Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Wqw1bFABQ9eN23YTFVIYdfVJSfM.roa
File: Wqw1bFABQ9eN23YTFVIYdfVJSfM.roa (raw, json)
Hash identifier: EckRrT8sE4ay4lWPQvY1/aObnhrdMp4yoYauvTmhYuY=
Subject key identifier: 5A:AC:35:6C:50:01:43:D7:8D:DB:76:13:15:52:18:75:F5:49:49:F3
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018531036CE2803F564369522D0E384AF4B4
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Wqw1bFABQ9eN23YTFVIYdfVJSfM.roa
Signing time: Tue 20 Dec 2022 19:29:46 +0000
ROA not before: Tue 20 Dec 2022 19:29:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200398
IP address blocks: 2a06:e881:9780::/41 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:31:03:6c:e2:80:3f:56:43:69:52:2d:0e:38:4a:f4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Dec 20 19:29:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aac356c500143d78ddb761315521875f54949f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e1:29:55:57:38:9c:47:09:8a:f2:cc:93:49:
41:a9:d3:cf:47:db:22:37:35:8c:25:75:6d:87:43:
d7:b8:1e:ea:af:7d:4b:74:56:a3:bd:ee:3c:1d:03:
b3:f6:c6:85:a2:9e:fb:be:ce:2d:2a:31:40:90:99:
62:e7:a2:05:5a:df:5b:08:53:07:e3:6a:e0:30:7c:
0d:3d:68:b3:fd:67:ea:02:a5:e3:cc:12:0d:15:32:
c7:be:af:cb:87:81:bc:50:25:b5:dc:39:83:92:ac:
00:1c:43:d7:7e:e3:fd:20:ea:6e:b1:d0:eb:8d:8e:
dd:be:f0:24:8c:70:22:03:1e:31:13:bd:0f:79:78:
ba:d9:62:90:3c:35:a8:a6:cd:b3:d2:d7:97:cb:d5:
9f:c0:49:fa:d1:0e:d6:9c:03:41:6b:e3:eb:34:b4:
8d:37:b5:b3:8a:ef:4c:d7:2d:5e:85:21:d1:5d:1b:
3f:1b:4b:cb:19:57:02:14:03:0b:f8:ca:d3:95:05:
c0:c0:f9:47:f0:9a:ed:ba:c8:c4:c6:d7:31:11:7d:
9b:04:05:d1:27:b4:2c:21:10:1d:ff:cd:fb:ae:9f:
ca:2f:6d:1c:e6:d5:04:5e:e4:b1:52:db:aa:e3:10:
21:23:30:70:00:40:26:38:f6:96:eb:a0:39:09:93:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:35:6C:50:01:43:D7:8D:DB:76:13:15:52:18:75:F5:49:49:F3
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Wqw1bFABQ9eN23YTFVIYdfVJSfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:9780::/41
Signature Algorithm: sha256WithRSAEncryption
a9:37:f3:e0:0f:12:58:65:1e:f6:15:2b:b1:e8:2d:48:e1:a5:
76:ed:bb:b5:48:b3:59:da:0e:1c:25:a0:1c:3b:c4:c4:6e:9b:
87:52:a1:70:31:6c:f8:ca:34:27:8d:8e:15:75:08:a9:96:60:
5d:1b:8b:59:31:3b:42:ed:21:04:c7:5d:cc:37:45:0a:70:00:
a3:37:53:89:73:1f:21:6c:71:69:17:ce:0b:cb:d3:a4:2f:16:
8c:2d:2d:cd:eb:ae:b5:1c:75:ab:fd:91:2c:98:97:0d:4b:84:
74:f6:d0:3d:78:1a:0d:2f:26:d2:f9:51:3f:e8:82:c5:81:d4:
38:ee:d5:5e:8f:3d:c9:39:ca:de:05:84:4e:c6:f8:6f:e8:64:
2e:74:03:1a:94:73:b2:1b:2f:f3:51:33:a1:f4:b9:fa:e5:9b:
11:01:be:3d:f1:65:4e:5a:be:df:d9:02:ea:eb:46:4d:8e:ce:
5e:0e:4e:cc:a0:c7:4d:a2:31:f6:fb:cb:f8:0f:b2:6d:3d:66:
0f:a6:29:6e:fa:c6:4e:7c:12:c7:13:38:d5:f9:1e:76:a4:04:
55:d3:2c:b8:7d:1d:fa:b7:c2:cd:83:a4:02:b3:6d:e0:7f:6d:
ca:bc:70:f7:48:98:7a:ff:70:07:83:c0:c9:35:cf:18:50:d8:
95:49:8d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:40 2024 by rpki-client on console-ams.rpki-client.org