Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/8wUb2cVFhK4pT2nq9HSWx4dCMGU.roa
File: 8wUb2cVFhK4pT2nq9HSWx4dCMGU.roa (raw, json)
Hash identifier: JUGmzsvERfMsGaSQCS0LbnYi3qivcCJz+aNwsC2LiR4=
Subject key identifier: F3:05:1B:D9:C5:45:84:AE:29:4F:69:EA:F4:74:96:C7:87:42:30:65
Certificate issuer: /CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Certificate serial: 0181D7A64AFE1BF139C8EC57B12772D25081
Authority key identifier: 4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/8wUb2cVFhK4pT2nq9HSWx4dCMGU.roa
Signing time: Thu 07 Jul 2022 07:53:28 +0000
ROA not before: Thu 07 Jul 2022 07:53:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204084
IP address blocks: 2a13:3307::/32 maxlen: 32
2a13:3305::/32 maxlen: 32
2a13:3301::/32 maxlen: 32
2a13:3302::/32 maxlen: 32
2a13:3306::/32 maxlen: 32
2a13:3304::/32 maxlen: 32
2a13:3300::/32 maxlen: 32
2a13:3303::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:a6:4a:fe:1b:f1:39:c8:ec:57:b1:27:72:d2:50:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be1bbbe540079d2b7f270b92ceaf3b2a816e8fa
Validity
Not Before: Jul 7 07:53:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3051bd9c54584ae294f69eaf47496c787423065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:b4:15:85:3f:35:1a:a6:47:30:46:9b:9d:
23:60:9b:e6:d5:28:98:a0:27:ea:38:10:63:9d:c1:
1f:1f:4f:0b:2b:e3:7b:76:d9:8b:db:98:d4:43:8b:
0d:62:c6:0e:ad:dd:9f:0a:e4:56:2f:f4:c1:a8:58:
5d:66:34:81:0b:59:cb:b7:87:70:a7:25:5c:79:1a:
c8:68:49:4e:8d:db:79:c2:bc:95:67:73:10:6f:6a:
1e:0a:52:e3:89:09:7c:c7:0d:09:36:5d:a7:bc:93:
db:e8:7d:c1:b1:c8:85:01:40:27:c7:8f:17:86:b7:
b3:10:7a:f0:19:84:4c:4f:e9:79:58:c4:ab:4b:36:
66:da:aa:fe:ed:15:1b:2c:cf:81:1e:6e:71:af:7c:
f2:c6:75:06:e4:5d:82:bc:ca:56:ac:a4:5d:68:fe:
57:41:70:b8:e7:ca:10:f5:5e:51:72:0b:92:cb:7d:
f3:af:7d:25:a5:83:3f:64:cd:a6:ae:70:a6:23:55:
25:4f:58:5f:ff:09:9f:18:a8:19:0d:30:14:e0:6e:
3f:de:43:ec:66:be:4f:42:bb:04:84:c3:27:d1:b6:
0d:c4:da:d8:38:4e:5f:5d:fa:cb:11:0a:c3:45:3f:
3a:9d:ff:59:d7:d4:c5:ea:d0:bc:bb:5d:c6:2f:f8:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:05:1B:D9:C5:45:84:AE:29:4F:69:EA:F4:74:96:C7:87:42:30:65
X509v3 Authority Key Identifier:
keyid:4B:E1:BB:BE:54:00:79:D2:B7:F2:70:B9:2C:EA:F3:B2:A8:16:E8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-G7vlQAedK38nC5LOrzsqgW6Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/8wUb2cVFhK4pT2nq9HSWx4dCMGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/7c7bf6-2bdf-4c7d-9aec-1ef1cee661ca/1/S-G7vlQAedK38nC5LOrzsqgW6Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3300::/29
Signature Algorithm: sha256WithRSAEncryption
87:ab:4c:07:2a:ba:b7:31:82:08:8d:ac:88:ce:ba:78:34:8f:
63:ad:c0:1b:26:de:eb:fe:44:9c:76:d9:d4:e4:ad:0c:8e:bb:
e6:46:28:1b:74:7b:ab:08:3c:79:87:dd:20:90:42:15:ca:8c:
a9:e4:55:27:37:84:ca:3a:6b:15:ae:7d:58:40:fb:fa:c1:a6:
c7:9c:98:62:b3:c8:2c:d8:e6:50:7a:32:56:91:8d:f3:05:65:
64:d4:a4:59:27:ef:63:83:17:d0:80:9a:45:81:de:c7:30:b3:
9d:ab:e3:4f:5c:6b:36:78:b9:ca:2b:21:90:7d:1e:7a:16:57:
a4:f3:ef:31:f3:1f:15:7b:aa:94:6a:4e:b3:f2:09:16:86:bc:
a3:f6:24:be:ec:a1:7f:c1:5c:ca:c0:e4:f9:7a:b2:26:03:a6:
34:16:62:8a:ed:ce:e7:85:b9:71:2a:be:74:e3:5d:c2:dc:b6:
95:02:12:05:11:96:13:8b:7b:aa:35:2f:f2:0e:e8:49:5b:79:
f4:10:6b:62:cf:c4:b7:b0:aa:9d:6b:0c:6d:07:f6:2f:c4:8c:
c6:9c:8c:53:9c:9a:66:3c:25:5d:c3:c9:2b:b3:4e:44:f6:ab:
4c:19:bc:7a:3a:2f:ce:49:45:1f:a6:d7:58:95:cb:95:8c:a4:
34:da:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:56 2024 by rpki-client on console-ams.rpki-client.org