Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QBDFKzcBQ4lZOPaEtJsieMuICqA.roa
File: QBDFKzcBQ4lZOPaEtJsieMuICqA.roa (raw, json)
Hash identifier: 7zpVDx7wYndd1Tl4N+WedUji7II89++1eK3qCo/kI2s=
Subject key identifier: 40:10:C5:2B:37:01:43:89:59:38:F6:84:B4:9B:22:78:CB:88:0A:A0
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: E94B2E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QBDFKzcBQ4lZOPaEtJsieMuICqA.roa
Signing time: Sat 02 Jul 2022 15:59:10 +0000
ROA not before: Sat 02 Jul 2022 15:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208548
IP address blocks: 2a12:bec0:7464::/48 maxlen: 48
2a12:bec0:7467::/48 maxlen: 48
2a12:bec0:7400::/40 maxlen: 48
2a12:bec0:746b::/48 maxlen: 48
2a12:bec0:7463::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15289134 (0xe94b2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 2 15:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4010c52b370143895938f684b49b2278cb880aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:3e:dc:f0:c2:77:f1:6b:11:af:ed:2d:b3:
32:5b:f9:7f:a6:71:65:e1:ac:d7:80:6f:cd:04:f1:
e1:ee:f8:e4:1e:b6:f7:d0:6c:da:39:3a:af:07:a6:
19:02:b8:77:1b:b8:5b:df:b4:da:cd:d1:af:47:e8:
fa:df:31:08:00:1f:83:f8:15:b0:35:47:88:c8:5d:
81:e2:cd:03:6d:5f:b2:c0:ae:0c:65:27:70:5b:da:
05:c6:36:d4:b5:24:e2:43:83:08:98:de:38:4f:67:
cb:f4:39:34:16:b6:87:6a:78:7b:ea:01:51:90:bf:
fe:54:4d:2b:d4:9b:e6:56:3d:7c:9b:ad:b0:b9:cf:
f7:e1:bf:f5:19:73:70:53:0b:b5:c7:8a:3e:33:37:
c3:56:d9:dc:1e:1a:87:ae:f3:92:d7:5a:e8:65:f4:
7c:4b:84:65:06:7a:f1:5b:f9:4a:18:85:83:3f:84:
4a:b9:52:00:f4:97:11:62:f3:7c:b0:24:97:83:06:
ad:02:32:b3:48:9a:71:ec:be:a3:22:86:88:36:66:
75:df:a3:9d:d3:82:a3:50:49:da:c2:f6:76:be:7f:
37:9f:af:8e:7a:d5:97:23:8e:25:3a:30:c8:16:65:
d3:bc:4a:ec:51:65:f0:8d:2c:cd:9f:f4:e2:d3:fc:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:C5:2B:37:01:43:89:59:38:F6:84:B4:9B:22:78:CB:88:0A:A0
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/QBDFKzcBQ4lZOPaEtJsieMuICqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:7400::/40
Signature Algorithm: sha256WithRSAEncryption
40:a6:76:01:74:58:71:1f:46:af:ad:85:a2:47:70:1c:74:64:
5a:11:4d:f4:59:f1:7d:6c:3e:86:67:dd:b9:99:f8:bb:03:14:
86:82:57:93:ff:d1:05:9d:ff:e6:7a:cf:07:41:9f:c0:cf:ec:
21:3e:13:f3:53:a6:dc:4f:cb:23:64:8b:5b:a2:37:bc:b5:d3:
9a:8e:16:91:83:60:97:4a:f8:68:0a:29:61:30:2b:f6:85:4f:
d0:0e:41:3e:6d:54:96:0c:e5:dd:41:4b:6b:43:55:5d:90:2a:
0c:be:f4:a4:69:0b:63:59:03:1a:25:0e:dc:1a:d9:a4:90:d1:
58:ca:4b:05:d1:ce:00:b9:39:34:bd:e8:6d:be:94:5b:bd:8e:
9d:5e:16:fa:01:98:51:28:73:a4:f2:57:0f:83:e3:54:42:93:
02:7f:32:19:8c:b1:9f:d2:81:e3:04:8c:35:96:a6:5d:31:b4:
ee:9b:df:fe:1e:0d:9f:bb:1d:1a:1a:de:ce:40:e6:17:ca:b3:
94:27:ef:04:c7:64:fc:88:81:3d:c8:b3:35:88:0e:17:73:a0:
ce:3c:26:c6:a5:38:59:7f:a7:99:63:a2:80:d6:19:e1:f2:6d:
27:77:06:28:7f:84:90:7c:1d:64:5d:5e:56:d8:44:66:88:2e:
9f:0e:54:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org