE1
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/7viGMeGm4LTzhYJ8GHm2DXY3x4Q.roa
Signing time: Sat 01 Jan 2022 06:55:36 +0000
ROA not before: Sat 01 Jan 2022 06:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59474
IP address blocks: 2001:678:24c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140189153 (0x85b1de1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Jan 1 06:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eef88631e1a6e0b4f385827c1879b60d7637c784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:b1:a5:bd:a2:2d:21:da:01:f0:03:97:c2:
45:a3:9c:42:60:db:5e:48:6a:15:f5:4b:65:2c:48:
b2:69:34:3b:9c:d8:85:30:43:6f:03:4a:34:f6:aa:
57:70:34:5b:cf:5c:33:d5:33:78:99:ec:eb:04:07:
27:69:cb:88:f7:7b:9e:ad:8e:b5:51:f7:13:5d:9d:
d8:5e:18:13:26:fa:61:bb:cc:29:95:fe:5e:17:a7:
3e:78:80:d3:3f:4c:d0:f1:33:91:49:3a:a4:93:b1:
50:c4:d4:99:13:cd:5a:99:ec:fa:e3:47:68:94:f1:
15:ac:e7:61:47:ea:57:4c:6a:13:af:a7:91:fb:0e:
fd:5a:70:66:36:61:86:86:41:f3:b6:1c:49:f9:0b:
e8:fa:14:e9:48:07:82:30:e9:5b:d5:b3:69:bc:83:
71:23:97:86:7f:a4:c3:23:01:40:6e:0f:d2:8a:04:
14:65:f4:39:c5:a0:97:d2:36:8c:93:66:db:41:21:
83:fe:e8:55:fd:8c:f3:64:b7:b2:bb:c9:32:3c:9f:
30:94:a7:7b:e7:7f:09:f8:24:27:9e:2c:12:76:a2:
e6:6e:46:ed:65:dd:a2:f0:76:71:24:17:3d:1a:90:
f6:8e:89:be:6e:e6:c4:3b:2d:ab:d5:8a:c4:75:f5:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F8:86:31:E1:A6:E0:B4:F3:85:82:7C:18:79:B6:0D:76:37:C7:84
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/7viGMeGm4LTzhYJ8GHm2DXY3x4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:24c::/48
Signature Algorithm: sha256WithRSAEncryption
02:ec:c8:c0:d7:92:ad:55:9e:58:dc:24:80:9e:b3:4f:59:7e:
d6:f4:55:67:b9:60:31:30:da:df:52:a4:0d:85:5c:ca:e9:1e:
cc:ac:04:c6:d1:aa:5a:ad:02:4a:fe:64:05:07:25:18:e3:1a:
ff:76:a0:fa:f7:3c:48:0c:18:bb:c7:85:c1:36:3b:d7:76:16:
aa:6c:1c:df:93:a3:2a:55:66:a8:46:78:81:96:81:fd:3b:c8:
92:a3:71:08:73:64:df:be:45:27:2f:e8:0a:9d:5c:a3:97:8f:
c1:95:3f:01:a4:c5:89:3a:59:40:5b:7d:52:25:20:fb:68:84:
bc:bc:2c:4e:01:1c:cd:12:77:51:03:13:42:73:0b:ed:d0:26:
8f:84:c6:39:69:33:f0:b6:08:a1:07:4e:bc:00:83:0a:23:5c:
eb:f9:db:31:5b:87:67:be:11:b5:b7:3e:40:e7:90:81:05:d7:
b8:1b:20:47:db:46:5c:6b:3b:d9:09:6e:17:02:55:23:d8:d7:
60:0c:44:d1:3a:e1:fd:20:c7:df:fc:e0:4a:d8:71:d3:76:5c:
aa:4f:e1:fe:0d:97:bf:1f:9f:78:08:1e:40:5c:50:ec:c0:a8:
7b:3d:40:60:d0:1d:68:98:3c:e3:6d:56:b3:3a:45:7e:40:bc:
8b:36:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:59 2024 by rpki-client on console-fra.rpki-client.org