Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/sKmZkFSa4XJ5YXUk-97A9x4cuOc.roa
File: sKmZkFSa4XJ5YXUk-97A9x4cuOc.roa (raw, json)
Hash identifier: jSFveRETakG75+4CwHhdzhaTdY25+0n75adlQkOwvgo=
Subject key identifier: B0:A9:99:90:54:9A:E1:72:79:61:75:24:FB:DE:C0:F7:1E:1C:B8:E7
Certificate issuer: /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial: 01852E9309738C24493D63E32868DFE0FC68
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/sKmZkFSa4XJ5YXUk-97A9x4cuOc.roa
Signing time: Tue 20 Dec 2022 08:07:46 +0000
ROA not before: Tue 20 Dec 2022 08:07:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50907
IP address blocks: 2a12:bc0:5::/48 maxlen: 48
2a12:bc0:3::/48 maxlen: 48
2a12:bc0:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:93:09:73:8c:24:49:3d:63:e3:28:68:df:e0:fc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Validity
Not Before: Dec 20 08:07:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0a99990549ae17279617524fbdec0f71e1cb8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ac:46:87:9a:ce:a5:c5:8b:96:ef:29:1b:19:
61:ed:12:9a:63:c4:03:80:1d:4a:b5:a8:3c:d6:2c:
d0:0b:2d:b6:52:07:cf:e6:ad:c8:e1:0a:17:8e:86:
3a:e6:ba:7e:08:bd:ca:2d:98:6b:84:b5:0b:90:1d:
4e:7f:8f:c4:dc:97:2c:03:fb:9e:0d:b3:c7:d9:61:
61:b9:00:d1:a4:cd:e2:c8:b0:e1:42:9f:51:cd:5f:
02:0e:43:91:63:95:b3:8d:f2:f2:31:db:1f:c8:b7:
5b:01:e7:59:a4:91:7a:71:54:bf:7c:67:08:95:c9:
13:f1:ac:b4:8f:84:5c:70:69:de:ad:35:2f:fd:98:
a3:21:a7:8f:53:e9:98:1e:1e:01:7e:76:2a:b3:5b:
02:f9:e2:77:c1:35:b9:78:65:4b:e0:40:bf:90:e3:
12:cd:43:e1:07:f7:ca:5e:0d:37:54:00:15:d2:63:
94:3f:43:83:82:75:7a:7c:02:02:4b:e2:65:dd:fa:
ee:84:0d:cd:3b:26:ac:2b:5d:94:e5:a6:29:14:81:
cb:0b:8f:38:f5:fa:8e:d0:a4:61:8a:7e:2f:50:80:
8b:8e:32:95:e2:10:99:10:b5:bb:20:ab:2e:39:ea:
79:fb:91:87:83:f6:b5:5c:2e:f7:06:c8:8d:00:0d:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A9:99:90:54:9A:E1:72:79:61:75:24:FB:DE:C0:F7:1E:1C:B8:E7
X509v3 Authority Key Identifier:
keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/sKmZkFSa4XJ5YXUk-97A9x4cuOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bc0:3::-2a12:bc0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7f:20:fd:a2:7c:df:0d:27:4d:bb:53:8a:9a:a5:1f:31:af:85:
be:be:ce:85:2e:90:82:dd:83:04:d2:09:86:15:2d:b6:af:94:
a1:a8:a3:57:aa:db:2a:ec:0a:fc:3f:57:6b:f0:f0:53:0c:9b:
dc:07:06:80:44:7d:06:74:e1:04:ff:7a:52:a8:97:02:d2:82:
75:88:c3:a3:b1:a1:5d:49:a5:7b:6b:d7:40:c8:92:44:62:01:
d4:b3:f2:d1:ab:3b:eb:31:15:d8:7a:c9:e1:40:b4:a5:9c:37:
ba:19:0c:b0:0b:29:74:c3:01:fb:1c:cd:9f:fa:e9:95:e7:d2:
4e:78:92:c5:89:67:13:7f:7d:b2:99:5f:29:7d:02:1d:d0:6b:
4f:ff:ec:38:66:e3:c2:db:78:52:a0:12:5a:a5:cb:88:d6:f3:
cc:1d:20:e2:94:9b:c3:18:e5:89:45:c6:d7:cf:5c:6d:2b:9e:
46:ce:72:4a:48:9e:6e:ee:e7:6f:a2:ff:8d:56:58:58:90:2a:
25:2e:d5:74:e0:f4:a6:06:d3:19:c3:e5:a4:08:a9:c6:61:3e:
09:e4:17:e7:e5:6f:40:0e:75:34:97:41:a7:93:26:2f:2d:cc:
54:37:ce:6c:60:e8:e3:5b:91:9a:b4:ac:23:bc:c1:03:0b:cd:
ed:cd:69:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:21 2024 by rpki-client on console-fra.rpki-client.org