Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/1-0Cc4qSK5xh2rCSOvK__uAuK8xY.roa
File: 1-0Cc4qSK5xh2rCSOvK__uAuK8xY.roa (raw, json)
Hash identifier: mm/nvsLJo4K9DjYr5Q+nFw5PTZkgjfPtDy4011iJk9s=
Subject key identifier: FB:40:9C:E2:A4:8A:E7:18:76:AC:24:8E:BC:AF:FF:B8:0B:8A:F3:16
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018557E23A6313088F9B6259957A48FAC2FD
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/1-0Cc4qSK5xh2rCSOvK__uAuK8xY.roa
Signing time: Wed 28 Dec 2022 08:38:41 +0000
ROA not before: Wed 28 Dec 2022 08:38:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150698
IP address blocks: 2a0b:3c40:19::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:e2:3a:63:13:08:8f:9b:62:59:95:7a:48:fa:c2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 28 08:38:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb409ce2a48ae71876ac248ebcafffb80b8af316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:49:e3:5f:d2:67:4a:85:8f:38:7c:77:44:
48:8f:7c:1e:fa:13:48:23:b8:92:1b:1e:e8:df:98:
f2:18:5c:0a:15:57:40:52:49:20:b8:1d:1d:87:a0:
c3:13:9e:9b:82:fb:dd:ee:99:36:68:0e:3b:ef:7d:
62:e0:d3:7c:bc:3d:98:3b:b3:5c:ab:c9:8a:5c:ea:
c4:c7:04:61:ad:a9:4b:35:99:82:b9:1f:dc:4f:a5:
5d:5d:9b:a5:55:f4:12:f5:22:80:19:da:8b:39:35:
bf:06:4d:3f:ed:be:0a:82:85:5e:6a:a8:53:8a:40:
88:ff:ca:a5:f5:62:55:d7:55:f7:f4:b8:eb:41:23:
9e:ec:aa:bb:54:a7:16:22:9d:a2:3c:ea:46:c7:bb:
88:7f:fb:96:b3:f1:88:eb:7d:36:c6:0e:19:f3:38:
39:cc:72:9c:75:3e:35:32:ff:6e:71:5a:1f:a0:94:
74:fe:d9:1c:26:f3:8e:4d:ca:9a:56:76:9d:02:91:
b4:cb:79:62:1c:91:50:b3:b1:f8:22:03:8e:20:68:
89:d8:26:80:50:5d:46:9e:56:cf:1c:06:6f:53:c6:
5a:38:45:d1:0d:e7:9f:2b:a3:5a:ed:31:e6:a0:6b:
e2:c4:e1:96:e3:5e:2b:50:2d:77:03:7f:77:62:e4:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:40:9C:E2:A4:8A:E7:18:76:AC:24:8E:BC:AF:FF:B8:0B:8A:F3:16
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/1-0Cc4qSK5xh2rCSOvK__uAuK8xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3c40:19::/48
Signature Algorithm: sha256WithRSAEncryption
8e:d7:a8:8b:86:fd:3c:47:30:8d:5b:33:4d:9f:a7:9a:7c:0a:
0c:18:a1:de:e8:c9:2d:52:4d:0a:e6:11:3b:2f:32:47:25:f1:
36:b6:20:1b:a2:5b:33:62:9d:68:a8:cf:e6:3e:f2:07:7e:e1:
1f:15:09:b9:c2:b3:6e:d9:68:ba:6f:ba:67:eb:95:1c:95:1c:
fb:02:4d:e5:2e:ce:8b:c3:61:36:03:bb:99:01:91:b2:a2:db:
9e:0e:34:28:99:ab:e8:30:d7:e1:a0:05:ca:ed:16:fc:37:a0:
58:9c:11:f8:2a:11:1b:dc:12:68:4b:4f:4a:a2:c7:5f:06:03:
b9:16:56:e9:e8:01:44:70:7d:15:fe:ce:ff:9b:54:60:b5:63:
b8:43:58:2c:a5:58:7b:8c:8d:74:1f:85:a6:b1:ae:bc:6b:7e:
db:9f:00:de:ce:fc:97:28:ed:01:f2:c4:47:fb:20:c8:16:b7:
33:08:a3:32:d5:db:b3:9a:b6:9f:1f:8d:cf:6d:b5:fa:98:72:
f7:03:13:cc:61:b3:bd:da:87:1f:1e:43:de:1e:dd:25:26:0b:
3a:c5:83:51:92:02:94:a1:c4:42:86:86:f1:7d:0d:71:ad:31:
73:a4:4c:42:c2:11:95:dc:9f:90:59:f0:b8:50:e6:5f:42:c5:
5c:6e:c7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org