Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/V8s8lpoYXwZbCCZyDHrzRS6f9S8.roa
File: V8s8lpoYXwZbCCZyDHrzRS6f9S8.roa (raw, json)
Hash identifier: JdZDHKNm/FMBo4pJdhfbL0bVHpSrZIBJyJe0XlAtvIo=
Subject key identifier: 57:CB:3C:96:9A:18:5F:06:5B:08:26:72:0C:7A:F3:45:2E:9F:F5:2F
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 0182C6AA734FE5D7E4BE3840C328B0230601
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/V8s8lpoYXwZbCCZyDHrzRS6f9S8.roa
Signing time: Mon 22 Aug 2022 17:47:15 +0000
ROA not before: Mon 22 Aug 2022 17:47:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57450
IP address blocks: 2a13:1500:3b0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:aa:73:4f:e5:d7:e4:be:38:40:c3:28:b0:23:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Aug 22 17:47:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57cb3c969a185f065b0826720c7af3452e9ff52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:0e:2d:31:12:37:d6:be:a2:35:a3:8b:2b:
30:33:c7:81:05:3c:00:47:a2:b8:da:9b:39:4c:41:
c8:49:36:51:2e:af:a8:85:b1:1e:18:07:4c:46:91:
7a:97:4d:aa:5b:45:67:cf:11:48:66:ca:00:90:a7:
e6:a5:46:08:70:7a:0b:46:33:cb:50:ea:82:f7:ed:
c0:4b:42:30:3b:b4:1c:04:a3:76:11:6a:73:e7:2d:
75:10:03:ad:ae:c1:df:37:34:93:a5:a4:46:df:fb:
ab:42:03:a7:1b:ef:5d:cb:7d:7d:82:c9:07:4c:7f:
d4:b7:f9:0d:e7:a0:aa:9b:d2:af:92:53:51:67:1c:
5e:d7:d4:c2:16:8f:58:35:64:a7:8b:e6:b5:3f:0d:
ca:55:7e:fa:a5:84:40:1f:06:32:5c:3b:7c:91:ac:
25:89:9d:bb:fd:44:17:e1:ca:4b:35:50:9f:fa:92:
63:01:2b:07:32:95:0c:1d:f7:36:61:bd:ea:11:0e:
71:65:f0:61:a3:9c:dc:08:ed:cb:61:52:69:4e:08:
fb:af:7c:5d:62:2c:d0:76:3d:dd:fa:4b:50:7b:da:
bf:e8:4e:35:83:bf:e8:51:f0:48:a5:c7:18:f2:62:
ca:b3:c4:47:3c:46:7a:18:8b:2c:80:eb:4b:63:4a:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CB:3C:96:9A:18:5F:06:5B:08:26:72:0C:7A:F3:45:2E:9F:F5:2F
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/V8s8lpoYXwZbCCZyDHrzRS6f9S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1500:3b0::/44
Signature Algorithm: sha256WithRSAEncryption
7a:ce:50:31:1f:36:87:37:9d:4d:9f:69:a8:8c:5b:79:f3:79:
38:6f:84:cf:37:64:f3:e8:25:9b:4d:e4:03:cf:cf:0b:d7:1a:
25:08:65:27:10:fb:9d:b0:32:7d:a4:6d:5e:db:93:7e:4f:e2:
03:9f:b6:95:b0:af:d4:c1:85:db:af:e8:b7:f1:06:f6:c1:b0:
18:73:16:ec:b9:42:46:18:b4:f8:70:3a:0c:a2:b5:96:bf:64:
ab:e5:43:63:e6:a7:e2:7d:99:6f:4a:2b:05:a3:dd:1b:c0:16:
38:78:e8:e2:c0:c9:70:7a:c0:c3:c0:c9:3b:9d:d0:cb:74:04:
9f:58:02:80:f6:0e:63:e0:83:07:a5:e2:46:d7:4e:89:53:f8:
03:9a:fc:30:c7:54:7a:7a:e7:db:2b:89:19:a4:2e:5d:ab:c7:
69:ab:e2:cf:42:7a:19:bc:a5:a6:89:8b:3d:40:c2:a1:dc:45:
7e:31:2c:94:8c:54:56:8e:1e:51:a4:d6:07:d3:ad:cc:30:c7:
99:5a:4d:73:bf:b8:a7:a6:88:a6:01:4c:52:3e:9f:4e:04:7c:
76:5b:5e:a3:88:b4:41:14:9b:9a:46:af:f0:23:f6:e3:d1:2e:
f4:de:7b:85:9e:88:6c:45:d9:f8:2a:c2:23:24:6a:91:15:fe:
03:00:50:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:28 2024 by rpki-client on console-ams.rpki-client.org