Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/hfa8WmzZL4lids9EorjUleZyYnM.roa
File: hfa8WmzZL4lids9EorjUleZyYnM.roa (raw, json)
Hash identifier: 5wrI0rWgVLDSC3ffulJNOYCe6NA3Wls12Wg6IiEU69A=
Subject key identifier: 85:F6:BC:5A:6C:D9:2F:89:62:76:CF:44:A2:B8:D4:95:E6:72:62:73
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01828937EF96934EC51D47E98869CCDFBB28
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/hfa8WmzZL4lids9EorjUleZyYnM.roa
Signing time: Wed 10 Aug 2022 19:25:20 +0000
ROA not before: Wed 10 Aug 2022 19:25:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208078
IP address blocks: 2a05:b0c6:5500::/40 maxlen: 40
2a05:b0c6:5530::/48 maxlen: 48
2a05:b0c6:5520::/48 maxlen: 48
2a05:b0c6:5510::/48 maxlen: 48
2a05:b0c6:5500::/48 maxlen: 48
2a05:b0c6:5503::/48 maxlen: 48
2a05:b0c6:5502::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:89:37:ef:96:93:4e:c5:1d:47:e9:88:69:cc:df:bb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Aug 10 19:25:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85f6bc5a6cd92f896276cf44a2b8d495e6726273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:55:9b:35:54:8e:bd:06:e8:35:f5:5d:8c:
8b:f8:75:dc:38:ca:48:21:ac:bd:2b:18:0d:89:53:
af:9e:92:8e:ed:f0:12:e7:c3:80:4c:54:de:ba:4b:
b7:3d:2a:9e:4c:cd:e8:57:e1:0c:32:a8:08:23:36:
b7:f0:0b:1e:44:1a:6f:c9:ba:5d:e5:2c:82:f9:53:
63:27:c5:fb:75:98:c3:25:fa:2a:fc:32:87:d5:e5:
fe:cc:04:9b:9d:c0:74:c8:88:fa:a0:e0:bc:10:ad:
a9:f1:98:7a:7a:76:64:96:1e:ec:9a:eb:d9:8b:f7:
23:97:52:69:41:16:a5:c0:17:5f:f1:5f:e8:f3:7c:
1d:bf:c2:21:b5:fa:13:db:7f:3d:73:5f:02:5f:a2:
6c:20:8a:1f:9c:0a:1e:8d:4d:2b:26:3a:1c:a9:33:
e3:c9:23:6a:a9:f0:c2:d3:8b:59:ee:a1:f9:a6:ca:
03:21:98:ca:7e:03:c2:52:d3:32:06:92:40:ea:1a:
d5:92:fa:e6:cf:16:e2:ad:ac:c2:0e:46:e1:fc:14:
09:e0:33:c3:0b:75:2a:57:5f:31:2d:40:f9:5b:95:
ba:f7:81:d1:11:dc:4a:fa:04:bf:16:39:7b:92:9e:
41:4c:e0:a2:99:7d:62:60:77:1a:a1:ee:4f:2d:6d:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F6:BC:5A:6C:D9:2F:89:62:76:CF:44:A2:B8:D4:95:E6:72:62:73
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/hfa8WmzZL4lids9EorjUleZyYnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:5500::/40
Signature Algorithm: sha256WithRSAEncryption
1a:22:02:99:a5:16:c6:c9:f1:dc:88:2b:94:6a:ab:4c:aa:26:
63:3b:7d:e4:05:29:c1:9d:61:df:b2:dd:e0:3f:1d:05:2f:cf:
4e:cf:43:33:ad:f2:6a:09:98:97:72:e2:50:0f:e1:fd:a4:67:
ae:f0:24:50:ec:a5:43:0b:a6:41:88:8f:77:f7:36:9a:4f:7c:
a7:91:50:ef:8a:dc:36:7c:c7:0b:20:7a:15:a4:e9:bb:18:43:
88:f4:b5:96:6f:0c:69:02:95:db:da:69:1f:eb:29:29:11:d3:
e3:51:75:76:e5:26:1b:f2:8e:4e:c5:a2:b9:f2:86:e0:4b:78:
04:21:02:fc:9f:3b:2d:69:20:91:37:fb:77:5d:e1:bb:87:1b:
a2:2e:43:76:20:75:68:c6:39:dc:3b:62:bf:79:79:9d:df:21:
bb:b1:4f:8d:2b:f5:9a:8a:6c:6e:29:30:78:b6:0b:16:2f:57:
07:c8:79:0f:03:f8:ac:8b:63:14:79:a7:a7:43:0b:79:c1:3c:
27:9a:ff:1f:d5:12:2f:6d:78:03:3b:59:b9:33:86:e0:33:01:
e4:44:ec:b3:59:c9:d2:d1:bf:86:92:9b:2c:60:fb:7b:ea:a6:
8b:a4:df:80:80:fe:30:8d:90:5e:38:31:4d:fc:f2:fc:cf:6d:
e6:11:92:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:21 2024 by rpki-client on console-fra.rpki-client.org