Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/uTbPS8FLjrIvoruQSlcuLuNweC4.roa
File: uTbPS8FLjrIvoruQSlcuLuNweC4.roa (raw, json)
Hash identifier: uFEmf6d6Is6/sRGIeOKTUyfFchbtPBwH8XwIc8mHY+U=
Subject key identifier: B9:36:CF:4B:C1:4B:8E:B2:2F:A2:BB:90:4A:57:2E:2E:E3:70:78:2E
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 021416
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/uTbPS8FLjrIvoruQSlcuLuNweC4.roa
Signing time: Thu 10 Mar 2022 11:51:15 +0000
ROA not before: Thu 10 Mar 2022 11:51:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210045
IP address blocks: 2a12:2140::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136214 (0x21416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Mar 10 11:51:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b936cf4bc14b8eb22fa2bb904a572e2ee370782e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:51:03:ca:65:f7:7f:ff:78:09:ef:e7:85:
d7:16:6f:87:d3:35:f3:9f:55:19:ce:fd:ad:33:05:
6a:d3:0b:74:a8:42:28:2d:12:05:76:b9:dc:65:86:
57:78:1c:dd:98:b7:70:34:80:35:7a:12:fe:5c:33:
25:c2:53:9f:6e:7a:12:29:d4:b3:69:3f:c7:6b:b7:
a8:9b:83:bf:d9:f9:9b:eb:b8:ff:b4:5f:f9:68:af:
64:37:3b:2d:f0:18:0f:bb:04:e5:e1:3d:91:bf:64:
4a:45:2f:b4:4b:5f:8a:5f:14:87:9e:e9:2c:f0:39:
fc:71:ee:a8:0c:6a:59:fd:b0:24:2d:41:8c:ba:17:
ad:5c:03:20:53:11:58:d2:3d:27:db:61:13:49:91:
06:f4:01:68:fc:4b:51:f5:7a:68:29:4f:c5:a6:ee:
3d:88:a8:a8:c5:cf:55:6d:43:29:d2:c4:65:da:e3:
37:47:24:02:45:e4:ed:65:b0:b9:c9:1c:ec:33:66:
56:e8:31:03:7d:d3:52:9a:a0:12:2c:eb:c4:65:1c:
9c:6f:37:58:74:82:bd:36:05:fd:4a:32:5c:74:bd:
5b:ff:b0:f4:9d:3e:2b:e8:94:57:21:92:2b:7f:f2:
50:79:fb:a5:e2:14:dd:3e:43:59:2d:2b:a9:7f:3b:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:36:CF:4B:C1:4B:8E:B2:2F:A2:BB:90:4A:57:2E:2E:E3:70:78:2E
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/uTbPS8FLjrIvoruQSlcuLuNweC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2140::/29
Signature Algorithm: sha256WithRSAEncryption
8b:5d:4f:c3:2e:03:37:65:d6:e5:14:f5:d7:da:2c:af:52:36:
07:15:ed:cf:2c:14:d6:18:5c:f9:75:c0:9b:ab:56:c4:e6:10:
bd:b1:c2:38:11:fb:e5:48:26:3b:82:97:34:08:b3:8b:b4:d4:
42:23:4d:6d:6e:c3:d4:c4:fc:a5:50:f4:5a:fe:46:ec:2a:04:
86:74:1f:f3:13:46:eb:65:23:66:e6:d3:bc:c5:b7:65:8c:ec:
93:81:68:6c:1a:0c:66:07:74:44:25:66:38:25:44:62:a3:11:
17:b7:a8:c5:a4:e6:c6:c3:a4:38:54:7d:e7:d0:b3:f8:d7:a6:
57:10:02:cb:b0:0b:4c:80:99:fb:9b:34:0e:fe:be:22:88:13:
08:1e:17:f5:7c:08:f1:11:54:5d:95:af:a6:38:05:2b:74:3e:
de:48:96:f8:0f:2b:83:71:19:bf:85:f7:63:4b:f6:8b:b4:36:
97:80:06:1b:ff:c6:82:ce:0e:47:92:5f:a2:e6:56:a8:26:66:
d5:8c:d8:1e:89:c8:ed:46:58:32:a1:fd:e4:24:39:6d:84:a9:
91:3f:d8:7d:dc:fe:f9:80:36:c4:3b:83:83:be:72:1c:de:12:
15:ae:ee:04:96:97:4a:65:4c:ef:0c:0f:0c:23:44:e3:f6:5b:
80:3c:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:28 2024 by rpki-client on console-fra.rpki-client.org