Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/TaDBYW3zRYxrgsJaU-aPdSfHhc0.roa
File: TaDBYW3zRYxrgsJaU-aPdSfHhc0.roa (raw, json)
Hash identifier: z99Q5yELtpc1suxpPJQ91jUoPar0e40Fha6OX5Pl3hU=
Subject key identifier: 4D:A0:C1:61:6D:F3:45:8C:6B:82:C2:5A:53:E6:8F:75:27:C7:85:CD
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 0255C5
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/TaDBYW3zRYxrgsJaU-aPdSfHhc0.roa
Signing time: Mon 17 Jan 2022 13:52:14 +0000
ROA not before: Mon 17 Jan 2022 13:52:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212149
IP address blocks: 2a12:5840:b00b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153029 (0x255c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jan 17 13:52:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4da0c1616df3458c6b82c25a53e68f7527c785cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:32:e7:82:dc:38:e5:f3:cf:c1:61:1b:22:
63:4d:80:8e:e6:05:0f:66:6b:7d:e6:1e:22:e1:d0:
de:2a:d0:84:d5:75:23:65:ce:dd:0f:7b:f5:72:20:
33:71:ae:ad:c4:54:ae:8e:54:7a:8a:b4:76:9d:8c:
89:9a:c4:2e:b5:fc:bc:34:cd:d4:cf:f1:a8:af:f2:
df:ab:12:69:6e:a3:ed:47:b4:62:d9:f5:a5:e4:08:
25:36:c6:26:fa:08:ae:09:92:76:39:ae:f1:84:88:
3e:8a:95:cd:41:1b:5e:c4:a8:d4:65:c4:ad:62:27:
e9:be:95:72:1b:16:bc:77:1a:a1:76:9e:b6:b6:a6:
88:f8:e3:23:ee:d3:44:d1:e0:91:eb:1a:63:a2:54:
53:34:d8:20:ec:52:54:0d:ef:bc:30:2d:e6:27:2a:
1a:1e:bd:b1:a8:5a:34:ca:fd:60:11:6f:eb:c8:68:
58:72:45:38:07:1b:28:f7:e6:85:a7:d1:2f:58:fb:
72:f1:9d:4f:63:d1:f8:51:1f:a4:61:9d:57:cc:c1:
99:d5:4d:88:63:16:2e:66:68:9d:e7:02:ed:03:7b:
72:c1:26:c7:6f:f3:b7:16:c7:3f:c9:b6:73:f4:42:
52:16:ad:37:ee:69:08:fb:1c:78:b9:e5:f1:da:d8:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A0:C1:61:6D:F3:45:8C:6B:82:C2:5A:53:E6:8F:75:27:C7:85:CD
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/TaDBYW3zRYxrgsJaU-aPdSfHhc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5840:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
1d:2f:35:e5:62:f4:dd:fe:1b:d7:cb:9b:8f:52:9e:ac:b4:34:
59:be:3a:10:b4:e7:08:66:08:a8:44:74:84:fc:71:31:47:aa:
fc:a0:0c:bd:b7:22:b5:4c:8f:ee:95:ac:1e:eb:35:d3:45:a1:
92:11:4b:ba:1a:ed:fd:4e:bd:11:e5:b3:e6:d8:20:a2:f3:f4:
61:6f:06:67:d2:05:75:6f:c4:d2:1e:cb:55:c0:70:52:9f:61:
ba:1b:19:8a:7a:72:8e:da:43:06:ce:6f:49:ca:57:1b:b5:00:
df:df:fb:69:c6:13:82:c0:31:a6:b0:30:49:a8:8d:bc:b2:d6:
c2:86:d9:e4:f5:0c:1d:ec:9e:d5:85:c7:ce:cf:83:11:bf:29:
ba:0e:3d:03:29:21:64:7f:40:53:dd:a8:c7:ca:82:79:4d:c1:
e4:19:59:52:ae:6e:20:29:e9:4a:6b:35:0f:e8:be:80:34:26:
8d:ca:1c:49:3e:ba:d1:f3:6c:12:55:3f:aa:c2:1b:f2:44:db:
50:54:1a:d8:56:56:e7:dc:0a:bd:40:98:c7:f1:a8:66:ae:a0:
76:05:b7:96:2e:b5:96:57:e4:36:f3:7a:56:a8:2d:9e:19:58:
93:47:3d:3d:e4:53:73:03:53:38:18:43:27:13:29:3f:a0:57:
00:1e:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:36 2024 by rpki-client on console-ams.rpki-client.org