Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/uO2SDYK4MT6BOwxTk35kJt0KK6g.roa
File: uO2SDYK4MT6BOwxTk35kJt0KK6g.roa (raw, json)
Hash identifier: Q1QZei+rTRRA62YKA92uIxZTqlkkXjtYe6IkwCDMxn8=
Subject key identifier: B8:ED:92:0D:82:B8:31:3E:81:3B:0C:53:93:7E:64:26:DD:0A:2B:A8
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 01854DFA35C95DA2ABE46EB19BECDF38CE9E
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/uO2SDYK4MT6BOwxTk35kJt0KK6g.roa
Signing time: Mon 26 Dec 2022 10:28:41 +0000
ROA not before: Mon 26 Dec 2022 10:28:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14315
IP address blocks: 2a05:4140:600::/40 maxlen: 48
2a05:4140:19::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4d:fa:35:c9:5d:a2:ab:e4:6e:b1:9b:ec:df:38:ce:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Dec 26 10:28:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8ed920d82b8313e813b0c53937e6426dd0a2ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:5b:7f:04:f9:68:40:42:e2:57:98:98:47:
0d:ef:38:39:f2:83:03:a9:2c:68:5c:77:c9:b4:7b:
a9:98:54:54:eb:8b:df:12:d7:79:1c:f3:48:d1:a5:
5e:3e:2c:d9:0f:ff:cb:a7:5c:83:58:45:84:48:e5:
c5:e8:e3:73:de:57:67:31:16:c1:bf:af:95:ee:17:
d0:c8:12:f9:b9:7f:16:5d:9e:c0:f9:d5:f6:68:09:
c0:bd:d0:90:77:ed:b3:a8:c4:66:01:4e:23:f0:59:
06:6e:24:3d:27:d1:cc:1a:96:4a:a4:c7:bb:40:8c:
68:72:c1:8d:5f:eb:d0:60:03:cf:66:68:55:cc:9e:
f2:60:a3:5a:a5:43:6b:2b:b1:52:53:25:5c:84:aa:
31:b5:f8:c0:1a:4d:97:6d:f0:78:61:5f:d1:94:99:
ec:15:76:00:32:2f:31:f1:43:25:24:69:aa:f1:79:
1f:60:72:2c:b7:fa:fe:15:78:bf:76:0b:bd:c2:4e:
ed:04:a6:7e:d3:88:8a:0b:64:b4:7f:ed:7f:f2:c2:
26:6e:51:d8:dc:5c:45:5b:d4:1d:2b:9e:17:8e:4b:
02:77:c2:6b:77:7b:96:cf:38:76:79:0f:76:58:8e:
2f:62:36:2a:6a:c7:f1:5c:fc:a3:57:0e:56:46:2a:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:ED:92:0D:82:B8:31:3E:81:3B:0C:53:93:7E:64:26:DD:0A:2B:A8
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/uO2SDYK4MT6BOwxTk35kJt0KK6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:19::/48
2a05:4140:600::/40
Signature Algorithm: sha256WithRSAEncryption
7e:e4:92:dc:94:0b:ae:1a:a4:64:99:ea:f6:9e:f5:96:04:91:
8b:59:05:6b:0c:36:7c:38:78:67:5b:f0:9c:a1:b5:1d:e1:4d:
4d:65:b5:a5:68:77:f3:19:58:ca:0b:53:c3:d9:b4:93:25:f8:
f9:d4:8a:51:57:3f:25:55:40:82:55:bd:39:e3:c1:34:9e:27:
9e:20:13:4d:80:71:28:93:c9:2d:aa:a9:3d:07:ec:83:05:09:
61:53:8e:54:51:95:9d:8e:ba:9d:97:90:d0:7b:3c:39:05:d9:
e0:d9:fc:b3:af:69:a1:81:a3:16:39:9b:e2:64:d2:c8:13:3b:
4a:55:ff:76:2f:cc:c7:9f:5c:ca:66:e3:0f:78:d4:70:e8:6f:
f6:c1:d8:fc:58:90:4a:76:5a:27:fb:bd:01:f9:2b:4f:55:c0:
bf:54:f4:30:0b:a2:ca:88:0e:24:e2:ef:62:0f:eb:db:99:c4:
ff:74:1e:f6:c5:1b:e9:2f:12:2c:85:56:27:f7:ab:9c:42:8a:
bc:cb:11:3f:8f:f4:eb:fe:5c:de:18:0e:ff:21:75:d9:64:44:
dc:4a:6d:7d:a1:54:80:11:06:78:bc:c8:e9:6c:39:7a:63:2c:
ef:be:31:18:95:ec:95:1f:90:22:d8:60:5d:0f:32:cc:77:41:
3a:f5:98:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org