Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/6TrZPg-vFlez7H34ImPoab-uSrQ.roa
File: 6TrZPg-vFlez7H34ImPoab-uSrQ.roa (raw, json)
Hash identifier: TwLH+UOPG31CKQDAyAZP+BCmWddqNgPsr+vbvl8RSNY=
Subject key identifier: E9:3A:D9:3E:0F:AF:16:57:B3:EC:7D:F8:22:63:E8:69:BF:AE:4A:B4
Certificate issuer: /CN=95406691f2e374ee37a640492a364dfc53ba4412
Certificate serial: 06398BCC
Authority key identifier: 95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/6TrZPg-vFlez7H34ImPoab-uSrQ.roa
Signing time: Sat 01 Jan 2022 14:58:22 +0000
ROA not before: Sat 01 Jan 2022 14:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207754
IP address blocks: 2001:678:c40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104434636 (0x6398bcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95406691f2e374ee37a640492a364dfc53ba4412
Validity
Not Before: Jan 1 14:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e93ad93e0faf1657b3ec7df82263e869bfae4ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:64:27:a4:7f:3d:18:22:3d:e1:22:cc:fc:
3b:0e:33:47:20:e7:36:88:3a:ba:25:0e:ce:e0:52:
a8:92:ff:5b:3b:62:96:c2:2b:df:f8:b8:e4:5d:8d:
4e:c3:a0:80:e4:63:f9:da:cc:a5:34:d9:7d:55:01:
ac:ed:89:8b:00:1e:ea:5d:bd:01:46:5b:98:34:72:
17:29:5a:a4:f0:4d:87:87:96:41:2c:98:86:ba:77:
64:7c:ff:fe:86:ca:1d:01:44:01:c3:6d:7d:7a:48:
92:88:80:d3:4e:d1:20:89:35:1e:a0:2e:aa:a6:29:
f3:d5:5a:c0:5a:8d:f9:03:9a:d7:c1:0a:57:66:73:
e4:b3:18:32:43:72:44:5e:64:76:78:e2:70:89:ef:
4b:b0:f2:f6:6f:4e:b6:c7:34:be:f0:89:99:e8:ab:
be:10:ea:62:ec:6d:33:a7:fd:65:53:f1:60:a3:6c:
47:f9:be:31:97:39:f1:d7:5a:ec:0e:7d:ad:0a:1e:
fd:27:0d:21:a9:20:d7:5e:7d:40:43:d9:a6:ce:80:
44:de:00:5e:63:6d:34:f3:64:39:fc:d9:e3:2e:ff:
d4:c5:d4:71:0f:f8:22:c1:06:a6:cc:02:6f:34:e3:
57:5c:9e:89:8f:85:6d:3d:94:fa:8a:6f:55:c0:80:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3A:D9:3E:0F:AF:16:57:B3:EC:7D:F8:22:63:E8:69:BF:AE:4A:B4
X509v3 Authority Key Identifier:
keyid:95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/6TrZPg-vFlez7H34ImPoab-uSrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c40::/48
Signature Algorithm: sha256WithRSAEncryption
9e:93:22:59:68:ab:15:fd:7a:4e:01:3b:77:cc:c2:25:22:87:
42:3d:4e:d3:f5:cd:95:a8:c9:f0:e4:4b:9e:6e:52:23:6b:0a:
46:64:e1:a1:19:c8:21:51:81:f7:a1:dc:45:3b:c6:4f:ac:53:
a5:0d:79:3b:9d:64:12:9b:3b:ec:0b:53:54:86:60:ee:32:21:
4f:b7:26:1b:e8:48:c6:38:80:88:42:ee:07:7e:09:4f:31:4c:
c7:e4:be:f2:cf:f4:3d:24:14:7b:6b:a4:94:b4:5c:15:bc:0e:
c3:66:b4:d3:45:ec:1a:70:1c:e1:48:1a:d0:ba:ac:e6:b9:e4:
b4:3c:7d:c0:fe:8d:1e:51:74:87:9d:8f:31:ee:cf:2a:cf:55:
ee:ac:5f:d2:98:2f:5e:c7:f0:12:13:0d:c1:5b:a0:85:a9:13:
2b:ce:24:49:36:d2:ba:94:90:29:d6:b1:e6:67:8b:dd:b7:1a:
c1:9d:38:19:da:8b:5f:37:a8:d2:99:e8:51:0f:d5:81:ff:06:
b8:65:94:b8:2b:1b:1c:ec:04:5c:0d:51:e7:15:2b:97:9f:93:
14:72:c8:5f:77:eb:47:e6:64:bf:7d:bb:ee:5f:30:f4:6e:b7:
f9:99:a9:f1:36:8d:85:e1:7a:cf:12:74:d2:8f:76:6e:1a:b4:
3c:07:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:36 2024 by rpki-client on console-fra.rpki-client.org