Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/WJ0UCMT_-pAclwu6OUGprhVkBvI.roa
File: WJ0UCMT_-pAclwu6OUGprhVkBvI.roa (raw, json)
Hash identifier: aIeXUazu6Igzgo3HeOoSKxz09jWvEgnHhcRADeH6Ft8=
Subject key identifier: 58:9D:14:08:C4:FF:FA:90:1C:97:0B:BA:39:41:A9:AE:15:64:06:F2
Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Certificate serial: 0183D10AE8F2CC8E540EAE2CA00F21D205D5
Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/WJ0UCMT_-pAclwu6OUGprhVkBvI.roa
Signing time: Thu 13 Oct 2022 11:11:36 +0000
ROA not before: Thu 13 Oct 2022 11:11:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6900
IP address blocks: 2a02:9f8:9000::/48 maxlen: 48
2a02:9f8:9000::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:0a:e8:f2:cc:8e:54:0e:ae:2c:a0:0f:21:d2:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847
Validity
Not Before: Oct 13 11:11:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=589d1408c4fffa901c970bba3941a9ae156406f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:a3:08:fd:9a:ed:8a:3b:6c:83:c8:15:69:
23:84:49:f1:d0:41:19:f9:99:d5:8c:4d:11:19:b7:
de:13:f9:a0:9b:71:a7:79:99:58:af:18:c9:82:73:
34:7b:5e:48:cf:5d:86:dc:6f:51:be:5c:7e:7a:da:
64:0e:0d:b8:27:6a:07:c4:d1:da:5e:28:c8:ed:20:
fa:13:e4:bc:2c:c1:3d:19:c4:be:40:90:5f:6f:31:
56:ff:ff:b0:bf:b6:c4:b6:e8:ec:29:08:da:68:b3:
05:e0:06:8b:9d:02:40:ad:ae:10:18:ab:89:bc:29:
39:24:22:3a:91:74:59:d0:30:14:34:35:ae:b9:56:
4e:b4:13:b4:05:53:cd:9d:fb:10:ad:94:94:1b:de:
de:50:a2:73:d8:c3:14:78:55:df:42:48:5a:fd:94:
e0:c6:19:a8:93:b7:83:c9:72:18:c4:16:de:d7:f7:
a5:4b:91:59:68:f1:02:a6:50:70:93:87:cd:6a:9a:
71:aa:46:37:3e:29:d4:6b:1d:92:fd:d6:61:af:f7:
a3:ed:22:27:10:dc:25:89:24:d7:1f:b0:8b:0b:67:
a3:3f:d4:61:3b:6c:fd:9a:38:ec:1b:3c:05:9b:ec:
07:f5:22:8a:c6:82:5f:5c:30:33:13:c1:46:3b:15:
f1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9D:14:08:C4:FF:FA:90:1C:97:0B:BA:39:41:A9:AE:15:64:06:F2
X509v3 Authority Key Identifier:
keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/WJ0UCMT_-pAclwu6OUGprhVkBvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:9f8:9000::/44
Signature Algorithm: sha256WithRSAEncryption
28:c0:5a:ef:38:ec:0b:cf:a7:77:e5:6e:a6:09:3c:92:b4:45:
d7:64:32:4a:08:04:45:43:40:cb:25:ad:a9:01:4e:60:5a:cf:
8f:db:ec:0c:83:2d:c8:53:02:8a:0f:66:a7:f9:17:94:d0:3e:
51:6f:b4:1b:2a:82:7b:5a:40:ef:ff:8a:78:f5:ee:95:48:df:
1b:ae:d5:e4:ef:fa:63:29:6b:81:1c:8b:81:50:03:57:49:f2:
47:92:f6:32:85:b4:76:cd:d2:95:87:4a:90:ea:ff:80:48:a0:
ca:af:f4:ba:3c:c8:76:95:c3:97:e9:89:37:d1:fc:ee:df:b1:
f9:4d:07:79:d6:c5:ef:33:7d:66:79:1c:d2:c3:0d:77:62:28:
3e:c9:46:a5:1a:55:e3:9b:40:f8:bf:34:a4:30:88:d3:66:cc:
a1:a5:c9:e7:e6:43:30:95:6d:9d:40:f6:97:8e:33:6a:ee:da:
83:48:4c:be:2d:39:4b:11:9b:1f:0a:ba:bf:fc:9e:ac:1a:4b:
e2:87:65:a3:73:9b:90:ee:c6:37:f7:11:26:d4:e2:43:3b:c8:
4d:11:58:25:d6:cf:44:d6:7d:c0:27:48:f0:5a:79:57:2c:2d:
60:ec:59:85:e3:2c:f0:b3:44:a6:2d:79:9a:c0:f6:1f:5c:a8:
9f:8f:b2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:04 2024 by rpki-client on console-ams.rpki-client.org