Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ujDl6UTC3If2IlZ1sz6q6GW6Wmw.roa
File: ujDl6UTC3If2IlZ1sz6q6GW6Wmw.roa (raw, json)
Hash identifier: f+V+YDDMexwAWN2J8lqQSDjnLwaJdKYJmuHF5jGTFsM=
Subject key identifier: BA:30:E5:E9:44:C2:DC:87:F6:22:56:75:B3:3E:AA:E8:65:BA:5A:6C
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 03736FCE
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ujDl6UTC3If2IlZ1sz6q6GW6Wmw.roa
Signing time: Sat 19 Feb 2022 10:21:07 +0000
ROA not before: Sat 19 Feb 2022 10:21:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137490
IP address blocks: 2a0e:46c4:110::/48 maxlen: 48
2a0e:46c4:200::/48 maxlen: 48
2a0e:46c4:101::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57896910 (0x3736fce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Feb 19 10:21:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba30e5e944c2dc87f6225675b33eaae865ba5a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:54:ad:d6:b0:69:62:47:da:b7:56:65:78:
10:40:00:77:2a:b4:c3:8f:41:9c:10:41:3b:4c:56:
a3:d8:71:79:1a:90:ba:68:6a:fa:e8:3a:04:e9:f1:
5f:c7:ee:d8:97:33:34:3a:37:ec:a1:b4:93:76:49:
9c:1e:7a:2c:e1:15:20:d5:0e:41:15:fa:de:e0:32:
12:93:82:74:30:72:03:ca:b5:78:a5:81:dd:f7:cc:
fb:80:66:b8:38:a1:64:d2:7e:af:6a:0b:1a:70:b6:
e9:e5:76:48:40:1c:d0:47:0f:15:99:ec:26:7f:89:
df:1f:69:90:45:1d:35:c4:a5:55:92:54:f9:83:db:
54:c6:4c:82:1f:cb:7e:07:9a:b4:ae:d0:3f:9a:ec:
75:44:6f:1d:b8:de:63:81:87:93:d8:74:f8:5f:79:
e0:de:f9:56:9f:0b:67:3c:d0:6a:64:63:1a:1c:ba:
a4:ea:4e:d0:75:e3:0a:60:0f:96:48:46:ea:55:2c:
53:e2:0a:2a:a7:c0:bf:4d:47:bd:58:9b:cc:ef:05:
f9:36:b4:bb:83:3d:da:84:27:44:65:56:29:4e:cf:
b0:27:5e:a1:8a:85:3c:f5:ad:77:e4:02:16:ae:77:
09:47:a6:50:91:6f:d8:2a:3d:7a:30:b9:53:0c:d6:
13:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:30:E5:E9:44:C2:DC:87:F6:22:56:75:B3:3E:AA:E8:65:BA:5A:6C
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ujDl6UTC3If2IlZ1sz6q6GW6Wmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:101::/48
2a0e:46c4:110::/48
2a0e:46c4:200::/48
Signature Algorithm: sha256WithRSAEncryption
97:f5:f1:fd:27:6a:0d:76:b1:92:b8:43:41:de:05:a0:ac:d0:
79:5e:a9:85:26:51:62:23:97:fe:ee:39:a3:7a:f4:ec:69:d8:
08:79:21:87:43:61:f7:a8:e8:11:93:e3:e0:76:66:71:34:4a:
60:e8:53:f9:09:2a:fa:58:32:1f:b5:00:68:50:2f:61:26:3a:
53:14:3e:ff:b4:40:9e:bc:01:02:02:23:b0:53:12:9a:1b:94:
1a:38:c3:7e:19:99:44:1d:ce:1c:dc:04:70:fe:a8:94:9b:68:
a2:0b:eb:aa:15:e1:b4:c0:39:03:6c:ba:02:9c:73:e7:7f:ac:
89:99:29:c8:00:1b:68:91:17:b2:9e:92:4c:cd:61:84:ba:94:
a9:50:d1:85:75:20:86:ed:41:c2:ed:81:e3:e7:af:c7:e4:83:
51:f0:8c:5d:b4:76:05:6d:7c:96:9e:58:61:0c:28:8f:85:27:
34:2e:41:1f:1c:65:2f:cc:d3:09:bd:b0:1a:74:29:6d:76:13:
d6:15:3d:ee:8e:3c:b1:be:c1:da:d9:92:d1:6e:cc:9a:70:8b:
25:f7:89:56:ae:33:b0:9f:be:0a:cd:cf:38:ac:f4:56:95:e9:
46:74:91:d8:41:15:50:1b:84:2f:a8:7c:c0:18:69:cc:b3:a7:
8c:ab:aa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:40 2024 by rpki-client on console-ams.rpki-client.org