Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/3PoU-lEKD2StKZfy6Q5Jk7oFkJw.roa
File: 3PoU-lEKD2StKZfy6Q5Jk7oFkJw.roa (raw, json)
Hash identifier: fWuhhCrwA2VwIo5PCCl7uYu9UcAyBuSFqj9Dqdd2dWA=
Subject key identifier: DC:FA:14:FA:51:0A:0F:64:AD:29:97:F2:E9:0E:49:93:BA:05:90:9C
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 394720E0
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/3PoU-lEKD2StKZfy6Q5Jk7oFkJw.roa
Signing time: Sat 01 Jan 2022 03:53:04 +0000
ROA not before: Sat 01 Jan 2022 03:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47616
IP address blocks: 2001:648:22b0::/48 maxlen: 48
2001:648:25e0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960962784 (0x394720e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcfa14fa510a0f64ad2997f2e90e4993ba05909c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:55:84:60:20:68:15:1f:c4:d8:57:a0:90:d9:
62:8b:ee:c4:a8:7b:9e:5b:53:6c:89:97:4b:6c:16:
bb:84:3e:6b:f7:14:6e:82:23:55:ea:9f:fe:3f:16:
ce:32:38:2e:90:f7:e6:4e:e3:c5:e1:aa:be:77:5a:
76:de:52:16:42:c3:b2:b0:92:2e:06:16:de:19:a5:
6f:18:12:74:8d:39:cb:b3:10:55:99:a3:b8:b6:39:
08:dd:99:1d:41:80:d3:37:56:75:65:8a:0c:c9:ee:
64:b7:dc:e3:5c:db:db:19:2c:be:d8:5d:21:18:7a:
93:94:b9:f4:20:85:ee:e2:27:f1:61:ef:af:52:03:
44:92:5d:10:32:9b:ce:2a:f8:e8:ab:21:d4:f8:6f:
ae:a0:96:ae:f4:9a:a3:d2:48:3a:fc:44:18:c3:dd:
bc:67:ba:8f:d9:2b:08:69:ae:92:d8:20:87:90:15:
30:e0:08:25:06:b1:70:69:fc:91:c8:e4:c4:aa:da:
b4:bf:27:f0:5c:a6:fa:fa:eb:2f:72:21:c5:62:fc:
54:78:74:c5:a6:78:d1:d5:20:10:99:4d:1c:40:6a:
c7:f4:78:ab:ee:d3:cf:9a:36:64:f3:2e:7c:45:5d:
d2:78:75:5b:dd:2f:97:85:43:9b:d6:83:ef:ec:e9:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:14:FA:51:0A:0F:64:AD:29:97:F2:E9:0E:49:93:BA:05:90:9C
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/3PoU-lEKD2StKZfy6Q5Jk7oFkJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:648:22b0::/48
2001:648:25e0::/48
Signature Algorithm: sha256WithRSAEncryption
01:61:4c:cc:29:a6:e4:d8:fb:af:13:7d:58:0f:6a:01:84:55:
fd:9c:5a:1c:74:df:ea:0a:29:7f:2f:46:26:4f:9f:94:7b:23:
c4:b5:95:61:82:d2:e7:c4:bd:e5:94:e2:8f:a3:95:c8:3a:4d:
5a:76:90:e6:61:ef:a9:8a:20:5e:df:51:88:36:90:fa:d4:a3:
f1:e7:54:7e:ef:01:24:c6:81:ab:1a:a3:72:1e:97:d0:f3:ba:
04:3c:2e:be:20:c0:0e:c7:f3:e7:f8:02:79:83:89:47:ca:02:
88:4a:d1:5b:0d:c4:10:bf:50:be:83:27:40:5a:67:ba:c2:78:
7f:f6:d0:c6:96:97:d3:07:ee:35:37:50:93:c4:b6:cc:30:8e:
c1:c3:56:e6:0b:05:5e:0c:64:71:98:98:ee:cc:c9:33:09:1a:
e9:e2:99:9c:ba:0f:21:a4:c5:cf:cd:a6:69:bb:f3:85:02:8d:
14:ce:3a:cf:0e:49:f3:a3:63:4f:bd:cd:8a:bb:9f:92:31:11:
1c:d8:bc:c0:e9:c7:42:69:e0:29:fb:1b:ef:66:56:c8:6a:96:
7e:76:1d:d7:b4:62:c6:92:4b:c2:f5:8e:bb:19:17:84:70:24:
e4:8f:d2:e8:db:65:05:5a:d8:c1:16:d4:83:cf:78:fb:fa:70:
4d:d6:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org