Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/WOq9fR6NblMTtvtyoSGKCbzfnjw.roa
File: WOq9fR6NblMTtvtyoSGKCbzfnjw.roa (raw, json)
Hash identifier: 9m8/5YZ349kWhoqr/rvoSjOZ0TZi5dMQIjfIYnLHGVU=
Subject key identifier: 58:EA:BD:7D:1E:8D:6E:53:13:B6:FB:72:A1:21:8A:09:BC:DF:9E:3C
Certificate issuer: /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial: 69361F
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/WOq9fR6NblMTtvtyoSGKCbzfnjw.roa
Signing time: Mon 02 May 2022 11:12:09 +0000
ROA not before: Mon 02 May 2022 11:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207108
IP address blocks: 2a12:ab40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6895135 (0x69361f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
Validity
Not Before: May 2 11:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58eabd7d1e8d6e5313b6fb72a1218a09bcdf9e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:7c:50:92:37:b8:bf:5c:db:57:f0:c8:e8:
88:54:0f:22:d2:a3:4c:2d:49:a8:53:4a:d0:e0:50:
22:59:d7:56:6a:d6:5c:54:85:bd:41:0c:63:ee:38:
24:73:94:b4:99:d4:02:eb:5e:4b:54:5c:3b:94:9f:
39:79:22:43:76:79:25:92:bb:65:95:50:b6:82:d0:
35:9c:32:73:b7:d4:c7:6b:b4:10:1f:f3:62:00:38:
26:f3:76:35:e4:48:e2:6d:ce:28:0f:d1:21:a8:38:
a8:24:d8:fe:7a:f2:63:c4:28:6b:47:16:55:2e:b5:
3d:fe:7a:ef:0c:cc:7e:0a:48:f4:58:08:9e:71:cf:
cd:ec:fb:4a:43:30:07:62:90:e3:1e:7a:e4:2e:b3:
a4:bd:e4:e3:97:3f:93:0a:5b:62:44:af:dc:fc:c9:
fe:87:5e:04:62:0f:d2:5b:18:be:09:5c:74:fa:c7:
d9:dc:ae:d3:99:13:28:71:7a:ae:bc:41:d0:99:c8:
1c:83:ab:09:1a:e0:48:56:fa:f8:94:01:3f:c5:c2:
f9:a8:72:c2:26:23:75:85:db:71:b9:31:ef:f9:f5:
38:33:0f:78:25:6f:cb:9f:4d:e1:53:4b:d6:64:98:
4b:be:69:bb:14:27:26:06:4a:6e:60:b0:62:68:b0:
4d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EA:BD:7D:1E:8D:6E:53:13:B6:FB:72:A1:21:8A:09:BC:DF:9E:3C
X509v3 Authority Key Identifier:
keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/WOq9fR6NblMTtvtyoSGKCbzfnjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ab40::/29
Signature Algorithm: sha256WithRSAEncryption
72:1e:ee:55:06:8e:84:0e:f7:75:5d:fd:c8:8d:76:7e:e0:3e:
c9:96:a8:d0:0e:17:b4:af:16:07:c3:77:c2:f4:b2:cf:bc:ce:
68:6e:a8:77:4b:95:24:e4:8a:0e:91:be:ad:10:f0:d5:a9:fd:
3c:94:15:39:37:65:5d:0e:87:24:72:c8:36:cd:69:a7:8a:d5:
ce:21:05:e2:32:f7:23:c7:da:8f:80:cd:66:0d:34:e2:cc:1f:
8f:e4:a4:a5:de:fe:69:d7:05:e8:15:f1:48:c8:4d:72:07:73:
cf:5c:df:f8:a8:82:f5:a4:77:bf:88:47:c1:c2:14:9b:5e:de:
f5:13:ee:e4:20:f9:c7:d6:89:75:bf:2a:b3:30:62:b4:fc:0a:
61:eb:4d:9f:ad:20:c1:89:fb:db:b8:6c:b7:7b:61:9a:20:9d:
51:e9:ae:03:b3:ca:33:eb:e8:2a:86:71:9f:94:ac:4c:ee:ba:
72:bb:89:9d:2e:b7:b7:6b:84:a3:39:ed:54:54:b4:b4:e9:47:
08:bb:4b:40:fa:cd:b5:3a:68:40:a5:0d:f1:c5:37:c3:99:b3:
cc:c8:b6:26:0e:94:2d:41:3a:53:4f:d9:eb:22:2f:03:ec:93:
62:87:b7:5e:03:44:3a:0c:10:87:08:43:f9:2f:11:82:21:cc:
81:a2:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:41 2024 by rpki-client on console-ams.rpki-client.org