Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/_uCNDZrGbShdEqKr4ggUFMaUvAg.roa
File: _uCNDZrGbShdEqKr4ggUFMaUvAg.roa (raw, json)
Hash identifier: II4TIGCQ6gJLjsAjVxs/g3cz4KKKwmh5BIOwRrc4DEE=
Subject key identifier: FE:E0:8D:0D:9A:C6:6D:28:5D:12:A2:AB:E2:08:14:14:C6:94:BC:08
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01858B4F83D1DEBC16E672812E90892CA2AA
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/_uCNDZrGbShdEqKr4ggUFMaUvAg.roa
Signing time: Sat 07 Jan 2023 08:18:42 +0000
ROA not before: Sat 07 Jan 2023 08:18:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138211
IP address blocks: 2a12:3fc2:e600::/40 maxlen: 48
2a12:3fc2:e800::/40 maxlen: 48
2a12:3fc2:8000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8b:4f:83:d1:de:bc:16:e6:72:81:2e:90:89:2c:a2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 7 08:18:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fee08d0d9ac66d285d12a2abe2081414c694bc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:29:65:2d:fb:12:6a:1e:b8:9b:40:25:3e:4e:
a7:70:b2:48:a0:8d:d8:8d:b1:eb:af:36:ee:6c:90:
ca:b6:74:8d:9e:32:9d:2c:f8:62:38:a9:38:77:07:
b7:f6:c8:3e:58:e5:bf:3d:1c:34:cd:fc:1f:22:c2:
40:00:09:8c:80:bd:62:8c:64:68:b3:4c:4c:68:8a:
1b:02:90:3c:3f:de:02:57:48:ad:e3:41:12:5b:e5:
85:56:40:c5:2d:5f:37:2d:2b:d6:86:f2:14:25:79:
57:df:32:eb:68:fd:f2:0c:6b:3e:3e:da:9c:06:a3:
b4:21:c0:e6:f9:ea:e7:a2:ae:0f:80:74:ea:ff:60:
54:bd:ae:4d:99:a3:8e:83:30:57:e5:65:7b:e7:7a:
fc:e5:2c:ec:73:14:1e:c6:0d:06:6a:d2:9a:bc:fa:
12:af:3b:93:83:93:ac:77:24:e7:04:3d:5e:75:f9:
f4:e2:fc:15:39:dc:8b:1c:2e:21:e6:52:89:9d:96:
ac:ca:72:e4:34:87:b9:a7:25:dc:3e:76:fa:b9:1c:
3c:5a:20:5c:3f:85:66:bf:bb:a5:cb:e3:f4:d1:4d:
e6:bf:04:54:5c:e7:00:e4:b8:d9:53:6a:06:7a:b1:
eb:b5:d5:e9:7f:c5:b9:9c:68:d9:e9:4c:60:50:a3:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:8D:0D:9A:C6:6D:28:5D:12:A2:AB:E2:08:14:14:C6:94:BC:08
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/_uCNDZrGbShdEqKr4ggUFMaUvAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:8000::/36
2a12:3fc2:e600::/40
2a12:3fc2:e800::/40
Signature Algorithm: sha256WithRSAEncryption
1a:d1:43:58:83:43:a0:5c:ed:88:9a:ad:66:82:67:d9:ec:ba:
73:96:1a:75:00:86:1f:2b:f9:32:2e:74:b1:97:4f:33:b5:56:
10:90:76:91:3b:8c:63:80:f1:2c:28:ef:57:c5:a0:66:e3:ef:
7e:b1:e5:d5:90:44:78:6d:81:49:af:57:d5:d2:6d:d2:0c:27:
0c:33:31:f9:5d:8d:6f:ae:74:b3:dd:f3:76:1d:c1:ae:14:55:
09:07:0c:7d:5e:ad:0d:71:e2:ab:28:ae:b1:6a:e2:b6:f0:38:
74:5c:6b:76:b8:f2:8d:99:6d:b5:a3:b3:b0:61:aa:93:d5:b2:
6e:e7:c8:22:d8:da:8a:ea:7c:2c:80:4a:98:24:27:b3:a1:14:
ad:cc:2a:03:03:5b:cb:d1:43:9a:9b:89:0b:0f:82:05:25:bd:
af:af:a8:92:5e:31:c4:58:8e:bb:99:b1:04:00:7f:69:e2:26:
15:ff:70:45:27:c3:b1:99:6d:32:fc:be:39:21:a2:92:9f:e0:
d0:9e:45:06:15:8a:ff:c4:5e:f3:5d:3a:a0:18:c3:65:8c:c0:
de:c5:35:46:2d:22:df:98:a2:02:ec:c2:66:bc:80:ef:5a:1b:
e4:48:ef:24:3a:5e:58:63:c2:3a:ea:58:46:22:93:47:3b:d4:
30:89:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:43 2025 by rpki-client