Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/U1QTk8bZYOsfLMCyJWfPKrdCDMA.roa
File: U1QTk8bZYOsfLMCyJWfPKrdCDMA.roa (raw, json)
Hash identifier: +aPmandB0R4AYpo4HVpNl79I15y5rEx8xzN+QmPXwZE=
Subject key identifier: 53:54:13:93:C6:D9:60:EB:1F:2C:C0:B2:25:67:CF:2A:B7:42:0C:C0
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 0184B5927C5062B60CF7D339E4D262D70183
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/U1QTk8bZYOsfLMCyJWfPKrdCDMA.roa
Signing time: Sat 26 Nov 2022 20:13:06 +0000
ROA not before: Sat 26 Nov 2022 20:13:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34465
IP address blocks: 2a12:8fc6:ace2::/48 maxlen: 48
2a12:8fc6:cd02::/48 maxlen: 48
2a12:8fc6:cd01::/48 maxlen: 48
2a12:8fc6:ace1::/48 maxlen: 48
2a12:8fc6::/32 maxlen: 32
2a12:8fc6:faa0::/48 maxlen: 48
2a12:8fc6:cd00::/48 maxlen: 48
2a12:8fc6:ce00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b5:92:7c:50:62:b6:0c:f7:d3:39:e4:d2:62:d7:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Nov 26 20:13:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53541393c6d960eb1f2cc0b22567cf2ab7420cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:ba:ea:28:e4:24:b8:15:21:58:07:38:2a:
f9:98:d3:bb:ea:45:73:5b:fc:9d:de:6d:3c:01:4c:
c4:8d:03:b6:bf:29:a9:26:71:49:f4:eb:27:40:77:
07:c3:95:bd:2e:14:ee:95:e8:32:5b:fb:29:a1:90:
bf:62:88:ed:f5:7b:26:53:6d:9e:de:45:f5:a1:b0:
44:2d:d4:c2:63:66:d8:ae:f9:71:ba:80:b2:85:3a:
da:07:ac:5d:8a:95:b5:9b:4e:61:c9:41:68:88:72:
10:30:5d:75:94:98:78:10:8b:27:89:2d:0d:3c:e5:
25:c0:74:85:dd:77:c4:c7:aa:a4:f9:2a:c7:9c:66:
ff:58:37:aa:94:d5:0c:b7:67:6f:2b:76:d0:04:25:
07:0b:a3:a6:68:b8:23:b3:9f:d5:df:6f:a8:91:c9:
f6:8b:94:2e:31:a1:b7:eb:52:31:91:8f:d7:88:1f:
1a:68:65:2b:69:7f:6f:7c:a6:3f:0e:f2:85:e2:9c:
fb:19:42:e7:f4:42:86:24:e4:72:6e:97:d1:7f:ea:
c5:37:8e:07:f0:2a:c8:fe:bf:97:62:af:03:41:a2:
a8:00:d1:6a:ce:28:17:0d:28:6f:8b:4d:bf:52:94:
0b:32:e0:2d:6c:d7:9b:9e:3f:76:97:7d:6c:c9:1c:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:54:13:93:C6:D9:60:EB:1F:2C:C0:B2:25:67:CF:2A:B7:42:0C:C0
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/U1QTk8bZYOsfLMCyJWfPKrdCDMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc6::/32
Signature Algorithm: sha256WithRSAEncryption
7a:08:e1:f8:02:16:a8:cb:16:f6:be:cf:d8:32:8d:38:41:8b:
0e:70:87:eb:51:db:d1:17:88:ab:ce:f4:b2:d9:c9:72:cc:2d:
3f:06:ed:0f:11:c7:49:d8:ad:3e:e7:3c:51:db:c7:59:e5:7d:
74:b8:86:fe:be:18:0f:87:38:81:a4:d8:27:ac:fe:67:ff:80:
0d:16:b5:26:5b:08:b4:05:83:57:ba:20:38:a6:46:65:2a:bd:
a9:5e:7d:0f:d5:60:a2:a0:8f:c9:72:7e:65:3c:41:de:91:59:
e9:9d:76:1e:57:be:05:be:de:87:1a:ca:6f:ae:9f:8d:44:9b:
cd:c1:57:57:df:0f:7b:d0:74:d1:38:72:6d:30:57:bb:04:91:
23:23:58:72:4b:90:ea:b7:0e:ee:7f:05:73:1b:73:5a:d2:ef:
92:ae:3a:45:be:2a:05:fd:76:94:81:ef:c2:1f:fb:17:a0:3e:
8e:ad:f6:f5:63:3e:1c:02:c6:a6:a3:b9:4c:db:24:2d:74:37:
6a:52:11:3c:df:f6:78:ae:5a:19:3c:cc:41:14:d3:12:98:20:
2c:ee:63:d0:a1:4a:ab:de:6d:05:4f:14:c4:f6:7d:ed:b9:d6:
1b:1b:62:4f:69:fa:e8:fa:e7:1b:51:65:6b:e5:57:e2:d5:70:
61:28:df:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org