Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/UkfZMVhiDRBJhW-A5FCL6bncAHc.roa
File: UkfZMVhiDRBJhW-A5FCL6bncAHc.roa (raw, json)
Hash identifier: kKQuzqhZZlQNozznflmPXTUOH7QTZDAn11h5bjREFTA=
Subject key identifier: 52:47:D9:31:58:62:0D:10:49:85:6F:80:E4:50:8B:E9:B9:DC:00:77
Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial: 0F247805
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/UkfZMVhiDRBJhW-A5FCL6bncAHc.roa
Signing time: Sat 01 Jan 2022 04:52:26 +0000
ROA not before: Sat 01 Jan 2022 04:52:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 2a06:6541:2002::/48 maxlen: 48
2a06:6540:2002::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254048261 (0xf247805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Validity
Not Before: Jan 1 04:52:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5247d93158620d1049856f80e4508be9b9dc0077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:a5:92:cd:bb:9a:2c:98:54:2a:eb:7b:4a:
cb:10:d4:5f:56:e1:47:f7:1f:d6:79:f7:d8:06:1d:
02:ac:69:ae:84:3e:9b:6b:54:be:23:73:60:1f:f7:
df:bb:31:cc:ad:49:98:ad:b8:7a:a3:d8:9f:49:4a:
78:f5:8b:76:e1:db:d9:98:87:b7:ef:3a:70:34:52:
f7:f4:60:30:ef:c5:58:c2:a8:f5:6d:be:66:ec:e5:
1d:7d:6b:60:76:20:60:62:43:b3:a0:af:0a:37:b3:
97:d1:f1:09:a7:4e:e6:d1:d8:43:e9:ff:4b:eb:0b:
6f:ea:fe:2b:38:f9:5a:49:55:8d:62:7f:73:83:c3:
01:34:21:9e:22:9a:c3:59:5c:76:11:3c:32:fc:14:
53:e5:68:e5:f2:02:21:41:a0:3d:e0:d9:e4:98:8e:
b8:39:b0:40:68:9d:90:5d:c3:a4:da:a0:04:2b:19:
aa:a3:02:20:c2:b8:35:42:94:a7:2e:6f:1b:18:35:
d1:f1:cb:ee:2a:bc:27:0e:a9:6f:50:ea:c2:63:df:
2c:0b:60:de:69:5c:39:29:20:78:1e:e1:90:0a:aa:
ad:0f:65:58:d7:b0:33:b2:4e:0b:46:92:99:e9:9c:
77:85:ae:18:fa:43:a3:77:48:43:ab:a4:87:e6:3c:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:47:D9:31:58:62:0D:10:49:85:6F:80:E4:50:8B:E9:B9:DC:00:77
X509v3 Authority Key Identifier:
keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/UkfZMVhiDRBJhW-A5FCL6bncAHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6540:2002::/48
2a06:6541:2002::/48
Signature Algorithm: sha256WithRSAEncryption
1a:d5:25:2d:8b:dc:c9:84:91:06:4f:ea:50:2c:8a:97:99:a1:
ce:41:63:ed:d2:97:61:ee:d7:f9:9a:79:3a:2a:d6:d3:fc:2a:
35:f6:19:e7:f2:4c:0e:85:c7:32:30:c5:57:0d:e0:fa:39:f5:
f6:df:0f:6c:46:b6:dc:01:87:11:dd:3f:ac:d7:e6:d5:ba:cc:
d4:7f:c1:7f:9a:08:2f:fc:bf:bf:f6:56:22:5c:d5:1e:1c:6e:
e2:92:10:82:75:52:d1:ac:b3:1d:9c:1f:19:4d:83:40:d6:28:
a4:31:83:70:41:20:82:f8:e9:5c:74:7e:ec:0e:87:73:56:d0:
d6:9d:84:e4:3b:f9:ec:e8:60:92:2e:a4:71:12:47:10:73:27:
be:44:87:ac:ea:83:f2:d3:87:3a:cd:2a:e8:82:dd:ec:e5:af:
3e:81:90:aa:cf:71:b8:82:7f:3e:be:33:3f:b2:d5:ee:2e:77:
65:68:f6:7d:ed:32:fb:32:bb:28:7f:8e:4a:06:24:8f:72:c7:
8c:15:61:6c:f6:6b:e3:eb:40:b7:75:c6:8e:08:a4:8a:df:07:
ca:9c:4f:67:9a:9e:27:f9:08:47:6a:96:27:8c:37:c3:0a:06:
df:a2:08:27:1c:cf:aa:72:54:9a:c6:dd:6c:b7:83:ea:57:f4:
35:9a:4d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:43 2024 by rpki-client on console-ams.rpki-client.org