Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/smpCMHhB3gYFTadY7Wa06Daoh7Y.roa
File: smpCMHhB3gYFTadY7Wa06Daoh7Y.roa (raw, json)
Hash identifier: R7WPvBFjK255sS6t8xRrGpzZAWsSFsTEtfOfV1Mzy3M=
Subject key identifier: B2:6A:42:30:78:41:DE:06:05:4D:A7:58:ED:66:B4:E8:36:A8:87:B6
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: D213FC
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/smpCMHhB3gYFTadY7Wa06Daoh7Y.roa
Signing time: Sat 04 Jun 2022 10:41:34 +0000
ROA not before: Sat 04 Jun 2022 10:41:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 2a12:fc0:10::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13767676 (0xd213fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Jun 4 10:41:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b26a42307841de06054da758ed66b4e836a887b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:ca:60:e8:76:e8:6f:75:4d:11:44:29:e2:
d2:e3:b6:10:0a:db:5f:b9:6e:2b:31:0a:5b:e6:be:
c9:0b:62:24:13:b9:ca:96:21:51:65:01:a1:5f:e4:
92:ea:b6:2b:68:41:2b:4a:be:61:31:71:3a:90:c9:
fe:d5:dd:c9:fe:9c:38:e0:17:e2:5c:f4:5f:f2:9f:
6d:2d:ff:2f:e6:57:69:c6:59:99:8e:8f:27:b0:49:
a0:73:fc:2e:b1:d8:da:e1:0e:b6:41:6e:39:95:c7:
30:b9:61:ee:8f:1a:7f:c4:0c:21:97:4f:78:14:c9:
bc:55:ed:14:ca:ec:cb:3a:be:28:22:07:2f:1c:59:
b1:5a:e3:a1:a3:b3:44:2e:97:18:8f:99:77:d1:31:
7b:7e:a8:59:85:04:d4:46:15:4e:f2:34:56:89:91:
8b:b1:e9:4d:b5:67:ec:a2:67:81:a7:0c:b9:b1:c1:
a9:9a:2c:1c:5a:71:99:6c:dd:67:f3:f9:5a:80:ce:
0c:c4:8e:25:b7:a4:2e:01:10:b8:ca:0d:a0:42:0d:
ad:86:16:39:ff:5a:72:e3:9f:af:36:45:18:8a:36:
55:d4:93:c4:36:16:82:d6:40:1b:61:67:be:81:78:
3a:46:c1:82:50:be:8b:80:a3:8a:fe:1d:34:ed:a2:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6A:42:30:78:41:DE:06:05:4D:A7:58:ED:66:B4:E8:36:A8:87:B6
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/smpCMHhB3gYFTadY7Wa06Daoh7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:fc0:10::/44
Signature Algorithm: sha256WithRSAEncryption
cf:5d:e2:03:1e:e7:7f:13:a6:70:0e:4e:e4:68:5d:96:be:6f:
c6:d6:ca:b4:5e:d5:d8:3d:ee:5e:d1:cb:72:e7:e2:a4:10:56:
92:76:b3:8a:47:83:55:8f:9f:e2:a1:20:cc:d7:79:e0:e7:73:
86:8e:26:6b:26:cd:74:8c:e1:1f:e3:a0:37:fa:4f:72:07:e3:
c7:c5:79:0c:1a:e8:1b:45:41:cc:e9:dc:67:5a:54:e5:5f:a3:
e4:a8:9c:3a:a5:b8:71:fe:ef:01:78:d3:f6:59:99:1b:11:4c:
61:44:29:35:c0:28:77:13:59:d7:21:bb:69:f7:b7:eb:9c:4a:
e2:fb:d0:46:21:8b:94:c1:eb:ed:e3:9b:79:f6:45:cf:b5:81:
c8:79:42:c7:b2:15:8e:5a:21:0e:dc:a1:bb:fb:cd:b8:91:66:
17:fd:65:30:1b:1c:11:d7:45:3c:1c:5f:9e:eb:1e:72:bb:6d:
f6:16:f5:d9:b6:e5:44:2a:54:dd:f0:af:56:33:41:98:0e:a6:
db:3e:5f:bf:f7:45:69:ce:ae:b7:6f:81:81:aa:b0:aa:df:9b:
5c:e0:a8:bd:44:fd:41:2d:2e:be:57:c7:38:03:82:1d:d7:6a:
3e:0a:10:c8:11:1f:9f:fa:60:f0:58:57:b6:48:1b:b9:06:3d:
a1:a7:4d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:11 2024 by rpki-client on console-fra.rpki-client.org