Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/yUmI2orc2nV8d63BU-fZDTevGAQ.roa
File: yUmI2orc2nV8d63BU-fZDTevGAQ.roa (raw, json)
Hash identifier: 83NZRxdG/RZDp+f/csEaFJNDOjGpAbVGfAqTvh02Xz8=
Subject key identifier: C9:49:88:DA:8A:DC:DA:75:7C:77:AD:C1:53:E7:D9:0D:37:AF:18:04
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 01855D3F11819C260F8E6BE54DC443697402
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/yUmI2orc2nV8d63BU-fZDTevGAQ.roa
Signing time: Thu 29 Dec 2022 09:38:12 +0000
ROA not before: Thu 29 Dec 2022 09:38:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206569
IP address blocks: 2a10:4646:1a0::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:3f:11:81:9c:26:0f:8e:6b:e5:4d:c4:43:69:74:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Dec 29 09:38:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c94988da8adcda757c77adc153e7d90d37af1804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:77:be:a7:e2:c6:a1:eb:bd:06:ae:91:46:
3b:2a:2a:3b:25:fa:32:bf:c9:8d:42:a9:f7:bc:42:
e0:fd:40:9a:74:53:0a:79:55:26:fa:f9:33:18:98:
61:50:e9:5c:6f:06:4c:0c:7b:84:4b:2b:1d:b9:a4:
64:a6:32:07:9e:e7:d0:95:4b:56:d1:3d:3d:b2:86:
bd:a1:cd:35:ef:6a:3b:a6:97:c6:6d:3d:20:5d:ac:
af:25:e7:9e:cd:03:6f:f8:98:42:94:bd:92:6b:0e:
11:f5:c1:fa:68:2b:51:8a:22:f8:db:4b:db:a2:d9:
10:3d:bf:63:c3:58:ab:dc:dc:61:bb:08:b2:fa:1d:
31:70:c6:e6:41:ab:99:31:fe:19:05:7f:21:3c:be:
53:c8:aa:de:9a:d7:17:2b:5c:af:b4:80:c5:db:89:
38:fe:b0:eb:7d:ba:11:54:49:be:08:11:a0:1b:b9:
50:25:47:5c:e8:88:b4:a9:94:db:33:1f:3d:5f:2b:
61:74:e1:42:0a:ce:ec:79:7f:4b:08:47:7e:0e:82:
66:b8:ea:81:fd:82:e2:42:cc:0b:e7:18:9e:79:1e:
5f:6f:52:85:9a:d9:18:71:86:28:07:3b:56:92:bc:
a9:dc:cb:31:fe:2a:c6:46:ac:9f:82:7b:b2:bd:2b:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:49:88:DA:8A:DC:DA:75:7C:77:AD:C1:53:E7:D9:0D:37:AF:18:04
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/yUmI2orc2nV8d63BU-fZDTevGAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:1a0::/44
Signature Algorithm: sha256WithRSAEncryption
cf:27:3a:07:e2:77:1c:27:90:4a:5c:2f:28:18:b5:c1:82:81:
49:ec:a4:8e:6b:0f:d7:fe:85:19:e4:10:ef:1f:be:d0:80:26:
ce:84:28:4e:07:36:fa:f5:c0:0a:b2:8a:b6:dc:de:ea:b1:78:
2a:26:9d:2f:e9:62:7d:75:4b:32:a1:a7:bb:16:7f:f0:f4:2b:
cd:bb:5f:84:9d:2a:5c:e3:f3:85:aa:43:8d:e5:22:5a:ee:08:
8d:f0:64:ba:7c:ba:40:83:87:e8:86:91:8a:15:e6:1c:c6:9d:
c8:66:24:f6:5f:2f:d9:52:1e:c7:47:fd:21:4c:5a:10:cf:ef:
8d:40:9a:99:65:d6:91:d8:99:9a:34:07:6e:23:de:6a:7a:ef:
66:27:27:a4:fb:71:f1:1b:c2:b2:b8:43:3d:19:1b:58:d3:2e:
f0:bb:70:c9:e2:bf:77:9e:d7:85:b7:14:64:bf:a2:b1:f1:cd:
14:bd:86:ea:28:8b:64:09:5d:3a:b6:08:38:8f:7d:fd:c5:0c:
1b:eb:ca:3f:a2:ee:87:c5:87:53:2f:2a:a7:84:55:b4:26:02:
d8:1f:69:7f:5c:17:cc:92:38:51:ab:93:dd:5c:39:13:c7:e9:
e0:f1:da:6b:81:fb:7f:3c:6e:6a:f4:48:8d:70:b8:47:a3:70:
ea:5a:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:05 2024 by rpki-client on console-fra.rpki-client.org