Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/L8yVbzvD4QH5l0N1eERO7LPLm6Q.roa
File: L8yVbzvD4QH5l0N1eERO7LPLm6Q.roa (raw, json)
Hash identifier: 6D4cFi/QtlcDNA9+5QUYnB8ntLAOBREuqdad5WcJkBg=
Subject key identifier: 2F:CC:95:6F:3B:C3:E1:01:F9:97:43:75:78:44:4E:EC:B3:CB:9B:A4
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 038AF3A4
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/L8yVbzvD4QH5l0N1eERO7LPLm6Q.roa
Signing time: Fri 06 May 2022 14:12:54 +0000
ROA not before: Fri 06 May 2022 14:12:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212271
IP address blocks: 2a05:4140:4::/48 maxlen: 48
2a05:4143::/32 maxlen: 48
2a05:4144::/32 maxlen: 32
2a05:4140:100::/40 maxlen: 48
2a05:4140:400::/40 maxlen: 48
2a05:4140:600::/40 maxlen: 40
2a05:4140:300::/40 maxlen: 40
2a05:4140:3::/48 maxlen: 48
2a05:4140:16::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59437988 (0x38af3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: May 6 14:12:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fcc956f3bc3e101f997437578444eecb3cb9ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:03:6f:7c:be:ff:90:bc:06:a6:aa:af:33:
34:d1:fd:a7:b9:19:c5:50:8e:1d:6a:86:b9:1d:f0:
d8:ab:67:f9:74:9f:c6:12:5a:87:a0:8e:23:31:eb:
3d:3a:97:cd:98:1e:53:aa:cc:3a:2b:77:61:b8:f8:
dc:48:6b:a5:a1:4d:55:e1:1d:51:de:1e:ce:58:86:
fd:de:d0:14:a5:fd:ea:9a:c0:e9:d7:5b:10:87:19:
17:07:90:f3:d4:e0:43:ac:79:a8:75:52:8b:16:f6:
d3:92:80:b8:2f:fb:16:dd:e4:db:eb:13:bf:5e:f7:
c5:95:34:1a:02:ad:3e:09:28:7d:de:10:c5:6a:86:
d3:11:53:bf:34:7e:29:19:a7:24:15:1e:25:2b:b7:
9e:0f:04:95:50:cc:da:74:5f:90:b0:83:93:52:c9:
37:8d:05:b3:25:02:33:75:b1:ca:01:88:eb:59:71:
d5:e5:90:48:30:2d:0e:22:5f:34:07:ec:33:10:fb:
27:f9:4d:e8:3b:e2:79:b1:bc:65:37:10:00:e6:7b:
c0:36:44:2f:6b:32:05:5c:63:2c:36:55:22:f3:e2:
b7:1d:8b:4d:57:4d:f2:ae:1b:56:a2:ed:fc:86:33:
96:d3:f9:ee:82:c6:12:2a:4f:a3:8f:df:72:44:0c:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CC:95:6F:3B:C3:E1:01:F9:97:43:75:78:44:4E:EC:B3:CB:9B:A4
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/L8yVbzvD4QH5l0N1eERO7LPLm6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:3::-2a05:4140:4:ffff:ffff:ffff:ffff:ffff
2a05:4140:16::/48
2a05:4140:100::/40
2a05:4140:300::-2a05:4140:4ff:ffff:ffff:ffff:ffff:ffff
2a05:4140:600::/40
2a05:4143::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
76:21:fe:59:2b:18:fc:7a:11:61:93:45:7d:aa:4b:84:c3:af:
9a:44:a3:17:9e:45:54:01:ec:7b:6b:86:b6:0d:e5:74:8b:7f:
ec:62:48:ef:b4:d5:17:4f:5e:f5:7f:b7:c6:97:9e:9b:ee:cf:
6a:6f:a3:ee:59:7a:cc:5f:ae:ee:8b:5a:fe:f3:2f:99:9d:a0:
d8:8b:f6:71:5c:90:bc:79:76:37:02:23:d6:87:7a:88:8e:c0:
f4:d1:bb:58:d7:27:63:4c:30:77:aa:a4:a8:c3:87:2e:ad:ad:
ec:4b:f9:b4:59:1d:38:b7:7b:07:1e:3f:3e:1f:93:b3:4a:eb:
71:46:26:4d:ea:8e:5b:7e:ab:9b:3f:e3:fd:6d:6e:70:af:39:
28:f1:2e:09:3e:26:eb:28:35:6e:7b:74:80:28:dc:ee:d8:7a:
01:79:ec:30:79:44:a7:12:90:72:9d:da:33:b2:cd:ae:f1:0b:
d2:91:76:14:3d:4d:80:ea:fc:06:f2:ad:a4:ff:a0:86:dc:68:
28:98:0c:62:66:64:bf:2c:cb:09:11:4c:97:f7:33:75:bb:5a:
e5:b5:51:53:5e:c9:f9:6f:2b:e9:e6:57:22:24:00:49:51:7b:
fd:36:f6:7d:02:78:8f:64:8e:5d:cb:d5:7c:56:94:a6:ad:a3:
c1:e1:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:30 2024 by rpki-client on console-ams.rpki-client.org