Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/yUwuNUpCwBQJWdNCQofR33afyF4.roa
File: yUwuNUpCwBQJWdNCQofR33afyF4.roa (raw, json)
Hash identifier: z+sKwR8T4L4IHSLo5lONfiCXKh4CXW2nD4X9Wo5sNOA=
Subject key identifier: C9:4C:2E:35:4A:42:C0:14:09:59:D3:42:42:87:D1:DF:76:9F:C8:5E
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 094DBB91
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/yUwuNUpCwBQJWdNCQofR33afyF4.roa
Signing time: Sat 01 Jan 2022 13:56:32 +0000
ROA not before: Sat 01 Jan 2022 13:56:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209915
IP address blocks: 2a0b:1300:81dc::/48 maxlen: 48
2a0b:1306:1dc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156089233 (0x94dbb91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Jan 1 13:56:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c94c2e354a42c0140959d3424287d1df769fc85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:7d:c5:fc:65:95:2f:8d:96:fc:5e:32:b0:
6e:8c:47:bd:d6:ff:36:82:30:77:a0:83:ad:5a:3a:
fd:3d:34:0f:b0:77:3d:5d:c6:38:df:7c:6c:f6:52:
1b:4b:30:59:de:00:b8:83:ff:ad:e2:7c:9a:80:35:
7d:47:96:ec:fa:d9:cb:f2:57:6a:da:ad:23:ae:a0:
d0:1f:89:7f:4e:79:ac:a2:c0:5a:63:a6:07:f5:10:
9b:bb:38:84:bb:3d:6f:79:2c:61:3b:a5:0a:55:d7:
c5:8e:03:de:51:f8:30:08:c5:3d:88:f1:2b:4f:4c:
e7:7c:fa:77:5b:64:d0:04:06:e8:a1:8e:88:49:da:
56:01:f6:aa:d0:e5:95:2d:b3:64:3f:4b:ad:f3:54:
4a:5c:86:fc:e4:92:af:62:e3:07:86:64:30:43:43:
40:40:46:a1:ba:90:ce:6a:d8:f0:c6:63:fb:3f:13:
77:59:78:36:eb:d0:86:43:83:6f:4c:f5:78:00:58:
b5:45:59:8a:a8:12:c8:d4:a4:4a:cf:c4:88:b8:b5:
8e:96:c4:02:36:87:f9:95:74:50:81:02:f9:77:22:
91:f3:93:26:d9:ee:55:ba:2e:e0:7e:23:4b:59:9d:
d2:0c:90:df:61:b0:24:d3:ab:b2:07:12:cb:a1:98:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4C:2E:35:4A:42:C0:14:09:59:D3:42:42:87:D1:DF:76:9F:C8:5E
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/yUwuNUpCwBQJWdNCQofR33afyF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1300:81dc::/48
2a0b:1306:1dc::/48
Signature Algorithm: sha256WithRSAEncryption
86:d2:47:68:7b:66:ca:3c:5e:01:22:d3:1c:35:53:66:88:23:
28:80:70:c1:48:c1:7c:c0:18:b8:cc:90:f5:51:d4:2e:3c:02:
e1:73:8f:93:14:b9:7c:39:00:5c:b1:b2:e6:55:64:0a:60:01:
82:be:aa:d1:68:09:03:04:a9:b6:0a:a3:22:6b:9e:aa:19:24:
c3:a2:3c:60:cb:a2:84:4b:eb:d4:d1:da:a8:16:df:59:00:33:
8a:f8:76:b2:c9:ce:a8:b5:3a:31:ce:ed:2e:fe:94:18:3d:85:
fd:af:dd:15:6e:3f:8f:26:cf:9c:9a:c1:c2:29:09:94:f2:99:
da:e9:7a:8d:b1:17:09:7e:66:e2:d2:ce:fe:f6:ee:9b:39:b5:
e1:3d:14:7a:30:d9:fc:a6:4f:39:23:54:c5:d1:78:65:3b:56:
43:ca:9e:ac:07:f2:a7:f4:af:b0:bf:17:49:6f:41:cd:5c:db:
48:7f:e7:d8:7b:dc:af:26:8e:cf:b3:d4:0d:14:de:9e:0b:97:
03:a5:4c:39:20:94:a5:d8:06:dc:63:56:f9:4d:06:bd:f7:98:
2a:24:c2:3d:b0:56:77:0a:8b:c5:5c:0e:c0:39:b0:85:06:2d:
83:3a:79:de:f4:70:e4:6f:8e:78:d9:cd:a1:b1:b8:0f:34:34:
a4:11:bf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:00 2024 by rpki-client on console-ams.rpki-client.org