Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/uSxUQ5VgGSyiYaDMA_MveQvoGco.roa
File: uSxUQ5VgGSyiYaDMA_MveQvoGco.roa (raw, json)
Hash identifier: /urhf3qo//4EYU6vWWDT5YGr6h+hQPtBJhFzOkxxono=
Subject key identifier: B9:2C:54:43:95:60:19:2C:A2:61:A0:CC:03:F3:2F:79:0B:E8:19:CA
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 37E8F31F
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/uSxUQ5VgGSyiYaDMA_MveQvoGco.roa
Signing time: Sat 01 Jan 2022 06:05:19 +0000
ROA not before: Sat 01 Jan 2022 06:05:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3096
IP address blocks: 2a02:6a0:8ffe::/48 maxlen: 48
2a02:6a0:8fff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938013471 (0x37e8f31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Jan 1 06:05:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b92c54439560192ca261a0cc03f32f790be819ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:5a:85:01:af:fa:78:c5:f2:52:3f:1c:53:
a0:d4:ed:9b:53:d3:4f:07:0b:92:67:a0:f1:bf:b9:
1a:11:23:b6:2a:30:24:b2:4b:d1:8d:ef:fd:fd:9a:
2e:2a:6d:ba:f3:88:cf:80:3f:bf:02:2e:f4:55:d1:
dd:14:d9:a6:6f:ce:8f:7e:d3:d0:6a:0a:7c:ed:82:
89:73:b8:ce:35:2b:5a:2d:03:45:0d:a7:06:d5:e2:
7a:23:93:5b:e1:93:82:7d:aa:43:66:16:4b:d7:2d:
dd:99:39:f5:75:31:20:cf:f0:59:af:d7:c2:58:af:
65:46:2a:91:c2:64:95:a1:7f:74:79:8a:25:61:9f:
a8:7d:8c:5a:f1:68:a7:9d:63:db:41:e9:90:05:5f:
c7:18:b2:4f:17:fa:ad:9b:df:ce:df:77:32:6c:67:
5f:f5:36:0d:42:af:7a:d7:80:0c:d3:f2:7b:24:1c:
8a:fb:ca:f2:2e:bf:21:5e:c6:34:3e:b5:5f:24:0d:
40:0e:20:98:a4:ec:2e:8c:82:6f:f4:41:4d:45:17:
7d:dc:26:ab:d0:98:eb:c0:6c:c6:01:a3:bc:75:61:
97:7f:4a:9c:c2:31:9d:b8:f8:a8:b3:06:1b:b5:40:
c4:51:b9:34:57:77:ec:3c:11:f1:c7:f4:d4:aa:2a:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2C:54:43:95:60:19:2C:A2:61:A0:CC:03:F3:2F:79:0B:E8:19:CA
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/uSxUQ5VgGSyiYaDMA_MveQvoGco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6a0:8ffe::/47
Signature Algorithm: sha256WithRSAEncryption
47:b1:26:d0:eb:8b:61:02:f2:ca:e8:b6:bf:aa:d4:7e:c2:2a:
57:e6:c5:b5:8b:7d:14:cf:9b:3d:95:99:65:3f:67:a8:21:65:
f9:08:2e:a6:87:92:ce:f4:c2:b0:55:01:4f:92:9d:8a:c3:1b:
cb:8d:77:fa:7f:f3:b3:49:f0:2e:60:9a:d2:54:46:30:56:39:
e8:3a:be:14:31:6e:ac:cf:72:73:83:e0:5b:3f:be:3b:15:3c:
b1:e2:2f:81:a2:d5:14:a5:52:33:bf:4c:6d:b8:c6:e1:83:bd:
6d:ba:32:19:08:88:ea:6b:9a:1d:3d:b9:7a:37:80:f8:0b:34:
00:dc:72:74:6c:30:cd:67:21:c4:62:e3:4c:90:73:52:d5:98:
d8:50:5b:f5:27:76:ba:50:36:57:2e:d2:e5:2f:9b:9b:bd:64:
31:69:1b:2f:94:b7:d8:dc:51:2e:f1:03:8f:d7:37:77:07:b2:
95:34:3d:ba:56:45:2a:dd:97:d9:93:89:1f:99:41:43:af:70:
41:50:c3:4d:6d:1b:c1:c1:9b:25:cb:1c:95:43:0d:a1:aa:89:
25:f7:f3:ed:a6:a5:43:fd:50:41:ff:8a:b6:90:13:5c:e0:88:
cd:20:46:91:a4:f1:41:32:46:cf:40:72:9d:a6:ee:ee:24:bc:
dc:92:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:33 2024 by rpki-client on console-ams.rpki-client.org