Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/30UBd08JXCPexBttskXhns1xjt4.roa
File: 30UBd08JXCPexBttskXhns1xjt4.roa (raw, json)
Hash identifier: lUDU3uLc9EAcO0r33x6TBE5GFmTzzIdIqr+V+Ot7Wlk=
Subject key identifier: DF:45:01:77:4F:09:5C:23:DE:C4:1B:6D:B2:45:E1:9E:CD:71:8E:DE
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018551E2E1806ABFA871ACC8C129B70E1160
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/30UBd08JXCPexBttskXhns1xjt4.roa
Signing time: Tue 27 Dec 2022 04:41:41 +0000
ROA not before: Tue 27 Dec 2022 04:41:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7721
IP address blocks: 2a12:3fc2:6600::/40 maxlen: 48
2a12:3fc2:6666::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:51:e2:e1:80:6a:bf:a8:71:ac:c8:c1:29:b7:0e:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Dec 27 04:41:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df4501774f095c23dec41b6db245e19ecd718ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:e3:b2:02:5d:8f:04:28:61:be:15:bb:14:
5f:cd:05:4b:7e:3d:97:d2:7a:f8:9b:c4:bf:e2:e3:
60:86:0c:e7:13:d2:65:be:64:d9:97:54:00:7a:cf:
ad:6b:68:09:4b:dd:5b:37:f1:33:80:c5:18:d7:46:
0f:ed:b7:05:68:80:71:f2:fb:95:16:2b:ce:93:58:
4b:5f:4b:bb:3b:07:fc:94:68:c8:2a:2a:01:ff:9a:
1f:0b:6c:64:e5:2e:94:66:dc:d1:74:5a:98:24:8d:
3b:85:27:b9:63:3f:f2:5d:0c:6f:3f:b8:36:8d:1a:
af:8e:66:15:cc:1e:23:7b:15:6b:12:f5:c0:71:55:
86:64:73:eb:95:2c:e1:07:df:88:78:e2:8a:a0:07:
40:6d:97:cc:ee:20:2f:3d:9b:f5:4c:f9:72:ae:19:
81:09:c4:d1:1c:9f:cb:26:a8:84:5a:ae:30:8f:42:
d4:a6:ca:2b:84:bf:96:1f:5d:7d:4d:12:7c:c1:1d:
c7:5c:84:fb:e9:32:58:7e:b2:b8:41:10:9f:82:4e:
f1:90:c4:c5:e5:ff:44:cd:41:da:08:c6:1b:a1:47:
75:bf:98:1d:1e:68:c8:b1:ea:6b:9c:03:62:64:c1:
75:ff:15:70:09:42:26:d6:ec:11:ad:21:8e:31:4f:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:45:01:77:4F:09:5C:23:DE:C4:1B:6D:B2:45:E1:9E:CD:71:8E:DE
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/30UBd08JXCPexBttskXhns1xjt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:6600::/40
Signature Algorithm: sha256WithRSAEncryption
66:59:52:67:f2:f2:71:3b:c6:b3:c0:89:dc:28:f4:6e:a0:76:
3f:45:71:50:a9:66:17:6f:60:06:af:2b:70:61:e9:cf:a1:eb:
01:de:35:ba:37:42:27:32:05:79:40:93:2d:5c:64:34:30:ea:
00:e4:52:1a:92:f3:a6:3f:e4:c5:ee:8c:db:95:84:b8:75:66:
fe:84:29:9e:50:33:96:db:04:6a:1d:0d:e2:04:18:37:79:02:
18:e4:2c:51:ce:11:2b:71:99:bb:f6:07:31:20:8f:db:cf:29:
74:21:09:7c:d9:99:f8:43:d4:ee:f0:0a:28:01:28:58:c9:e6:
64:95:bc:91:de:2f:7e:8c:87:59:1b:18:c1:ab:95:4d:91:72:
06:a7:07:9b:f8:ac:13:65:6b:a8:09:18:21:5f:61:6e:4d:a0:
f4:cc:dd:53:12:8a:7b:bf:5b:94:86:7e:46:6f:fe:32:86:ab:
07:05:85:2c:a7:e1:fc:3e:8a:b5:fd:59:8d:02:bf:28:6b:2f:
6c:93:4a:34:be:a0:58:cf:1c:2b:8c:8c:1b:52:b5:65:76:a7:
73:01:dc:58:85:6c:36:f7:fa:91:09:84:2f:ce:65:85:cd:b6:
a4:9d:c8:2c:45:bf:75:75:1c:3e:6f:25:86:29:b7:aa:73:c2:
b5:e8:d1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:54 2025 by rpki-client