Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/Ue_3lnzlrgq9B9Gl0AEJbKJAMFM.roa
File: Ue_3lnzlrgq9B9Gl0AEJbKJAMFM.roa (raw, json)
Hash identifier: t847dgmXYjU7mv01UB5E0XCnXzL+jCpnT7WnUF/HNVo=
Subject key identifier: 51:EF:F7:96:7C:E5:AE:0A:BD:07:D1:A5:D0:01:09:6C:A2:40:30:53
Certificate issuer: /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial: 01843975C43DB5071BA5F10ADCA316EE80A2
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/Ue_3lnzlrgq9B9Gl0AEJbKJAMFM.roa
Signing time: Wed 02 Nov 2022 17:48:49 +0000
ROA not before: Wed 02 Nov 2022 17:48:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211992
IP address blocks: 2001:67c:aec::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:75:c4:3d:b5:07:1b:a5:f1:0a:dc:a3:16:ee:80:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Validity
Not Before: Nov 2 17:48:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51eff7967ce5ae0abd07d1a5d001096ca2403053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:b1:23:a5:c5:24:24:4d:ab:d4:a6:7b:cc:
0f:8a:4e:8b:18:7d:8d:9c:96:ce:dd:fa:69:59:33:
eb:25:ff:5a:b6:eb:a1:65:a5:6a:c2:28:75:8b:21:
e3:07:19:8b:7e:d3:6f:55:f3:47:a9:4e:87:7f:46:
ec:a5:67:d3:30:cd:ea:59:f2:08:cd:f2:d3:40:31:
9a:14:30:ea:85:68:4f:41:f2:63:13:dd:7e:db:39:
34:c7:06:e2:1e:5f:1c:af:9f:17:9b:50:19:4d:fd:
4d:5b:91:1f:9b:74:37:0d:a1:43:d7:2e:80:9f:ca:
a0:ea:09:dc:aa:3d:7f:ba:ac:51:02:bd:b2:fd:30:
aa:16:8c:66:a2:24:59:53:da:e6:8c:e1:10:7d:91:
6f:4f:aa:24:73:7e:73:54:4f:7c:c4:3f:0a:de:71:
06:8d:3b:67:a4:07:8a:df:1d:df:dc:67:1d:be:75:
23:42:6e:19:8f:0e:d0:a4:81:34:d6:57:f2:4f:ba:
86:71:11:29:0b:52:e7:1c:78:e3:6c:0a:37:62:d9:
34:cb:78:11:18:ea:ee:70:70:e8:d4:aa:0c:3a:3d:
6e:5d:09:8c:9e:91:7b:71:c1:1f:10:f0:85:d9:f5:
9f:55:e2:a5:04:21:3d:21:c0:5d:a4:91:42:a9:bc:
e6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EF:F7:96:7C:E5:AE:0A:BD:07:D1:A5:D0:01:09:6C:A2:40:30:53
X509v3 Authority Key Identifier:
keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/Ue_3lnzlrgq9B9Gl0AEJbKJAMFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:aec::/48
Signature Algorithm: sha256WithRSAEncryption
5a:38:c2:35:ea:71:3b:21:fe:b1:82:06:9d:92:ec:1c:7f:a1:
f3:5f:90:03:5c:d1:16:cc:92:a5:55:6d:d0:73:de:f6:6e:f9:
a5:31:a6:27:fb:29:ed:44:6e:eb:43:c1:ce:b5:37:93:d6:b2:
23:a2:cb:64:31:20:1f:be:98:47:4d:8f:89:5d:3f:0e:7e:18:
87:31:9c:9c:9c:92:2a:6c:9b:ea:be:7f:d0:7a:fd:4b:dd:6b:
df:ec:bb:d4:9a:84:c2:e2:8b:67:98:53:e2:3e:75:63:15:cf:
a5:11:15:ed:e6:10:5d:46:21:ab:44:fc:0c:eb:98:58:07:95:
e7:3d:c9:b8:43:3e:e8:0c:29:dd:dd:7d:f9:06:15:ea:f6:e1:
ba:1d:ed:6b:fb:40:b3:3e:a7:9a:20:23:3c:41:8a:e9:36:1e:
e6:23:ab:27:53:42:c7:ba:2a:3f:76:bf:a8:93:fd:23:44:83:
60:6f:a9:0b:44:80:95:38:70:8d:d3:5a:ab:79:bb:dc:ac:21:
7f:e5:b3:37:b8:f5:9c:b2:d1:87:4a:c9:58:c6:da:11:e1:52:
aa:dd:37:a9:6d:5c:96:f1:a4:9d:3d:e0:2e:1e:4a:29:ba:83:
00:c1:4a:23:d2:fb:45:a2:db:68:21:39:b9:2f:7c:83:3b:bd:
1f:34:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:53 2024 by rpki-client on console-ams.rpki-client.org