Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/UvX_cZ2b8xl2c3xAMgu6fW0f_MU.roa
File: UvX_cZ2b8xl2c3xAMgu6fW0f_MU.roa (raw, json)
Hash identifier: joMfbuErUBA9VK4r1U5n2yoWRxxziE7m79/oYChRgkU=
Subject key identifier: 52:F5:FF:71:9D:9B:F3:19:76:73:7C:40:32:0B:BA:7D:6D:1F:FC:C5
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 08037AFF
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/UvX_cZ2b8xl2c3xAMgu6fW0f_MU.roa
Signing time: Sat 01 Jan 2022 06:55:47 +0000
ROA not before: Sat 01 Jan 2022 06:55:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 131668
IP address blocks: 2a0f:5707:ffa4::/46 maxlen: 48
2a0f:5707:fff2::/48 maxlen: 48
2a0f:5707:ffa0::/46 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134445823 (0x8037aff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 06:55:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52f5ff719d9bf31976737c40320bba7d6d1ffcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:74:d8:40:d8:4f:35:6e:91:81:a3:16:4a:
c0:81:50:73:13:c4:98:76:b5:38:47:4c:14:63:49:
67:ce:c3:c0:4c:f8:13:31:6f:c3:f5:7e:c4:f3:44:
73:60:91:4c:c7:77:52:82:e9:37:6b:56:30:94:cb:
90:8a:e6:5c:93:35:7c:a2:ef:be:51:bd:5a:b0:cb:
d4:4b:de:d3:8c:a1:57:59:31:fb:97:39:3f:99:cd:
29:6e:c0:71:f8:3b:0f:08:7a:00:ee:55:e9:34:50:
46:04:b7:70:3b:45:21:2b:37:55:90:7f:3b:ba:b0:
da:cc:2c:1d:34:9d:a7:9e:f6:fd:2b:7c:97:52:39:
1f:61:13:68:a0:d3:f9:2f:04:b7:dc:1a:9e:ce:e6:
fb:c1:fc:c8:fb:8a:66:fb:15:e6:f1:50:2a:d3:f7:
7e:57:c2:08:5e:c2:87:30:9c:1a:8e:16:cd:2b:eb:
a0:f0:0b:97:46:33:7d:fd:25:34:c3:5c:a9:4a:aa:
66:19:ab:b8:ee:cd:cd:67:eb:8a:7e:07:50:00:95:
02:60:8c:9d:d1:bb:6d:8f:5c:78:89:d4:2a:6e:3c:
17:08:a2:6f:95:5e:d8:b6:f0:8f:23:ca:5a:87:a2:
93:68:3e:df:4a:5f:73:96:43:05:51:0b:68:51:6c:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:FF:71:9D:9B:F3:19:76:73:7C:40:32:0B:BA:7D:6D:1F:FC:C5
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/UvX_cZ2b8xl2c3xAMgu6fW0f_MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ffa0::/45
2a0f:5707:fff2::/48
Signature Algorithm: sha256WithRSAEncryption
73:c5:a5:b0:c2:b1:60:61:89:7e:b6:f3:1e:ab:6b:f0:8e:b2:
f6:1c:f7:7b:b6:b3:58:3d:1e:d5:c8:e5:59:48:ce:13:9c:52:
1a:25:cc:f8:09:5f:68:03:f7:c0:59:f7:8c:f9:76:d3:cd:86:
9e:dd:58:63:92:b9:bc:b4:4c:ab:9c:bb:80:83:55:a3:b3:83:
bd:5c:ca:4c:93:14:a1:fc:78:4f:05:3f:d1:fc:57:f1:97:61:
30:a3:c1:47:35:e1:0d:5a:95:73:be:4c:dd:ce:1d:28:21:db:
c1:60:f0:96:93:d7:63:ac:94:8c:79:0a:08:ee:10:c9:46:6f:
e0:38:61:28:6b:fa:71:f5:0b:91:76:63:fb:05:08:59:c8:42:
27:49:b0:0e:71:05:53:ee:1f:f2:6c:1f:c5:b1:81:09:ba:a0:
6a:d3:bb:0f:2f:2c:54:93:92:2e:5b:b6:bc:56:ad:b7:ea:a1:
eb:3d:4b:6e:98:1e:2f:9d:bf:44:0b:5d:62:39:94:85:8d:42:
42:10:9c:d3:ec:ef:d7:1c:e5:e3:83:05:6e:96:cf:ab:84:cc:
33:bb:6e:1b:e5:2f:55:c4:09:58:fa:94:eb:95:56:91:75:c6:
90:63:d8:65:0d:c3:1c:71:5b:2c:5e:06:b5:07:81:2b:9d:66:
82:fe:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org