Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tq4yuabe49NfR4Pl4QGxO01-uas.roa
File: tq4yuabe49NfR4Pl4QGxO01-uas.roa (raw, json)
Hash identifier: Byvz9NrWnQNF1B+LTN023oiUjgjBMru00LyVQo3N0Pc=
Subject key identifier: B6:AE:32:B9:A6:DE:E3:D3:5F:47:83:E5:E1:01:B1:3B:4D:7E:B9:AB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0184BB51D042CC57E55DA0D73FAD553B58B4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tq4yuabe49NfR4Pl4QGxO01-uas.roa
Signing time: Sun 27 Nov 2022 23:00:11 +0000
ROA not before: Sun 27 Nov 2022 23:00:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202427
IP address blocks: 2a0e:97c0:5bd::/48 maxlen: 48
2a0e:97c0:5b8::/48 maxlen: 48
2a0e:97c0:5b3::/48 maxlen: 48
2a0e:97c0:5be::/48 maxlen: 48
2a0e:97c0:5b1::/48 maxlen: 48
2a0e:97c0:5bc::/48 maxlen: 48
2a0e:97c0:5b7::/48 maxlen: 48
2a0e:97c0:5b2::/48 maxlen: 48
2a0e:97c0:5b5::/48 maxlen: 48
2a0e:97c0:5b0::/48 maxlen: 48
2a0e:97c0:5bb::/48 maxlen: 48
2a0e:97c0:5b6::/48 maxlen: 48
2a0e:97c0:5b9::/48 maxlen: 48
2a0e:97c0:5b4::/48 maxlen: 48
2a0e:97c0:5bf::/48 maxlen: 48
2a0e:97c0:5ba::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bb:51:d0:42:cc:57:e5:5d:a0:d7:3f:ad:55:3b:58:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 27 23:00:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6ae32b9a6dee3d35f4783e5e101b13b4d7eb9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:2d:60:b6:9a:81:e0:c6:27:cc:61:06:75:
79:ad:15:99:bc:c7:4c:07:89:08:35:8d:ac:7a:c1:
e0:56:e1:76:2f:49:a8:98:cd:f6:22:f8:49:66:62:
f5:f7:89:c6:66:41:55:e1:cf:58:7d:29:b5:ef:f0:
1c:d0:3c:58:58:81:94:c4:c9:25:e9:af:0a:d2:5e:
c0:54:7a:ea:f9:2a:b6:d7:2c:34:20:df:e6:88:e9:
36:fc:17:07:fa:81:ae:b8:52:e7:0b:51:32:80:73:
50:de:28:ec:2c:7e:b6:2f:cd:e7:bd:00:a9:5f:39:
40:65:74:ea:b3:ee:eb:24:58:b8:a9:4a:67:d7:4a:
75:84:01:35:ad:25:48:43:bd:ed:79:bf:86:fd:79:
c0:02:c8:2d:4b:0b:d0:0d:f4:46:cd:ac:4c:a0:a5:
81:d3:78:4f:57:54:91:a3:15:dd:10:6f:1c:da:00:
b8:a7:ae:6c:23:3a:4c:07:9e:d2:9f:11:14:09:6d:
74:98:ee:80:24:a2:9a:4a:93:86:75:34:3c:42:43:
96:82:9b:22:0e:50:cb:10:10:95:01:86:46:aa:a5:
cb:72:a0:d1:40:88:fe:8f:6c:49:b8:68:68:48:ba:
7b:c5:19:a1:d1:cc:25:53:18:94:94:18:b7:4b:53:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AE:32:B9:A6:DE:E3:D3:5F:47:83:E5:E1:01:B1:3B:4D:7E:B9:AB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tq4yuabe49NfR4Pl4QGxO01-uas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5b0::/44
Signature Algorithm: sha256WithRSAEncryption
5d:f9:39:2c:f6:70:f7:40:92:c9:71:3c:cb:6c:3a:f9:8b:87:
7e:a4:bb:e3:08:cf:40:73:97:01:4a:58:8e:78:f5:a5:90:c9:
b4:1d:ba:a4:25:33:b3:62:fa:6d:a1:97:1a:09:2a:5c:43:e9:
06:ad:03:14:58:10:fe:47:4d:58:6e:a0:6b:c1:8a:f7:c1:bd:
14:09:aa:c4:c2:eb:cf:54:c5:14:07:1a:4e:71:08:db:b0:56:
60:91:c9:42:f3:08:f5:28:77:63:dc:cc:92:6b:be:97:2f:c4:
24:76:64:b9:d4:54:3f:39:ba:7e:9a:11:45:67:e0:0c:6f:24:
37:a4:ca:38:95:c2:bb:ae:3f:1e:4d:8c:b1:14:3b:5a:02:58:
2f:44:51:ad:cc:4a:98:dd:50:e9:79:fa:a7:c9:59:0d:ba:80:
e5:fb:33:98:5f:7e:a1:f9:ee:84:1c:98:5b:9f:d2:40:38:13:
b0:fd:ae:2e:03:4e:c7:c5:48:b6:02:16:7a:88:6e:42:d3:ea:
df:bb:c2:91:d3:47:b3:5b:8c:ed:fc:14:bf:9c:a1:7e:b1:ae:
23:71:92:52:82:aa:02:b3:88:7e:44:b7:4f:c9:a1:b5:2c:ed:
54:fb:c4:ad:88:93:74:36:ce:26:55:45:db:c9:94:a8:95:20:
4f:65:9d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:33 2024 by rpki-client on console-ams.rpki-client.org