Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/SCZLOLOqLq6cx-gC0RxspRrgp5g.roa
File: SCZLOLOqLq6cx-gC0RxspRrgp5g.roa (raw, json)
Hash identifier: m+rAl5r6MX6434Yfoz0BqTKCD2ZE4ULKRGCR5nwX500=
Subject key identifier: 48:26:4B:38:B3:AA:2E:AE:9C:C7:E8:02:D1:1C:6C:A5:1A:E0:A7:98
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01838EBD37F565E8E539FB899CAFCBFE2396
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/SCZLOLOqLq6cx-gC0RxspRrgp5g.roa
Signing time: Fri 30 Sep 2022 14:11:48 +0000
ROA not before: Fri 30 Sep 2022 14:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 147224
IP address blocks: 2a0e:46c4:2c43::/48 maxlen: 48
2a0e:46c4:2c42::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:bd:37:f5:65:e8:e5:39:fb:89:9c:af:cb:fe:23:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Sep 30 14:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48264b38b3aa2eae9cc7e802d11c6ca51ae0a798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:e9:30:e8:52:d6:4c:c2:30:73:40:e1:2c:
bc:2b:d1:82:0c:0c:cc:99:90:3f:5e:6d:b8:2a:53:
a5:a9:3a:28:b8:b7:85:e6:40:db:e9:8c:25:dd:24:
f8:7c:79:e4:d2:4a:50:08:1d:f7:a2:20:de:32:dc:
06:d7:e5:79:87:1d:2a:d9:90:9e:27:e7:fa:23:e0:
ab:25:fe:ef:af:21:f0:62:2e:3c:30:ba:60:f8:66:
86:08:3c:a7:ff:62:e6:c7:d8:5f:c8:7a:44:37:db:
14:dc:0a:11:6f:43:4d:b9:ac:50:67:f6:59:93:63:
ac:91:37:fe:7c:4e:95:bc:ae:be:07:3c:d6:88:3d:
54:88:a5:27:48:2f:60:16:fe:be:21:85:46:1a:aa:
85:dd:1c:4a:df:87:10:a6:15:27:5d:dd:52:07:0e:
10:29:e1:ca:32:c0:76:b7:84:68:94:3d:dc:11:02:
1c:ee:4d:7b:15:c3:4e:80:70:0a:fa:ae:6d:09:3b:
8e:ed:91:ec:eb:9b:49:f4:a9:2e:85:fc:ce:30:3d:
15:eb:1f:fd:89:ce:67:98:fc:d3:7e:7d:37:7a:4c:
f0:80:39:48:97:98:14:4d:ba:93:5f:08:3d:aa:fb:
07:80:7c:8c:34:1c:27:28:11:43:b1:60:ec:a7:1e:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:26:4B:38:B3:AA:2E:AE:9C:C7:E8:02:D1:1C:6C:A5:1A:E0:A7:98
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/SCZLOLOqLq6cx-gC0RxspRrgp5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:2c42::/47
Signature Algorithm: sha256WithRSAEncryption
08:3f:92:90:18:62:2e:85:29:1b:5b:e7:83:2a:8c:42:13:f6:
50:4f:52:02:2a:e8:2e:0c:22:7c:1c:91:28:1a:c2:2a:54:41:
b8:e2:a9:ff:c4:3f:35:cc:be:75:d6:06:4d:58:31:2a:37:e3:
89:db:64:7f:0b:d3:7e:ec:fc:b5:84:b2:a8:74:95:ce:45:e6:
91:f3:d9:34:6a:36:2f:1b:a6:69:d4:4b:a0:0e:97:73:1a:5f:
16:c7:c4:b0:c6:e7:ac:48:00:44:84:68:55:04:f4:ae:3f:47:
56:5c:97:d6:3c:c7:2a:4e:00:7c:3d:e1:97:4a:4b:15:3a:04:
b8:d0:dd:34:0b:23:2e:b7:b5:fd:9c:8f:97:91:e4:06:77:f3:
5b:f6:91:c1:0f:b1:f1:ce:db:b3:2c:3c:a1:ba:a2:ea:ce:21:
e3:1b:7b:84:28:62:44:19:39:7e:72:fc:5e:0d:1e:e3:f7:a2:
63:3f:17:99:2f:1e:77:b7:8d:85:e5:e7:a0:1e:d3:1e:18:df:
f5:05:d6:10:04:f1:e9:10:dd:ad:87:68:b0:cc:47:4c:0e:81:
93:06:1a:93:4c:af:f8:ed:21:a0:3a:d7:a5:c8:24:68:86:8c:
f2:98:dd:b6:ec:61:16:b2:04:c5:b1:f3:f3:61:f3:a6:f5:4e:
e7:c8:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:40 2024 by rpki-client on console-ams.rpki-client.org