Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/FJxL7uWk_uWYaz8qASUevVZEzvw.roa
File: FJxL7uWk_uWYaz8qASUevVZEzvw.roa (raw, json)
Hash identifier: uPPnYOkto3+Rt04vj45M7PASuso56qa7tHs8HSafnjA=
Subject key identifier: 14:9C:4B:EE:E5:A4:FE:E5:98:6B:3F:2A:01:25:1E:BD:56:44:CE:FC
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018475AF8C98F240FB23685236D05A64D8C2
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/FJxL7uWk_uWYaz8qASUevVZEzvw.roa
Signing time: Mon 14 Nov 2022 10:29:09 +0000
ROA not before: Mon 14 Nov 2022 10:29:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397517
IP address blocks: 2a01:488:bb14::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:af:8c:98:f2:40:fb:23:68:52:36:d0:5a:64:d8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Nov 14 10:29:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=149c4beee5a4fee5986b3f2a01251ebd5644cefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6f:8d:ff:1d:06:59:09:8e:31:2d:7f:4a:12:
83:dc:51:97:69:fa:0a:b6:b0:0c:4e:72:58:10:86:
16:47:85:6c:c7:5c:26:2b:56:64:87:cf:b6:b4:a0:
ee:9b:24:c6:c1:83:88:bd:54:cb:5e:6c:9a:b9:e5:
1f:0f:3c:00:8c:32:a1:93:33:1f:ee:18:53:4f:83:
86:12:7c:cc:72:96:e0:03:fb:a3:c2:48:63:8d:8b:
a2:ed:46:db:3a:d3:7e:88:79:24:0b:47:aa:44:af:
a1:83:4c:7d:a3:83:dc:6f:3c:2b:36:c9:44:32:c0:
2d:69:42:01:c7:0d:98:d4:93:91:14:6c:0e:c1:b7:
f0:63:ce:71:5e:1f:67:ed:3a:88:15:0b:75:fa:d5:
90:d9:b2:0d:84:28:4a:c6:e5:e1:8c:bf:60:53:e3:
d4:d4:34:5e:64:69:83:f3:6f:ec:7f:25:ba:54:a2:
fd:bb:17:9f:e8:02:ea:dd:31:70:db:42:b4:5b:9a:
23:b6:b0:b7:38:9f:3d:4a:39:6b:77:bb:6c:a6:a2:
ba:c1:fd:44:16:51:72:c1:7c:ef:bb:d7:4b:be:44:
92:2a:1b:45:14:9a:a0:11:47:71:88:01:8d:d4:fa:
77:9b:15:92:42:91:c5:24:76:97:76:16:ae:ed:28:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9C:4B:EE:E5:A4:FE:E5:98:6B:3F:2A:01:25:1E:BD:56:44:CE:FC
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/FJxL7uWk_uWYaz8qASUevVZEzvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb14::/48
Signature Algorithm: sha256WithRSAEncryption
01:ed:e8:e6:98:6d:c2:04:ca:e5:81:e0:49:90:1f:35:e4:41:
bb:19:e9:88:13:b2:2e:f6:8a:01:12:54:34:46:97:33:de:6c:
cb:db:03:9f:23:9f:97:b0:6a:f3:cd:4d:4f:f7:88:05:0e:e1:
db:76:6a:56:bc:a6:0b:5f:b0:36:4e:b1:c3:e9:d4:87:e8:1f:
f9:55:4f:33:7f:ac:11:79:65:8e:23:93:04:50:80:67:d3:f5:
b2:9d:61:78:1d:5d:d9:c6:b2:53:16:c3:64:b5:9d:19:45:06:
45:83:e5:7f:94:20:c9:05:04:18:bc:40:8e:b5:c2:ea:a1:b2:
3f:11:18:27:0c:c8:0f:c2:98:b6:d1:20:54:58:de:94:96:27:
10:7d:00:97:0d:ee:0b:45:d5:9b:d8:8c:4d:25:9e:33:82:f9:
08:56:fd:15:e9:b6:29:c5:a3:4b:c0:49:01:b9:c4:16:19:b8:
d4:7c:5f:fa:df:e9:14:8a:06:37:b2:3a:ef:c4:b4:08:22:d3:
b7:0f:d8:82:38:a7:75:0b:b6:a0:d3:b4:7a:c3:80:a8:6b:00:
02:a7:ec:02:58:3d:50:b1:9e:c6:73:f1:34:04:d7:66:38:81:
df:2c:d8:09:79:c2:63:11:57:64:77:0d:a7:1f:66:ce:b4:83:
fd:ac:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:40 2024 by rpki-client on console-ams.rpki-client.org