Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/Qya1jaXPkLDjUNDHZhX1ULxkBKw.roa
File: Qya1jaXPkLDjUNDHZhX1ULxkBKw.roa (raw, json)
Hash identifier: apexOeJczJ1mgRpZdV/7na/c/v/A2jiNNmjfU+N7n/s=
Subject key identifier: 43:26:B5:8D:A5:CF:90:B0:E3:50:D0:C7:66:15:F5:50:BC:64:04:AC
Certificate issuer: /CN=918283d785cc88ef8520862ac161f27b5630bc14
Certificate serial: 10BC64C4
Authority key identifier: 91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/Qya1jaXPkLDjUNDHZhX1ULxkBKw.roa
Signing time: Sat 01 Jan 2022 16:01:11 +0000
ROA not before: Sat 01 Jan 2022 16:01:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202739
IP address blocks: 2001:678:1e0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280782020 (0x10bc64c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918283d785cc88ef8520862ac161f27b5630bc14
Validity
Not Before: Jan 1 16:01:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4326b58da5cf90b0e350d0c76615f550bc6404ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:86:d1:d4:bc:ed:de:4c:76:ac:8d:21:f4:
4d:0a:0e:85:c9:5b:64:f1:ec:b7:84:a6:e1:9e:82:
cf:e5:2c:13:5b:65:e0:97:f3:6b:76:4d:f2:21:83:
01:19:fe:a9:b4:1a:19:e3:92:48:9d:0e:4f:a9:51:
9f:95:19:ef:cf:22:24:16:54:e1:1b:6a:28:22:9a:
4d:3e:ad:f3:25:54:cc:93:ef:c1:8e:2a:d9:0f:55:
c3:12:d0:cc:86:f9:23:59:e9:35:88:26:1e:01:9b:
08:6d:f9:42:76:5e:3c:55:07:86:16:fe:10:d3:02:
bf:73:ae:f9:d9:36:08:e4:41:90:45:7d:9f:c8:2e:
aa:ed:f8:13:e4:f6:1f:5a:08:2b:46:15:47:0c:6c:
4d:a4:02:bb:78:a1:74:37:7f:af:9f:4d:ca:48:ab:
01:77:1c:65:8f:be:09:4f:e9:1c:46:7d:86:63:db:
d8:da:63:8f:65:84:fb:58:df:43:12:f1:43:54:16:
33:a6:63:77:67:ed:cb:fd:83:66:b5:3e:b1:c3:6d:
e1:9b:8d:6d:39:45:53:57:fe:be:27:03:96:c3:6f:
a3:18:95:e2:e0:7d:af:41:2c:ba:ae:3f:bc:51:cb:
89:b3:72:90:c6:3f:fd:c2:8a:d1:a4:f3:db:df:ab:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:26:B5:8D:A5:CF:90:B0:E3:50:D0:C7:66:15:F5:50:BC:64:04:AC
X509v3 Authority Key Identifier:
keyid:91:82:83:D7:85:CC:88:EF:85:20:86:2A:C1:61:F2:7B:56:30:BC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYKD14XMiO-FIIYqwWHye1YwvBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/Qya1jaXPkLDjUNDHZhX1ULxkBKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cca476-a3c8-4a65-8c0c-f32260e05700/1/kYKD14XMiO-FIIYqwWHye1YwvBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1e0::/48
Signature Algorithm: sha256WithRSAEncryption
4f:a3:a0:d4:04:2e:f5:32:2c:1d:92:f9:42:37:eb:14:92:5c:
8a:4d:57:3f:f5:fc:b2:ef:31:5b:a9:38:5f:14:d2:0a:68:ee:
e8:b7:14:9e:e2:81:68:cf:4b:b6:fc:c4:4f:3c:8a:9d:ab:d0:
c7:aa:97:85:e4:f9:2d:b7:da:f7:fe:aa:6b:61:49:8e:1b:12:
db:01:73:b9:47:cf:13:50:cf:47:ff:cf:e2:23:27:79:d6:0f:
c8:b0:b5:2b:8a:ff:ca:72:ee:b3:e5:c1:6e:96:7a:be:23:de:
c9:3e:08:cb:8f:69:54:f0:1f:98:fd:95:cc:2a:f1:85:d1:3e:
c6:12:cc:f3:e4:82:c1:e0:3b:15:84:27:f9:92:95:fa:c3:c8:
94:4f:43:18:10:38:d8:a9:78:88:01:48:4c:0c:6e:66:5b:27:
f9:96:99:11:16:ab:18:74:e5:25:ea:3c:07:c9:69:b3:30:94:
2f:fe:be:63:10:7f:f9:5a:9a:72:ed:a1:f0:6f:e2:b1:5e:39:
89:a0:05:f1:15:e9:b9:9f:cd:d9:09:4c:70:03:98:c1:1e:e7:
1f:0b:5e:94:06:c4:56:9f:24:51:f5:1a:d6:cb:55:f7:b0:66:
9e:2e:5d:0c:77:f5:c8:e9:85:6b:5f:ee:63:35:5f:51:ea:b0:
c7:76:24:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:01 2024 by rpki-client on console-fra.rpki-client.org