Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Fc_Y37o9vZOtAHThkF0-xFlLIfM.roa
File: Fc_Y37o9vZOtAHThkF0-xFlLIfM.roa (raw, json)
Hash identifier: N8VZI64JMcZfSNVIJxDlBgjosDkGKAL/BIXV13oJLM8=
Subject key identifier: 15:CF:D8:DF:BA:3D:BD:93:AD:00:74:E1:90:5D:3E:C4:59:4B:21:F3
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01853043CEF967B1C456AC217867E9E692EA
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Fc_Y37o9vZOtAHThkF0-xFlLIfM.roa
Signing time: Tue 20 Dec 2022 16:00:28 +0000
ROA not before: Tue 20 Dec 2022 16:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397521
IP address blocks: 2a01:488:bb1c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:43:ce:f9:67:b1:c4:56:ac:21:78:67:e9:e6:92:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Dec 20 16:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15cfd8dfba3dbd93ad0074e1905d3ec4594b21f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2a:5a:36:b3:a5:b0:9d:93:52:2e:69:14:e0:
72:9a:33:da:1f:6e:78:95:19:bb:38:1f:86:0d:26:
57:e1:0f:a3:2b:f8:38:2a:b7:3e:c1:83:e8:0b:a2:
7f:de:fc:6d:1d:13:3f:b9:de:77:70:0c:02:86:a6:
6f:d4:87:9c:4f:11:e6:a2:2c:7f:f6:1e:06:9a:67:
49:ca:2c:39:c3:c1:ef:ec:92:49:14:41:84:17:01:
38:29:dc:67:ba:21:7f:84:a4:ee:09:8b:be:a2:65:
0c:91:d5:20:ef:22:65:22:da:43:96:50:90:6c:59:
c9:9e:7f:96:36:31:97:63:52:23:c4:e4:3c:e6:69:
9a:a8:38:b8:68:52:6a:62:b6:bc:6e:90:86:3d:8d:
68:ab:94:1c:21:ee:ac:d4:75:aa:5d:79:10:0a:17:
48:b3:a0:60:cd:25:d8:b8:a3:4d:40:4f:d0:f7:13:
65:64:32:05:e7:21:ef:bf:2a:16:b0:24:42:6a:71:
b4:68:64:56:56:96:94:96:e9:9b:99:7d:6e:38:43:
87:f0:4f:4b:22:d8:df:db:27:de:a0:56:1c:2d:17:
57:9c:ac:39:34:e4:c0:93:33:e8:02:6e:0d:47:88:
9c:17:99:6f:0a:a4:c1:62:fe:8d:0e:b0:bd:e4:a2:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CF:D8:DF:BA:3D:BD:93:AD:00:74:E1:90:5D:3E:C4:59:4B:21:F3
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/Fc_Y37o9vZOtAHThkF0-xFlLIfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb1c::/48
Signature Algorithm: sha256WithRSAEncryption
33:cd:59:c5:be:09:2c:07:60:b6:9f:21:84:64:f1:65:49:a8:
2e:ab:de:20:5a:28:72:b5:3b:f4:b5:23:86:7b:89:83:86:8e:
0e:8e:29:4a:7f:8b:16:19:41:a1:65:3e:01:7a:4b:00:3e:fd:
8a:a4:6f:d2:46:1f:ec:7d:ea:65:9d:30:e7:3e:23:03:bb:02:
b0:57:61:e0:b3:85:65:4a:e4:93:6e:dd:c7:7b:01:e7:d8:17:
ab:31:7a:f3:ec:f0:a7:f0:b6:76:1d:4e:6e:c1:5b:e7:8b:59:
7c:c0:71:dd:99:a0:95:97:03:2e:ae:60:b6:2a:01:e4:86:aa:
96:c0:4a:61:94:86:97:9e:40:7e:17:a6:15:fc:f6:2c:06:1f:
54:44:0c:f0:8a:b8:18:fa:88:8a:e7:ab:2a:a3:16:28:24:43:
a0:dd:24:c9:75:14:c4:80:a5:bd:90:cf:d3:0d:cb:0d:34:ad:
90:6c:b1:b2:0f:f8:eb:6e:a2:f0:1d:dc:c0:50:29:69:e5:61:
93:9c:26:c9:8e:64:d0:94:8e:86:83:e9:3e:c6:7d:a9:e5:60:
62:5e:1f:16:53:5b:4d:4d:84:01:f7:c2:9b:77:40:15:ec:59:
aa:34:d3:89:ad:fb:bf:f3:d3:e0:52:10:0c:80:b8:24:15:82:
89:bb:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:40 2024 by rpki-client on console-ams.rpki-client.org