Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/U5i9RrZ1VSr9nsP0PMTYZ7lJVVM.roa
File: U5i9RrZ1VSr9nsP0PMTYZ7lJVVM.roa (raw, json)
Hash identifier: Llgd5iaKpAYjA4bYUDTfPKYT0oF2KgTHXBZCo02kXNs=
Subject key identifier: 53:98:BD:46:B6:75:55:2A:FD:9E:C3:F4:3C:C4:D8:67:B9:49:55:53
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 1BCB0B74
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/U5i9RrZ1VSr9nsP0PMTYZ7lJVVM.roa
Signing time: Sat 01 Jan 2022 12:59:49 +0000
ROA not before: Sat 01 Jan 2022 12:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466291572 (0x1bcb0b74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jan 1 12:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5398bd46b675552afd9ec3f43cc4d867b9495553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:8d:d1:1b:57:35:ab:9d:de:bf:16:cf:b3:
ab:d7:bd:f5:13:69:dd:b7:d6:d1:dc:e9:b1:7e:cc:
7e:35:ac:3d:d4:c3:77:e3:25:5c:97:85:6c:14:41:
21:53:36:ef:fd:1b:0d:b1:af:33:a2:f1:e0:ba:65:
2a:19:ca:90:15:de:47:5f:d7:65:e7:b7:b6:61:be:
7d:2b:87:d9:8c:ca:ff:52:00:cb:77:82:f5:b4:b7:
66:60:54:60:f4:0b:02:0d:b4:fe:2d:1a:e1:58:00:
0d:d1:87:65:38:f2:2e:cf:32:2f:91:8c:94:31:c0:
d5:8d:83:be:db:76:e4:88:9d:90:da:ad:c8:15:6d:
fb:b6:6b:84:ca:b7:7c:45:b8:b3:28:57:3a:8c:1d:
ba:6f:24:c3:de:aa:58:63:09:cd:15:cd:69:4d:79:
e9:7c:95:78:3a:e3:7b:45:e7:a2:0d:c5:65:d9:c0:
86:28:ff:b6:3d:80:0e:cb:76:5e:c6:9f:7f:68:c7:
1e:2a:a9:c7:61:8f:22:3c:93:49:eb:76:f4:07:5e:
6e:99:f6:87:4a:fa:27:a4:10:e2:bb:c7:9a:cf:52:
df:24:fc:1f:96:ae:b1:41:bc:8e:71:c1:b0:ae:d6:
d8:f5:19:12:88:01:d3:1f:8d:ef:7b:95:88:61:e8:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:BD:46:B6:75:55:2A:FD:9E:C3:F4:3C:C4:D8:67:B9:49:55:53
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/U5i9RrZ1VSr9nsP0PMTYZ7lJVVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff21::/48
2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff29:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2b::/48
2a03:2887:ff2e::/47
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff37:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff39::/48
2a03:2887:ff3b::/48
2a03:2887:ff3f::/48
Signature Algorithm: sha256WithRSAEncryption
51:b3:dc:5e:18:36:4c:e4:35:5f:32:73:0d:92:26:58:4e:c5:
68:ce:a1:ac:29:64:99:95:d4:7f:4f:4b:a3:36:64:dc:01:4b:
68:b8:b3:a1:69:1f:64:4f:e3:89:0b:73:f3:0a:04:5d:82:89:
d8:07:70:67:69:03:11:72:22:ea:9a:15:9d:bb:de:54:eb:07:
50:54:c0:18:8d:a0:a4:f8:af:b6:a2:2a:75:03:95:13:58:fb:
0a:97:f4:22:06:21:95:49:82:5d:36:ac:60:15:02:7f:cb:c9:
dc:cf:c2:1b:bf:d4:be:23:90:0b:79:54:1b:5d:e7:5f:52:21:
e3:29:d7:55:17:2f:b3:ef:9e:89:80:15:ae:4b:3d:28:19:fb:
1e:1b:8d:4f:b8:bd:5c:e8:34:74:35:bb:fc:1e:96:6c:86:cb:
78:2c:5b:e4:68:3b:d4:7c:76:cd:51:20:92:b3:41:e5:c1:50:
3f:01:07:e5:eb:91:9f:82:a6:bf:86:98:0b:f9:86:c2:38:e1:
00:54:7a:03:ff:2c:23:9d:30:ab:6f:c8:74:95:2b:ae:e1:0c:
63:a1:de:38:4e:72:09:2a:28:b3:ed:5d:f8:98:27:c8:f2:9e:
cf:0f:7a:41:dc:76:89:e0:64:9c:cb:38:d6:1f:d8:be:0c:d6:
60:71:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:09 2024 by rpki-client on console-ams.rpki-client.org