Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ULM4C_a6o5C0xmIZLmtDIH0y4vc.roa
File: ULM4C_a6o5C0xmIZLmtDIH0y4vc.roa (raw, json)
Hash identifier: 1kVe6numQf7LMOCQ3Rby7G8Y0a0z2jjjNiSlwH2/ZjY=
Subject key identifier: 50:B3:38:0B:F6:BA:A3:90:B4:C6:62:19:2E:6B:43:20:7D:32:E2:F7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018565E9D96A006ECE274C7F0CA1D07A6435
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ULM4C_a6o5C0xmIZLmtDIH0y4vc.roa
Signing time: Sat 31 Dec 2022 02:01:42 +0000
ROA not before: Sat 31 Dec 2022 02:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210619
IP address blocks: 2a0e:97c0:800::/39 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:65:e9:d9:6a:00:6e:ce:27:4c:7f:0c:a1:d0:7a:64:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 31 02:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50b3380bf6baa390b4c662192e6b43207d32e2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:2d:4f:1c:49:4c:29:07:01:90:82:0e:0c:
41:04:21:8b:09:76:88:9b:c0:10:e5:ce:36:7a:32:
30:2e:b8:67:b2:0f:dd:8c:b7:b1:de:f3:b6:a2:aa:
e7:89:c2:71:0c:aa:8f:28:2e:cb:0d:06:f3:51:1a:
12:49:a2:4b:e0:20:f4:da:89:83:a3:f9:73:c0:b7:
dc:a7:75:bb:79:a6:c3:31:cd:39:16:4f:69:fb:e8:
fe:77:b3:40:c9:f3:2c:d7:1d:8b:f3:f0:4d:e0:54:
8f:42:28:48:e1:d1:f7:da:89:18:12:8f:be:91:3e:
12:16:e5:95:23:68:96:68:fc:45:6f:05:f7:92:05:
f5:cc:98:26:73:69:e5:19:20:59:ac:a3:71:98:46:
03:1a:ef:d4:86:a3:ec:6e:00:09:bf:c1:e6:b0:91:
7c:30:bf:1e:92:ee:d5:ca:db:73:98:b3:fc:a2:78:
47:f8:90:50:fe:3a:7a:04:c3:ed:4e:14:3b:5c:03:
d6:3b:de:a0:6a:17:b7:8f:9e:50:30:ab:05:34:2c:
a5:7e:de:44:44:1c:2f:69:86:b3:01:ea:ff:56:e9:
d6:a4:59:d8:fc:6f:76:77:fa:f9:ab:5f:6e:3f:28:
32:ba:69:f6:1e:cc:d1:e3:5f:8f:91:c5:e5:22:9a:
61:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B3:38:0B:F6:BA:A3:90:B4:C6:62:19:2E:6B:43:20:7D:32:E2:F7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ULM4C_a6o5C0xmIZLmtDIH0y4vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:800::/39
Signature Algorithm: sha256WithRSAEncryption
13:a8:db:ea:ae:9b:b9:5f:7c:d3:a9:a9:af:08:57:a7:09:3d:
93:f7:e9:cf:3f:f6:43:db:a6:98:1b:e4:16:5e:f8:42:64:15:
89:86:ac:4b:7a:1f:4a:0b:3d:ec:84:7a:78:b6:b4:0e:1d:3d:
d7:cb:9b:1e:c3:61:36:ef:61:8f:c7:cc:e0:9a:87:33:e0:a1:
20:0c:7e:58:9c:79:33:9c:d0:1d:e2:35:ec:c5:0d:b2:0c:92:
59:17:25:95:c5:c9:b8:65:a1:7e:8a:bb:2c:f5:0b:09:5e:39:
de:c1:61:7a:14:f9:42:b3:0b:2b:35:36:12:45:e6:d8:3c:e8:
77:74:58:00:f1:ae:6e:c8:0f:32:11:09:b3:ba:3b:8e:33:73:
12:5d:ab:0c:05:ef:b0:75:70:92:d7:02:86:44:dc:9f:5e:09:
00:df:bb:bd:4b:2d:96:87:cd:36:1a:45:a2:fa:b7:00:5e:a3:
e4:3a:c6:bf:df:47:8a:f0:5e:2f:25:2b:79:35:5b:15:db:7c:
5e:bb:a7:9b:a9:05:6e:1d:71:e3:5f:92:a2:6d:bc:ed:82:0f:
3d:8f:7c:ed:03:cb:ea:73:74:b7:e5:ad:19:c2:ad:40:bb:01:
bd:24:95:da:38:b4:62:eb:eb:47:7b:30:c9:2d:b8:40:56:46:
03:c7:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:04 2024 by rpki-client on console-ams.rpki-client.org