Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/uBDHCxE6waQ8SMGHboA7kgwEE9M.roa
File: uBDHCxE6waQ8SMGHboA7kgwEE9M.roa (raw, json)
Hash identifier: ubaRD9oveNF0z2/yZgW86EmHJ33MIiRJJJchDzjBzns=
Subject key identifier: B8:10:C7:0B:11:3A:C1:A4:3C:48:C1:87:6E:80:3B:92:0C:04:13:D3
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 01828022D20122AC3EFF6233B15B53B138F4
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/uBDHCxE6waQ8SMGHboA7kgwEE9M.roa
Signing time: Tue 09 Aug 2022 01:05:41 +0000
ROA not before: Tue 09 Aug 2022 01:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 2a0e:da40:10::/44 maxlen: 128
2a0e:da40:1::/48 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:80:22:d2:01:22:ac:3e:ff:62:33:b1:5b:53:b1:38:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Aug 9 01:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b810c70b113ac1a43c48c1876e803b920c0413d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:47:d9:50:db:c5:0d:67:a6:b3:f3:4f:40:
2c:37:33:7b:80:ba:0e:83:73:28:fa:38:0b:84:d4:
41:0a:f1:a4:38:e2:3e:47:2f:e9:17:a1:25:24:9a:
18:86:2b:80:f3:5f:e7:2c:5c:eb:6f:a9:1a:08:f2:
b6:e5:05:25:03:39:93:8c:71:f0:14:d4:4e:33:73:
37:35:f8:ed:1f:de:d6:13:e3:88:d9:14:dd:bf:5a:
32:38:e8:43:06:e4:c1:9a:b2:54:2f:af:ee:fc:b7:
d5:1e:04:44:2b:55:4c:ca:ea:d3:cc:60:c6:11:7a:
7c:8c:85:75:39:7c:3f:6f:39:6f:1d:c7:5d:6a:a9:
6d:7b:6e:dd:7b:98:13:7a:b1:0f:c8:08:9c:c3:cf:
85:c0:9b:2b:a5:58:82:9f:f4:fe:85:29:01:75:8c:
e8:55:26:26:ba:74:ce:cd:0a:88:43:37:02:a4:bd:
ab:3f:0d:e3:e2:2f:95:8f:5a:4c:5a:a4:7b:0b:31:
6a:04:36:4c:01:c3:ff:0e:ec:6a:5c:6f:f7:60:ae:
f0:b2:47:fb:e8:c9:b7:5f:dc:14:5e:ef:81:53:87:
d3:aa:21:0f:51:75:ed:d5:b7:96:5c:62:e6:31:0b:
7a:d9:6e:ee:ed:f4:d6:6b:fc:1a:8a:a1:a2:97:19:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:10:C7:0B:11:3A:C1:A4:3C:48:C1:87:6E:80:3B:92:0C:04:13:D3
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/uBDHCxE6waQ8SMGHboA7kgwEE9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:da40:1::/48
2a0e:da40:10::/44
Signature Algorithm: sha256WithRSAEncryption
08:5e:16:7b:02:d3:90:f3:51:e4:ce:b3:31:60:2b:8d:21:15:
ff:e2:e8:65:91:26:cc:21:eb:26:43:78:84:72:e8:b9:36:5e:
e7:81:70:09:bd:58:12:4e:01:cc:49:f1:75:e5:3e:8a:06:d0:
01:06:4f:10:4e:f5:af:d5:bf:01:da:a6:ff:ac:a5:b0:bd:a4:
d6:48:2c:a6:a7:cb:3a:f6:56:71:4b:d4:d2:25:e8:8b:bb:d2:
9b:02:6b:4e:77:6a:46:bd:e2:da:38:2c:c0:18:ef:13:92:5e:
e3:d7:08:0f:af:03:8c:ed:60:2b:54:a5:ba:04:da:ec:a4:5a:
41:06:30:93:23:a1:51:08:6f:8b:13:cc:8a:b7:18:50:26:e9:
e3:3c:4c:d4:ba:d3:34:eb:69:e5:58:cc:04:88:b4:96:55:db:
de:10:51:4a:76:5f:0b:c4:e0:ad:52:df:06:1a:d5:2e:98:84:
1d:82:01:fa:86:90:54:b5:7b:7c:56:ed:5a:31:ed:f7:a9:42:
bb:71:4d:47:92:10:af:93:bf:a3:5d:fd:df:3c:c1:83:af:8b:
1b:27:24:a8:1e:18:6f:9a:66:2e:dd:ef:41:ed:3a:0f:5d:d8:
ac:35:09:1d:35:57:67:22:76:d3:7b:dc:fc:3a:1d:38:ea:11:
a5:b7:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:57 2024 by rpki-client on console-fra.rpki-client.org