Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/hUlsZwnB3Hnl8ESJv4hpiiBsiPQ.roa
File: hUlsZwnB3Hnl8ESJv4hpiiBsiPQ.roa (raw, json)
Hash identifier: DJdyOJ8IBqVJV1NXAX+a+Q5XRLubwfXFpbmdBa/ufjk=
Subject key identifier: 85:49:6C:67:09:C1:DC:79:E5:F0:44:89:BF:88:69:8A:20:6C:88:F4
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 01827C4C2D56AB108EE26763B1C53312C0BA
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/hUlsZwnB3Hnl8ESJv4hpiiBsiPQ.roa
Signing time: Mon 08 Aug 2022 07:12:23 +0000
ROA not before: Mon 08 Aug 2022 07:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34465
IP address blocks: 2a12:8fc6::/32 maxlen: 32
2a12:8fc6:ce00::/48 maxlen: 48
2a12:8fc6:cd00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:4c:2d:56:ab:10:8e:e2:67:63:b1:c5:33:12:c0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Aug 8 07:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85496c6709c1dc79e5f04489bf88698a206c88f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c4:fa:68:b5:e9:69:29:03:27:8e:d2:ae:d2:
70:f6:5d:88:b2:2a:23:d0:a7:8b:15:13:e3:f9:4d:
63:30:e8:52:96:4f:c2:a3:86:be:4a:d7:7d:76:b6:
c0:65:5e:67:11:99:18:8a:b1:dc:71:83:98:50:e1:
60:84:d5:9c:bb:ee:3d:37:e4:8b:3f:00:20:f6:df:
2f:a1:a1:0d:54:ff:1e:df:2c:79:07:41:48:12:85:
05:0a:ec:5c:b7:81:89:13:9c:43:c2:71:90:d5:e9:
98:c7:3e:2e:d0:60:2b:c5:4b:06:08:47:81:63:57:
06:56:49:81:fd:0e:de:29:70:f0:62:a1:42:8d:07:
4c:74:15:e7:3a:76:21:4d:30:b2:2a:9d:0d:14:d6:
c4:3a:c3:fa:c9:43:e8:0f:c6:b7:c3:8c:66:19:cc:
ef:25:2d:3f:3c:58:be:0a:8e:e9:67:b0:21:83:a0:
03:19:98:ca:42:6b:6f:fb:e3:0b:49:af:33:fd:67:
9d:bc:a7:7f:b4:b1:04:f5:89:f2:87:d4:09:fd:a2:
d3:e7:5c:3a:c1:32:6f:93:54:df:81:80:4d:d7:0b:
db:fc:e6:55:e9:ed:4c:d7:6b:a7:21:48:4f:93:cb:
52:24:9b:b5:c9:7d:f8:d8:f1:e7:29:cd:e2:e3:2d:
e5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:49:6C:67:09:C1:DC:79:E5:F0:44:89:BF:88:69:8A:20:6C:88:F4
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/hUlsZwnB3Hnl8ESJv4hpiiBsiPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc6::/32
Signature Algorithm: sha256WithRSAEncryption
0d:58:5d:17:61:55:3a:80:38:bd:2c:89:19:2d:f5:23:fc:75:
06:7c:50:e1:b8:aa:d9:19:6c:7e:2c:f8:a4:5c:93:70:73:09:
5a:3f:d4:29:ee:77:fe:58:17:f0:90:83:b4:8f:a7:56:58:cc:
22:cb:7d:20:92:d8:10:22:db:56:e5:7f:7d:0b:dd:63:62:8f:
12:37:13:53:ce:df:2d:07:8d:c8:a5:26:c0:0b:df:7d:61:34:
5a:97:34:1a:9f:e3:ef:a6:de:a1:f3:0a:68:65:e5:5d:6b:08:
95:f8:5a:f8:93:56:f7:4b:98:50:7c:bd:65:91:77:b4:9a:2c:
fb:4b:90:a2:cf:c8:9e:50:ce:ee:85:c9:36:e9:7e:7e:81:cb:
30:37:af:66:c2:40:5d:f0:d1:38:99:15:35:a8:70:3e:4c:46:
06:10:31:53:3e:bf:f4:7e:6f:bb:bd:97:54:cd:5a:58:ec:a6:
09:94:bf:b1:57:9a:bb:ef:d7:ea:a4:41:bb:dc:f5:b9:f4:ce:
06:a8:2c:1f:57:90:09:82:e5:11:ab:e9:2d:ba:4f:23:65:b8:
f8:cc:ed:dc:55:34:fe:6c:27:9a:18:ba:d6:a0:39:fb:42:71:
59:b3:92:a4:13:1f:eb:79:1a:c4:02:b1:5d:5e:81:8d:64:e1:
b7:09:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org