Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/RFubpc1UqwCHhT6lInhZMbf12bM.roa
File: RFubpc1UqwCHhT6lInhZMbf12bM.roa (raw, json)
Hash identifier: VVrw/6m/meB0RDE1d8LHDEAO8kyFjyQqESfsR1KNT8c=
Subject key identifier: 44:5B:9B:A5:CD:54:AB:00:87:85:3E:A5:22:78:59:31:B7:F5:D9:B3
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 08F60ADE
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/RFubpc1UqwCHhT6lInhZMbf12bM.roa
Signing time: Thu 31 Mar 2022 08:58:46 +0000
ROA not before: Thu 31 Mar 2022 08:58:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212895
IP address blocks: 2a0f:5707:abf0::/44 maxlen: 48
2a0f:5707:b000::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150342366 (0x8f60ade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Mar 31 08:58:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=445b9ba5cd54ab0087853ea522785931b7f5d9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d0:68:72:08:cf:7d:bd:7d:9c:e4:fa:2b:1f:
85:31:34:9c:a5:b0:7f:4a:04:80:3a:7e:80:40:15:
e2:da:59:98:31:06:0c:1d:c1:b1:77:e7:ac:fa:4a:
3a:b2:07:b8:87:a3:52:21:1a:80:a9:cb:20:b1:3a:
6c:b9:cb:0d:57:de:bd:27:64:81:d1:0f:4c:d4:ef:
0c:b2:35:c3:93:48:8e:d8:2d:94:38:08:61:e2:84:
81:62:c8:d7:54:de:31:65:00:aa:f5:8d:01:dd:55:
17:92:b4:03:63:91:c9:14:47:a5:da:c5:49:73:1f:
73:52:59:2b:c7:ff:66:8e:96:0b:cb:b0:65:c0:3b:
9f:8f:71:25:69:9a:4b:80:44:de:9b:1b:35:b3:57:
7f:98:08:56:3b:70:d6:d8:16:c3:c7:a4:07:f3:ea:
03:dc:1d:d2:74:48:c4:01:80:18:c1:f3:9e:b2:33:
66:1a:7b:1f:5c:73:77:3c:f2:19:9e:6e:d6:e3:0b:
c5:b4:9e:80:e7:bb:7d:ba:01:00:48:12:9d:25:3e:
47:2c:5c:ba:4a:77:29:40:7b:43:a8:9c:a3:2b:53:
e2:00:5b:d0:42:3b:65:9e:a6:8d:71:f6:7d:b7:eb:
ed:a1:33:bb:90:92:06:ca:e4:36:62:ef:2d:2d:64:
b2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5B:9B:A5:CD:54:AB:00:87:85:3E:A5:22:78:59:31:B7:F5:D9:B3
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/RFubpc1UqwCHhT6lInhZMbf12bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:abf0::/44
2a0f:5707:b000::/40
Signature Algorithm: sha256WithRSAEncryption
33:31:45:27:a7:f4:e7:7b:8d:a4:13:b0:e6:39:57:10:7d:1b:
ed:16:bb:73:22:b2:af:17:b4:2b:86:2b:31:01:55:4a:b1:c6:
f4:d5:f2:07:a2:ec:a9:02:66:a3:0e:03:10:b3:b0:c2:5d:47:
cf:a2:39:9b:ed:99:15:4e:49:36:f1:76:f0:f5:a5:a8:43:ad:
31:2e:1c:c2:18:b4:cc:c4:d9:ea:d0:29:14:1a:3c:7e:86:a1:
09:7a:7f:05:85:a6:1d:6f:99:7c:ed:81:e0:90:38:88:cf:2c:
1c:cf:e6:d2:4c:ee:2a:21:79:b9:9d:84:39:a2:be:3b:7e:a8:
28:1c:d8:6a:da:6a:0d:f4:15:46:a7:e8:7c:3e:2e:9b:89:b8:
23:c7:de:9d:a6:ab:94:03:14:05:04:0f:e6:00:54:a6:58:fe:
ca:83:ee:80:80:1a:e2:af:c4:9d:07:21:2e:de:8b:ef:50:e9:
62:73:36:85:3e:c5:8b:c4:ea:cb:a9:ab:06:e9:34:1f:f8:00:
f6:26:2e:3f:8f:6d:00:65:7c:80:58:c1:31:c9:00:81:48:8d:
0c:f4:20:2c:85:9d:99:74:a3:2a:ca:d9:06:31:70:74:59:3e:
8c:5f:29:65:17:e3:4f:37:e2:cf:30:7d:84:64:f5:9e:1a:c4:
2f:6a:6c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org