Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/wrT95VMStOL68o-UxXszIo2tBqA.roa
File: wrT95VMStOL68o-UxXszIo2tBqA.roa (raw, json)
Hash identifier: 8JVgBXoGYLoVIUkCi7a1WGmS2xNZ0WtFOfz8s3JiIZU=
Subject key identifier: C2:B4:FD:E5:53:12:B4:E2:FA:F2:8F:94:C5:7B:33:22:8D:AD:06:A0
Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial: 0F2788BD
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/wrT95VMStOL68o-UxXszIo2tBqA.roa
Signing time: Sat 01 Jan 2022 04:52:28 +0000
ROA not before: Sat 01 Jan 2022 04:52:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46887
IP address blocks: 2a06:6540:2001::/48 maxlen: 48
2a06:6541:2001::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254249149 (0xf2788bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Validity
Not Before: Jan 1 04:52:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2b4fde55312b4e2faf28f94c57b33228dad06a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:52:f2:01:50:88:52:79:4f:f1:34:dc:08:
46:f1:8a:ae:f6:08:b5:83:7d:74:73:3d:8e:5c:31:
90:7c:e5:d2:a6:25:43:5f:37:b3:cf:de:57:e9:f5:
88:93:7b:53:4a:23:80:7d:81:c4:0d:35:dd:05:a4:
86:1b:01:50:d0:f9:6c:cd:a1:86:04:df:3d:bf:ad:
53:8a:cc:05:d6:f3:f5:1c:64:42:82:de:e4:fa:98:
0f:30:e1:9f:64:7a:56:78:ce:f5:e5:97:51:66:5f:
0b:62:52:44:e9:d9:bd:b4:78:91:5a:81:df:d1:6e:
66:62:c4:9f:9e:4f:18:8d:17:09:57:c2:01:e5:11:
ad:93:9c:89:0d:2d:15:9e:b5:bd:e9:c6:25:57:07:
fc:1b:96:5d:6c:ff:a2:d5:96:df:42:52:98:31:af:
7e:3e:a6:66:b1:54:91:b7:ad:fd:a2:eb:6f:cf:08:
de:f9:8b:40:2f:4d:dd:63:a3:ef:3e:2e:e9:4e:f0:
2d:ba:bf:f9:5f:13:66:23:0d:01:50:98:bd:2c:a8:
c6:62:dc:27:6f:fb:4d:38:91:04:11:01:f0:76:2b:
7b:cd:03:16:c1:06:59:6f:f2:89:93:fe:14:00:5e:
98:ab:a4:4f:08:59:69:0b:5d:b6:32:28:3b:da:04:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:FD:E5:53:12:B4:E2:FA:F2:8F:94:C5:7B:33:22:8D:AD:06:A0
X509v3 Authority Key Identifier:
keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/wrT95VMStOL68o-UxXszIo2tBqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6540:2001::/48
2a06:6541:2001::/48
Signature Algorithm: sha256WithRSAEncryption
8d:6b:ac:04:31:90:71:59:7a:9b:a9:9b:35:ec:cd:32:a7:20:
b4:3e:f6:3a:fe:a9:7a:3e:08:9e:40:99:e0:1e:ce:a2:88:7c:
60:2c:28:91:30:0d:f5:f6:b8:d4:bd:4f:a7:7d:11:68:c3:25:
5c:33:14:16:ee:48:41:25:e5:ca:7f:e9:6b:a0:0f:f1:73:3c:
56:30:b4:e3:1c:91:2f:dc:9c:69:ee:6b:50:8f:cd:0f:47:21:
70:f3:c3:83:40:69:69:1d:c5:c5:48:5c:0a:a4:89:be:85:a3:
1f:3b:c5:b7:4c:56:bb:fa:bb:39:68:02:b6:cb:a9:57:17:9a:
04:65:51:be:5a:b9:de:b7:12:f8:e4:94:7b:7d:47:2c:94:24:
03:69:98:b0:df:e2:77:df:68:d6:3b:ef:21:d0:c9:cf:40:d9:
02:70:71:a9:9d:22:b1:ce:bc:5c:5c:46:29:66:b3:d5:cc:b8:
d6:1b:54:d4:67:8c:4f:27:9c:6d:cd:2a:0d:f1:f4:5b:df:f2:
70:cb:6a:d8:19:eb:5f:0c:8e:32:85:db:13:ba:57:de:c7:7a:
e9:af:2c:88:5d:98:ae:a3:09:d1:e3:d3:31:c0:cd:cb:ea:b6:
d7:fd:a9:cb:1d:4d:0a:e1:7b:75:08:11:43:72:4e:08:63:3f:
ee:ed:fd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org