Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/6RgM80ZWxzjkIELhFdnZdCR5CzQ.roa
File: 6RgM80ZWxzjkIELhFdnZdCR5CzQ.roa (raw, json)
Hash identifier: OVN0gAMXHJHsYORNNruxOi+KhpVyNkF2TYOnO2dCZd0=
Subject key identifier: E9:18:0C:F3:46:56:C7:38:E4:20:42:E1:15:D9:D9:74:24:79:0B:34
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 08F6EDA1
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/6RgM80ZWxzjkIELhFdnZdCR5CzQ.roa
Signing time: Fri 04 Mar 2022 13:37:45 +0000
ROA not before: Fri 04 Mar 2022 13:37:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212469
IP address blocks: 2a0e:e704:60::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150400417 (0x8f6eda1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Mar 4 13:37:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9180cf34656c738e42042e115d9d97424790b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:ff:20:47:da:87:60:ea:1d:12:58:b7:03:
2c:81:c1:99:8f:d1:b3:2b:90:6c:23:4b:78:54:26:
e2:7f:20:9d:da:b7:cf:e9:77:f0:2c:72:d7:ed:f4:
7a:2f:44:33:59:b0:83:2d:dd:65:63:93:24:3c:c9:
ed:ab:02:e7:4b:d8:ef:94:f4:c4:51:b9:90:65:6e:
d5:ce:6a:17:1f:f8:f2:6c:04:92:3a:39:97:46:35:
75:c6:68:54:d5:f9:62:2c:61:94:cb:2e:d9:cb:cd:
79:cd:f8:ab:c5:cd:26:ed:11:d9:14:a4:3c:02:1d:
cb:0a:d2:1f:0e:32:e3:1e:b7:55:22:18:f1:99:8b:
8a:fc:43:33:a0:92:34:de:78:c3:50:48:6c:e3:43:
e7:bc:b1:4b:11:9b:e8:b9:f1:88:1e:1f:d3:82:8d:
98:69:ba:ba:8c:86:61:03:97:a5:d7:8b:75:b9:f8:
03:13:1c:d9:39:de:37:ed:ab:9d:4c:9f:6d:ff:f7:
af:7e:9f:f6:6d:bd:01:50:aa:b7:cd:de:83:05:a8:
35:b6:79:ce:22:af:89:6b:7c:57:cf:fb:d2:20:df:
20:fe:8a:c7:25:b7:88:b6:89:ba:8a:2f:a0:fa:7f:
64:4d:97:be:b6:a5:56:d3:c7:9f:36:e0:9d:2e:6a:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:0C:F3:46:56:C7:38:E4:20:42:E1:15:D9:D9:74:24:79:0B:34
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/6RgM80ZWxzjkIELhFdnZdCR5CzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e704:60::/44
Signature Algorithm: sha256WithRSAEncryption
14:e8:b5:98:a0:9c:10:6e:d8:ce:b2:a4:bb:09:7e:fd:c4:49:
90:36:3e:a0:3c:d8:81:aa:e8:0a:36:62:24:ae:7c:69:54:82:
bc:fc:0e:f1:84:19:94:ff:36:6a:f3:2a:59:30:0a:59:44:42:
cf:cf:bd:24:7d:1b:5f:19:c4:07:ef:2c:00:4e:82:38:fa:e4:
ea:6b:ef:e8:a3:82:59:c6:3c:d6:54:ad:eb:8f:a1:dd:a1:18:
c4:8c:c9:26:30:11:9e:2a:a5:30:e4:ff:e5:83:3d:f1:32:94:
d4:8a:73:53:9e:e9:04:f0:3f:f0:72:b3:7e:73:63:e1:6e:b8:
65:e3:81:bf:08:5a:eb:36:6b:20:9f:d9:07:69:7a:71:50:9a:
ea:74:cf:be:01:f0:23:fa:a7:0c:52:b4:4e:d1:ec:31:32:4d:
f7:be:a4:f8:2c:63:1a:89:e8:b0:0b:10:53:09:4a:18:c0:5d:
c4:5c:c2:18:09:df:78:07:af:f4:ed:c9:11:1a:65:3c:b3:3f:
66:ad:05:ee:1c:85:c9:a1:b4:2e:71:5d:fb:eb:43:24:f7:35:
37:83:4b:9d:b1:7b:3b:17:7a:ab:45:65:bd:eb:02:d1:ed:30:
7c:f9:7f:ee:45:f2:cd:5a:ee:98:73:14:ae:1d:88:3a:5d:6f:
77:d9:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:10 2024 by rpki-client on console-ams.rpki-client.org