Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/mii9iccrpSET_4-qzqIS5apExl4.roa
File: mii9iccrpSET_4-qzqIS5apExl4.roa (raw, json)
Hash identifier: ffyjv/MP3M5MNqxrQEr7pxW/Dy4Izjm0N3XXF4CU1zI=
Subject key identifier: 9A:28:BD:89:C7:2B:A5:21:13:FF:8F:AA:CE:A2:12:E5:AA:44:C6:5E
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 09BB4B3C
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/mii9iccrpSET_4-qzqIS5apExl4.roa
Signing time: Sat 01 Jan 2022 12:05:43 +0000
ROA not before: Sat 01 Jan 2022 12:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210596
IP address blocks: 2a0a:d6c0:9145::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163269436 (0x9bb4b3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 1 12:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a28bd89c72ba52113ff8faacea212e5aa44c65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bd:c9:bf:b3:6e:41:36:df:88:73:f3:af:7e:
ef:d1:39:23:64:60:c5:2c:6d:b6:ff:12:0b:83:64:
12:4f:b0:75:14:7e:7e:ee:bd:40:52:15:c0:2a:81:
f2:11:75:1a:89:d6:26:d9:0c:10:71:7b:73:e6:0e:
47:50:3c:bd:a3:9f:3a:a4:8b:c8:10:b1:72:8f:83:
2c:58:17:d0:bd:95:34:13:65:b9:88:bd:c3:1b:b2:
f9:0a:1a:ab:65:e5:f6:1e:5d:72:b9:f8:bd:98:8e:
90:2c:dc:c5:04:0d:46:1f:c2:df:9a:3a:8e:00:66:
2a:f9:14:92:0a:65:d0:13:51:07:f1:81:ca:78:cb:
c4:10:a5:92:67:5a:23:9b:48:51:15:1a:56:39:0a:
3e:85:a5:f3:98:1a:82:6d:7d:65:9d:5f:a0:82:a0:
cb:a7:ab:58:5a:47:22:f9:40:f4:03:3a:88:c2:53:
d9:5f:86:b7:ed:9b:b5:c4:0b:0c:13:f0:d0:23:b1:
52:b2:a0:f9:6e:93:f8:74:11:0d:ca:e8:21:c4:26:
39:72:3d:ea:14:77:23:d1:82:7e:af:04:84:0c:d9:
8d:20:5d:57:66:94:dc:43:1c:a7:9a:22:a2:63:09:
97:57:90:5b:80:b6:b2:eb:18:dd:28:a1:ac:23:b5:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:28:BD:89:C7:2B:A5:21:13:FF:8F:AA:CE:A2:12:E5:AA:44:C6:5E
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/mii9iccrpSET_4-qzqIS5apExl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d6c0:9145::/48
Signature Algorithm: sha256WithRSAEncryption
8a:65:de:60:a7:2f:38:72:c0:3c:00:ae:3d:71:64:48:da:40:
ee:43:63:87:82:4c:2d:f3:a1:87:c7:1a:1a:a9:d3:4a:e4:ce:
6b:42:a1:16:f6:5c:e5:3a:3a:20:57:5f:19:2a:fc:4b:e4:36:
f1:9b:2d:87:e3:96:00:83:76:09:b0:4a:91:4a:86:c7:60:92:
49:9c:1b:4b:0c:56:77:22:8a:17:3b:5e:ab:b0:a8:42:12:c6:
55:e0:0f:40:c5:8c:9e:dc:b7:d9:91:12:01:92:39:b6:b5:a8:
fb:c2:30:78:0a:f6:93:77:34:43:5a:b6:e0:c2:ae:3a:26:20:
f3:3c:85:7c:a3:6a:b1:91:df:ea:72:7e:02:2d:1d:db:c4:d8:
a3:66:ae:a5:e2:8a:fd:28:64:db:e4:3a:9f:6d:0f:59:b8:23:
d9:90:d8:72:5f:f3:13:49:4b:48:bd:76:af:9a:9f:26:85:f5:
5e:e5:a9:e8:f6:f4:b2:fe:95:2e:49:52:cd:07:1b:95:db:f0:
47:77:d8:19:10:a2:7c:ef:bf:10:a9:33:09:93:1b:8a:1f:4c:
be:7f:76:db:53:cc:39:c1:95:22:23:15:97:2d:a2:72:53:97:
fb:7b:68:e1:88:03:c0:f8:d9:dd:a6:73:b4:d6:43:9b:43:ca:
94:f6:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:38 2024 by rpki-client on console-fra.rpki-client.org