Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uGBqWkhlqAsiuXLm9H-mn_KHi6c.roa
File: uGBqWkhlqAsiuXLm9H-mn_KHi6c.roa (raw, json)
Hash identifier: jUL6rvxVnhyoqVq1yNhKfiw+ka0a7rMQ05WQGdXUE80=
Subject key identifier: B8:60:6A:5A:48:65:A8:0B:22:B9:72:E6:F4:7F:A6:9F:F2:87:8B:A7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018426A535833B66DE13D26E091B3C9F4EB6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uGBqWkhlqAsiuXLm9H-mn_KHi6c.roa
Signing time: Sun 30 Oct 2022 02:07:52 +0000
ROA not before: Sun 30 Oct 2022 02:07:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142382
IP address blocks: 2a0e:b107:1790::/48 maxlen: 48
2a0e:b107:1795::/48 maxlen: 48
2a0e:b107:1792::/48 maxlen: 48
2a0e:b107:1794::/48 maxlen: 48
2a0e:b107:1791::/48 maxlen: 48
2a0e:b107:1793::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:26:a5:35:83:3b:66:de:13:d2:6e:09:1b:3c:9f:4e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 30 02:07:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8606a5a4865a80b22b972e6f47fa69ff2878ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ab:15:19:97:93:4c:62:97:59:80:a3:86:0d:
6b:2c:ad:8a:32:dc:34:db:61:c2:c7:4d:b3:87:1b:
8a:4b:18:c4:f4:a7:bd:bd:12:65:1a:96:fd:43:0c:
56:6a:c2:b1:3b:c0:a7:f9:6f:a9:af:65:ae:95:ea:
8f:f6:98:61:97:78:51:b1:38:eb:31:b3:04:86:1d:
30:43:2a:95:93:fb:ea:cf:e9:7b:aa:b1:20:0d:4e:
36:72:0c:14:ed:12:26:cb:a3:e7:ea:a2:3a:46:44:
27:2f:1e:48:50:38:32:46:b1:6a:09:eb:30:ec:ac:
bc:ad:63:09:67:17:e9:8c:a4:b1:5b:08:08:50:e6:
72:3a:f3:b1:3d:15:bc:3b:ed:ff:53:6c:f8:e2:bc:
5b:c5:5a:cf:45:2d:5c:29:f3:72:59:79:c7:b7:d2:
cb:d5:7a:1f:78:e8:e8:07:64:5f:22:69:2b:f3:c5:
0d:c1:f2:6e:99:36:21:b2:30:4d:14:df:68:67:bb:
1a:30:e7:e0:fb:25:c2:c3:83:1c:5e:41:96:dd:e5:
fa:6d:52:65:67:89:c9:80:a6:1d:9f:02:54:21:1b:
0a:45:2e:90:96:85:de:94:cb:67:16:5d:ab:3b:b7:
b5:4a:f7:a6:cc:17:f0:ba:01:61:e0:23:43:24:33:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:60:6A:5A:48:65:A8:0B:22:B9:72:E6:F4:7F:A6:9F:F2:87:8B:A7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uGBqWkhlqAsiuXLm9H-mn_KHi6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1790::-2a0e:b107:1795:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8a:6b:50:84:e0:ad:dd:1b:f1:d1:0c:fb:e3:cf:94:03:f2:54:
e1:0f:40:9d:3d:5b:c4:3b:6e:3c:08:df:db:94:d0:71:ab:53:
a1:c1:d7:08:a0:36:5b:85:32:a3:c6:68:8b:35:a6:6b:95:08:
54:28:dc:f4:6c:90:28:7f:d3:5f:d3:12:f1:14:e8:cd:9e:7a:
ff:f8:c9:39:54:0e:57:8b:e7:ed:4d:97:df:23:16:e1:e8:27:
ce:78:de:ee:74:46:ef:0b:f8:39:8a:bd:03:1a:90:39:8c:98:
fd:6e:5c:87:4d:48:7b:9e:12:83:79:2c:ca:27:c0:04:55:f9:
5b:85:70:e1:d7:a4:c2:70:cd:c4:e8:99:2f:bf:5b:45:e4:00:
39:0b:cd:b7:08:4b:75:dc:61:f3:aa:91:5c:77:47:5a:ad:da:
3b:51:d0:c9:24:c5:06:cd:ee:83:77:8d:bb:6a:69:02:e1:e7:
56:58:61:58:0d:f0:58:2c:78:a5:56:21:b3:d5:64:db:bd:dd:
f9:23:a5:57:76:62:2d:b5:19:40:44:7e:4d:1b:7c:70:2a:26:
04:ae:97:3c:b1:ff:58:e9:0e:16:6b:47:36:d3:c0:a2:01:ac:
25:3c:16:6e:56:50:03:8e:40:a0:db:29:25:ab:22:fb:a7:35:
11:de:54:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:33 2024 by rpki-client on console-ams.rpki-client.org