Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/v3ApsrjDdFbINMAZr0XL02uF920.roa
File: v3ApsrjDdFbINMAZr0XL02uF920.roa (raw, json)
Hash identifier: 7nozmm+mIdAYYfmxUaYflNW3SZm5AVkLHUqNXnIo6N8=
Subject key identifier: BF:70:29:B2:B8:C3:74:56:C8:34:C0:19:AF:45:CB:D3:6B:85:F7:6D
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018240F96856B506E156F7C96A89F93C5FA2
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/v3ApsrjDdFbINMAZr0XL02uF920.roa
Signing time: Wed 27 Jul 2022 18:44:23 +0000
ROA not before: Wed 27 Jul 2022 18:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 2a06:e881:73ef::/48 maxlen: 48
2a06:e881:73ff::/48 maxlen: 48
2a06:e881:650f::/48 maxlen: 48
2a06:e881:9200::/45 maxlen: 48
2a06:e881:9300::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:40:f9:68:56:b5:06:e1:56:f7:c9:6a:89:f9:3c:5f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jul 27 18:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf7029b2b8c37456c834c019af45cbd36b85f76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:56:52:80:c6:5b:08:94:f6:ff:7b:b6:f1:29:
a4:5c:92:1e:1b:a1:f3:a3:89:60:56:d6:75:f3:ca:
eb:d6:8d:0b:68:95:d9:6c:94:0c:fd:ba:66:df:ac:
3f:76:8d:56:1d:e5:66:2c:24:33:2b:c0:01:b8:a3:
5f:bb:b5:37:5a:bb:7d:3f:83:ee:e1:32:43:3d:55:
c6:d4:25:be:bc:52:57:ca:70:e8:41:0b:b9:ad:14:
86:41:22:36:a3:6d:0e:f3:fd:4a:e4:4e:b9:c4:07:
c5:b9:82:74:97:ff:17:81:76:ce:95:a7:de:8a:46:
92:ef:07:e7:34:3a:25:0a:71:23:d7:33:6b:09:ca:
fa:6a:80:02:df:96:0e:1a:06:33:01:ca:2f:44:ee:
5d:a8:44:da:66:4e:0f:60:73:fc:8c:78:4f:e7:04:
3a:f1:a5:54:e4:f7:47:d5:f2:19:5d:54:7e:c9:7c:
2b:f3:65:21:96:de:fb:06:f6:df:cd:52:71:2f:27:
e9:4d:c7:e6:ba:21:d4:99:e0:dc:52:f6:de:09:f9:
f4:3b:a6:a4:52:9d:63:e2:8f:b3:29:ae:3c:23:c9:
d1:3f:49:f3:ab:5f:bd:52:e2:d8:14:1f:f5:d1:00:
1f:5c:4b:09:d6:08:ac:e9:7f:eb:03:07:af:92:36:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:70:29:B2:B8:C3:74:56:C8:34:C0:19:AF:45:CB:D3:6B:85:F7:6D
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/v3ApsrjDdFbINMAZr0XL02uF920.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:650f::/48
2a06:e881:73ef::/48
2a06:e881:73ff::/48
2a06:e881:9200::/45
2a06:e881:9300::/44
Signature Algorithm: sha256WithRSAEncryption
d7:87:4c:06:3d:e0:cf:ad:8c:82:c6:4b:03:ec:76:1d:b5:7d:
2c:ee:10:09:41:0f:83:f7:bb:47:4d:c6:39:43:f1:7c:49:f0:
59:3a:b7:8d:28:fa:61:61:69:d6:40:3a:79:1b:59:f0:09:8e:
8b:31:ba:9f:bd:b6:0e:cf:af:c4:72:31:75:9d:b2:c1:6f:92:
d3:6f:26:2c:fe:29:05:da:ba:7e:1f:eb:2b:cc:31:6e:67:e4:
f8:e5:87:f2:8a:03:25:18:2e:a8:8c:30:9f:d9:ed:67:a7:8b:
d7:f5:a6:de:e9:0b:ca:32:43:f3:9b:9d:71:cf:fa:7f:d3:6d:
12:de:87:43:13:ed:3f:89:44:8e:69:89:0d:f8:a3:11:97:f6:
2d:e3:e1:42:50:bb:18:d8:3a:c2:2c:7f:78:d6:74:5e:bc:33:
1f:09:6b:10:9f:54:40:c5:e8:cf:9c:36:eb:89:88:80:44:7c:
09:32:56:0b:1d:65:1b:0a:21:a9:97:db:5b:7c:22:a9:b0:4f:
67:97:3c:da:8a:63:b3:b1:a9:a0:b8:eb:c1:dd:bd:f3:77:36:
cd:aa:cc:02:7d:2e:dd:66:54:ee:72:38:9e:b8:22:0d:95:d4:
b8:75:02:2e:91:a6:71:b6:0f:9b:da:8f:07:c4:52:97:13:f2:
d4:3c:88:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:42 2023 by rpki-client on console-ams.rpki-client.org