Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/V6GG8Xk349fpzIqREszGiV9Zk6c.roa
File: V6GG8Xk349fpzIqREszGiV9Zk6c.roa (raw, json)
Hash identifier: nXibj9WPlwA6bZbYtqwPSvhRmqflyyemv5mXIPIi1aI=
Subject key identifier: 57:A1:86:F1:79:37:E3:D7:E9:CC:8A:91:12:CC:C6:89:5F:59:93:A7
Certificate issuer: /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial: C7A74D
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/V6GG8Xk349fpzIqREszGiV9Zk6c.roa
Signing time: Mon 13 Jun 2022 07:20:28 +0000
ROA not before: Mon 13 Jun 2022 07:20:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208976
IP address blocks: 2a12:66c7::/48 maxlen: 48
2a12:66c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13084493 (0xc7a74d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Validity
Not Before: Jun 13 07:20:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57a186f17937e3d7e9cc8a9112ccc6895f5993a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7a:0c:26:3c:be:70:8e:b7:3d:6d:d2:1a:e6:
15:57:5b:29:fa:97:08:40:15:24:e0:c0:95:f0:b8:
92:33:e6:50:1b:3a:40:1e:db:37:ef:e4:64:36:07:
8f:63:55:ca:92:34:ec:66:28:13:22:1f:e7:d0:6c:
e8:08:9f:d1:c0:d7:1a:88:df:d7:ed:d2:e0:6c:e2:
75:c2:ed:31:5a:30:e1:9b:92:f2:45:ed:4d:62:0c:
8f:1d:d2:f7:5b:5c:b0:d0:86:51:4e:b3:a2:b6:40:
2a:1e:ec:ad:c5:f7:d7:20:ef:e6:97:84:9e:8a:a1:
2f:4f:2a:7b:cf:9e:40:5b:a8:f5:a6:2c:72:5e:f7:
53:cd:85:fe:3a:68:a2:a6:46:7a:93:b2:1d:80:f1:
43:6a:fc:4a:54:1c:86:a9:66:83:97:af:71:c0:2c:
a7:90:10:0a:ef:d8:11:c2:0d:39:25:aa:c7:61:e5:
2c:12:49:aa:ec:7d:8f:8d:10:ed:71:b5:7b:6e:52:
72:48:3a:1b:d8:f5:3a:1a:c3:84:17:7a:ca:f0:04:
7c:b6:a6:9c:b0:ca:0d:89:1d:b4:59:bf:0c:0b:ad:
17:09:c0:1c:9e:c2:5d:b0:17:53:b4:22:72:95:04:
f9:a8:dc:16:06:de:ec:23:b7:bd:4e:c8:d9:f5:18:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A1:86:F1:79:37:E3:D7:E9:CC:8A:91:12:CC:C6:89:5F:59:93:A7
X509v3 Authority Key Identifier:
keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/V6GG8Xk349fpzIqREszGiV9Zk6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:66c0::/32
2a12:66c7::/48
Signature Algorithm: sha256WithRSAEncryption
3d:df:46:47:5a:6f:61:91:c8:4f:80:b2:60:92:93:a8:25:f0:
e1:5e:f7:7a:bd:ff:e1:e3:52:ff:31:c1:71:6f:2b:eb:e2:3c:
08:0d:79:55:a8:04:d5:d6:f0:37:30:04:5b:95:44:28:9c:a6:
d0:e6:1f:a1:f1:f7:ec:4a:61:83:11:d2:77:3b:d3:4f:2e:c1:
3d:8a:4a:fc:9f:1b:b7:bf:10:9c:97:0a:df:3c:a7:c3:38:20:
02:59:59:9a:7e:8c:3f:5b:af:e6:52:11:99:40:0b:ce:cd:39:
34:8a:1e:90:ea:2d:8c:7a:c8:4f:c9:fb:82:38:68:dc:2f:85:
b5:45:97:fc:af:cd:33:8a:38:52:28:0e:c5:c8:52:8e:87:5d:
16:e5:9e:2f:2a:86:4f:05:f0:de:93:00:ba:d1:7a:c0:11:bc:
7b:13:a5:84:a3:d7:0e:c9:a8:1b:10:60:18:92:65:00:92:b2:
5d:27:a2:45:8d:0d:68:b7:46:a6:be:fa:37:88:2e:17:ed:a9:
e3:d4:4f:a6:2a:cc:a9:c5:42:67:39:a4:92:aa:5f:26:85:ef:
09:00:86:60:6c:08:58:b7:1a:6d:f1:d1:6c:c3:17:16:39:05:
84:0b:8a:aa:dd:cf:7c:0e:69:95:af:e8:80:1f:0c:90:35:bf:
4f:40:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:16 2024 by rpki-client on console-fra.rpki-client.org