Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/U1FY3hpJ4wMDJ6cbpcK7tatMS_4.roa
File: U1FY3hpJ4wMDJ6cbpcK7tatMS_4.roa (raw, json)
Hash identifier: 6Mm4d/EyrNJl+CV7E9mERJJGifrqdplsOh3O00w2p/U=
Subject key identifier: 53:51:58:DE:1A:49:E3:03:03:27:A7:1B:A5:C2:BB:B5:AB:4C:4B:FE
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 01855D3F142AB3859E2FF0FDEF8E2C2C9553
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/U1FY3hpJ4wMDJ6cbpcK7tatMS_4.roa
Signing time: Thu 29 Dec 2022 09:38:13 +0000
ROA not before: Thu 29 Dec 2022 09:38:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211617
IP address blocks: 2a10:4646:40::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:3f:14:2a:b3:85:9e:2f:f0:fd:ef:8e:2c:2c:95:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Dec 29 09:38:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=535158de1a49e3030327a71ba5c2bbb5ab4c4bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:f4:cf:69:5c:48:c0:3f:f0:d8:d0:bc:0c:
30:72:f5:c3:d8:ac:4a:6e:8f:b5:65:f3:51:57:15:
d6:09:51:a5:5c:6a:36:b1:91:e8:de:70:70:64:a2:
d5:eb:cf:76:68:e6:b5:8a:9d:09:bd:07:a4:6d:e3:
7b:8c:10:c9:ef:c2:80:f6:c8:9a:d7:dc:cb:08:45:
85:9d:9b:7f:ec:fc:98:49:38:7e:69:01:6e:1b:f5:
06:0c:12:5b:fc:57:ef:9b:48:91:4c:96:85:77:e7:
f3:f4:dc:75:74:fd:54:04:e9:5f:8b:9c:4e:fe:3d:
ac:b6:0e:d2:a0:2e:aa:c9:cd:9f:87:1e:6f:9c:ab:
b4:f4:02:40:82:5c:aa:bf:f5:a1:03:65:0c:55:c9:
e5:05:99:e1:20:cc:93:c6:b9:22:e2:02:2f:a7:77:
e0:f3:a1:c2:62:54:b5:dd:66:1b:29:46:b3:50:44:
67:fe:1e:83:0a:e9:9e:6a:61:a7:06:85:c8:e5:b0:
4e:a7:e8:97:bc:f4:42:45:fb:ba:7b:c5:99:b0:81:
f3:66:c2:3b:ab:b3:47:02:1b:39:ae:8f:78:8a:c9:
41:6e:9c:63:84:db:04:37:8a:08:a3:a3:af:c4:44:
85:3e:95:17:00:80:ff:c4:dd:20:08:ad:7f:c0:61:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:51:58:DE:1A:49:E3:03:03:27:A7:1B:A5:C2:BB:B5:AB:4C:4B:FE
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/U1FY3hpJ4wMDJ6cbpcK7tatMS_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:40::/44
Signature Algorithm: sha256WithRSAEncryption
1b:2e:9c:16:e6:73:23:dd:ee:45:a4:93:db:e6:c6:d1:9b:8b:
f4:1d:1e:e3:c1:b1:e5:ff:36:ad:18:13:e5:71:e8:f1:c5:03:
95:ab:27:87:1d:4d:f6:a3:09:47:79:57:18:5c:0c:db:0c:8c:
1d:e1:c8:68:f4:11:b6:af:d4:fc:64:9c:2a:74:ba:dd:74:ed:
91:75:cd:96:4f:aa:29:5e:21:1d:84:a2:84:6c:f9:c9:1e:72:
38:38:3b:77:3b:54:60:33:98:a4:40:76:26:9e:84:0b:a9:d9:
2e:7e:3a:5f:1b:86:81:26:0e:fa:1d:10:d5:e7:51:3e:3e:e1:
19:0d:7f:63:9c:ce:79:e5:d9:8a:a4:19:1f:25:c1:10:05:a4:
79:17:b0:56:e5:d6:d6:f3:8f:15:b2:c5:2f:fc:aa:ea:dd:4f:
2d:3a:a0:19:04:7c:38:24:26:e7:14:52:d9:ad:71:a9:63:c7:
a5:09:70:d1:54:28:b5:5a:c1:fc:06:74:52:24:09:ab:05:2c:
df:10:4f:4e:fe:dd:fb:89:98:26:59:32:62:65:c3:2d:85:ff:
d1:41:27:a9:f4:f7:3a:27:f5:f4:3f:1a:f3:d5:c1:76:8c:14:
ea:c3:5f:0f:db:2c:78:0a:fe:5f:f5:57:56:bd:bf:96:bf:8b:
bf:9e:69:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:43 2024 by rpki-client on console-ams.rpki-client.org