Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/qVfGy4ElEY5PKb1Mw-Z9AkOZ6SA.roa
File: qVfGy4ElEY5PKb1Mw-Z9AkOZ6SA.roa (raw, json)
Hash identifier: ScaCFfgeBr12CtbDeqZwl8u3KbXsabEDOWNbOKbrIqA=
Subject key identifier: A9:57:C6:CB:81:25:11:8E:4F:29:BD:4C:C3:E6:7D:02:43:99:E9:20
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: D14A
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/qVfGy4ElEY5PKb1Mw-Z9AkOZ6SA.roa
Signing time: Thu 24 Feb 2022 16:59:35 +0000
ROA not before: Thu 24 Feb 2022 16:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12525
IP address blocks: 2001:67c:554::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53578 (0xd14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Feb 24 16:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a957c6cb8125118e4f29bd4cc3e67d024399e920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:5e:28:1a:64:19:c6:07:2e:6c:a1:78:8a:
2a:15:a4:9a:9e:47:be:a9:ba:0d:86:eb:00:4f:b0:
11:94:6c:fe:23:9a:bb:54:1d:61:8c:bd:e2:e4:22:
97:a2:83:86:26:a6:02:59:34:8b:9c:7f:49:5f:b7:
c1:97:27:83:ea:01:91:4a:bc:26:85:8e:47:b8:22:
9d:3f:3c:a7:c7:06:f1:08:5c:fa:04:68:7f:5d:f5:
b7:fb:a4:e6:5d:a1:5d:ff:9f:46:26:9b:33:a5:b5:
5c:8c:2d:b8:9d:5c:d8:f3:13:74:35:71:80:5b:66:
20:2f:0b:86:bf:a0:2f:e4:2f:45:d2:ec:6c:d0:eb:
29:d4:ac:00:17:9b:5d:cd:82:a5:68:b0:dc:52:6b:
9b:87:e4:8a:c9:34:9e:80:44:28:12:e2:c2:e2:08:
9f:8c:ca:d1:86:1d:d0:89:60:e2:4e:79:84:08:c7:
dc:10:d1:69:4d:91:0d:2f:ee:01:05:44:06:28:c6:
1d:44:a9:04:c9:c0:ca:24:31:65:8f:99:87:d1:54:
1a:8b:36:46:c4:f0:9b:c1:b8:9a:af:10:9a:62:91:
64:ec:f8:6a:dd:51:c7:61:35:19:7a:26:fa:48:58:
5f:14:b3:cc:58:20:d1:00:58:fe:d8:7b:f5:0b:87:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:57:C6:CB:81:25:11:8E:4F:29:BD:4C:C3:E6:7D:02:43:99:E9:20
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/qVfGy4ElEY5PKb1Mw-Z9AkOZ6SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:554::/48
Signature Algorithm: sha256WithRSAEncryption
90:ac:64:b9:25:1f:86:29:56:af:4c:44:cc:3f:d5:e8:87:b2:
d4:c4:4b:8c:3a:a1:63:f4:94:c7:83:cc:20:b7:1c:be:cd:ae:
23:be:d4:03:37:c5:93:58:31:1d:3a:f8:f5:22:9d:8e:fc:ec:
61:99:bb:62:78:6e:9b:32:d2:5a:6b:00:89:fb:65:30:8e:cc:
3e:ba:33:04:ca:a2:6b:a2:61:69:34:08:1e:6d:9f:e5:d9:a8:
d8:12:07:1a:9a:38:c9:b6:eb:22:c1:6e:76:a2:76:5a:d2:0f:
df:9d:05:c0:a8:cc:ef:3c:4f:24:a7:fd:67:3a:77:24:b9:bb:
0a:dd:0e:9b:b4:af:b2:83:57:83:54:c6:f3:46:9a:86:99:8e:
67:73:d6:bb:e7:2b:69:fe:b4:a6:aa:34:6f:a0:42:04:45:af:
a7:c2:6c:c5:fd:51:43:82:4b:4c:b5:6d:ff:c7:4f:48:f0:20:
07:0b:22:7d:0a:e0:9d:ea:0d:41:dc:ad:d4:50:2b:53:6e:d1:
17:dd:58:44:77:f3:65:7b:a5:5f:a3:7e:49:4f:e8:6e:87:03:
61:37:c6:f1:d0:b9:c1:7c:f6:b2:7c:33:d8:68:b0:e4:ea:c0:
52:03:54:34:81:25:66:41:e2:ef:02:2c:56:ac:11:be:47:64:
84:61:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:06 2024 by rpki-client on console-fra.rpki-client.org