Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/9UlX8GyMmPBA1jwyz6_vU9FDqf0.roa
File: 9UlX8GyMmPBA1jwyz6_vU9FDqf0.roa (raw, json)
Hash identifier: xqW7YgqRSHN8Sjes8bg/t2R0AxVi9Juy7qTNAYAfUYY=
Subject key identifier: F5:49:57:F0:6C:8C:98:F0:40:D6:3C:32:CF:AF:EF:53:D1:43:A9:FD
Certificate issuer: /CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Certificate serial: 0183214303C9B8EFE1E74747C6717F853185
Authority key identifier: B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/9UlX8GyMmPBA1jwyz6_vU9FDqf0.roa
Signing time: Fri 09 Sep 2022 07:59:43 +0000
ROA not before: Fri 09 Sep 2022 07:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207502
IP address blocks: 2a12:9e40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:43:03:c9:b8:ef:e1:e7:47:47:c6:71:7f:85:31:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5d2b43acc0d9f07aa00aa90f025c96d5cec25
Validity
Not Before: Sep 9 07:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f54957f06c8c98f040d63c32cfafef53d143a9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bb:3c:dc:f2:a3:d3:88:99:be:79:53:43:9e:
72:b3:f8:4b:24:64:e7:76:9b:11:1d:09:54:3c:85:
3a:42:68:a3:ac:0b:8c:f5:d5:20:0c:a5:a1:81:5d:
4b:8e:ac:3d:ce:58:0e:dc:82:a9:fc:ea:b6:6b:80:
5f:50:b6:e7:5d:42:9a:4b:54:47:d1:83:6e:1a:4a:
8a:1e:da:db:16:ce:2a:8c:f2:51:25:0f:9c:f5:be:
14:38:1d:7a:05:83:79:68:a4:c3:20:9a:99:64:04:
ad:f9:0b:7a:42:5a:33:06:af:4e:fc:5a:c3:f6:e6:
bc:d1:43:95:f5:0b:b3:c5:4d:a3:01:a4:56:9e:c9:
7e:40:33:dd:92:c0:6c:f1:62:1e:fb:05:b6:41:a7:
1a:f9:91:90:d0:dd:e2:b2:6b:20:4c:e8:e7:32:15:
bc:44:96:c6:4d:7a:e8:b6:40:7d:04:64:b2:8b:23:
eb:ee:23:aa:1b:a5:c7:de:26:cd:5a:f9:3c:85:5b:
16:12:6a:3d:39:e5:36:0d:5a:ab:84:ed:d8:ac:ca:
57:83:bd:8c:c6:db:cd:fa:ec:37:9a:c8:1f:6a:73:
c5:1a:7a:73:c0:41:67:57:52:47:4e:6e:3a:28:d2:
cd:61:6a:13:15:35:6d:b1:bd:f3:ab:9e:e3:9b:b4:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:49:57:F0:6C:8C:98:F0:40:D6:3C:32:CF:AF:EF:53:D1:43:A9:FD
X509v3 Authority Key Identifier:
keyid:B3:B5:D2:B4:3A:CC:0D:9F:07:AA:00:AA:90:F0:25:C9:6D:5C:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XStDrMDZ8HqgCqkPAlyW1c7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/9UlX8GyMmPBA1jwyz6_vU9FDqf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a92df-c509-4e92-8e2b-24b8c02fa82a/1/s7XStDrMDZ8HqgCqkPAlyW1c7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9e40::/29
Signature Algorithm: sha256WithRSAEncryption
ca:7b:dd:6a:31:7b:92:ae:77:6b:5c:d6:61:31:54:c9:5a:a4:
40:58:65:52:ac:40:4c:b3:64:ae:52:7b:49:b8:00:93:b4:a4:
13:e3:5b:03:bf:34:ae:ec:e6:f4:d7:d0:37:45:34:4a:4e:b5:
a4:b5:80:c1:3e:b8:69:6f:1c:a1:20:94:e0:b9:bc:50:55:30:
07:75:1e:23:e8:b6:d3:c1:b2:8d:84:2c:01:db:30:7c:ac:c7:
c7:75:04:74:99:81:37:6f:39:0a:ff:48:04:e2:85:48:22:8b:
3c:0b:9e:c8:04:56:18:56:79:1a:bb:20:7b:c1:8b:eb:d0:82:
b5:28:37:35:b1:b7:9f:41:e5:70:8d:57:a3:d9:b1:e2:d1:9e:
c8:ed:8b:4c:da:06:35:a8:c2:77:8a:2a:92:8d:cf:7d:90:82:
12:2a:43:af:5d:75:cf:79:b4:bc:ab:4b:52:83:67:0e:12:07:
f0:72:2a:e7:9b:9c:7d:63:d8:03:68:60:4c:3e:d4:bd:36:bc:
60:74:64:1f:56:52:42:ea:46:77:5d:e2:a0:19:0e:20:cb:78:
85:e8:ec:43:64:db:6e:73:a7:8f:67:e3:08:0f:61:b0:cb:08:
3d:15:46:34:49:3c:87:76:3a:50:ef:16:6f:6d:09:4a:dd:83:
45:98:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:03 2024 by rpki-client on console-ams.rpki-client.org