Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/UADwxC_Z-3b0eN1TWm-mepL9qTg.roa
File: UADwxC_Z-3b0eN1TWm-mepL9qTg.roa (raw, json)
Hash identifier: MOe/Ydsl8W+X++jiNb1zDiv24LMyZgTu3l1FMolCLp4=
Subject key identifier: 50:00:F0:C4:2F:D9:FB:76:F4:78:DD:53:5A:6F:A6:7A:92:FD:A9:38
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 06A2F80C
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/UADwxC_Z-3b0eN1TWm-mepL9qTg.roa
Signing time: Sat 01 Jan 2022 13:59:32 +0000
ROA not before: Sat 01 Jan 2022 13:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34305
IP address blocks: 2001:4de0:2101::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111343628 (0x6a2f80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 13:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5000f0c42fd9fb76f478dd535a6fa67a92fda938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:3c:57:8d:87:4d:c4:53:dc:37:38:64:4c:
bc:8a:90:a8:39:52:6a:70:cc:eb:f2:ed:c2:53:c0:
26:9f:a6:27:1c:fc:5b:29:12:25:13:98:58:e2:08:
6a:62:2e:de:e9:c6:59:ba:9d:cb:e3:1b:92:16:8b:
f3:0d:f9:0e:8f:da:e2:dd:66:59:e9:f9:57:9d:69:
31:f8:57:ac:28:c0:e2:92:c1:bc:33:f1:69:04:bd:
b0:a8:46:0f:38:09:46:d5:44:67:0d:b0:7c:3e:f8:
b9:b6:be:81:40:35:0e:b2:be:cd:92:6e:81:a8:e3:
d3:37:94:3a:5f:a5:28:35:77:30:9f:65:a6:d5:50:
66:77:00:e6:4e:16:d3:96:9f:d8:b7:a2:59:87:85:
79:d0:7b:8e:a0:97:23:2a:0c:55:ce:91:c5:c0:1c:
f2:f8:31:ab:a3:01:9a:ae:da:db:97:48:67:b5:a3:
08:df:5d:1e:bf:df:36:e7:cf:b0:90:9d:9f:8e:4b:
31:29:7a:bb:31:45:6b:c4:d4:21:de:d7:d1:14:4c:
cd:3d:a6:0c:6f:12:b6:ac:5a:84:70:59:30:cd:8a:
29:d5:15:83:f1:fc:f4:8a:10:86:a5:73:ee:b2:55:
69:5e:c2:ca:29:f5:2f:db:b6:5a:6e:48:e5:ed:a4:
a5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:00:F0:C4:2F:D9:FB:76:F4:78:DD:53:5A:6F:A6:7A:92:FD:A9:38
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/UADwxC_Z-3b0eN1TWm-mepL9qTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4de0:2101::/48
Signature Algorithm: sha256WithRSAEncryption
cd:eb:d3:4b:ff:06:c6:ba:a0:ed:bf:21:53:b8:bc:ff:29:9a:
19:73:42:c9:63:29:70:62:03:ca:e0:69:fa:1d:f6:60:bb:1d:
eb:a3:80:e1:75:c3:08:0a:64:ab:e5:ad:1d:a4:85:14:35:8e:
85:af:0b:5f:39:68:bb:a2:a4:b3:cd:b9:f7:a1:15:55:da:cd:
32:94:b5:23:d0:06:4f:37:45:0c:1a:9b:ab:98:78:17:6d:71:
19:fb:cf:d0:ec:9e:7a:15:ff:8f:89:f6:eb:41:50:29:cb:d0:
70:58:e7:30:fe:9b:51:69:df:a3:67:37:d1:93:56:ff:5d:18:
5c:8a:61:16:33:43:c4:1f:1a:d9:50:b6:48:de:1f:a7:f4:11:
82:ab:87:b8:ce:0a:cb:21:ac:af:df:3b:30:83:9b:38:ab:6a:
bc:8f:c8:72:26:7d:4e:a2:91:75:3b:0d:ab:78:4b:35:f6:9f:
9b:35:2c:a4:97:36:be:33:50:35:87:79:7c:cb:71:e2:f2:8d:
59:e2:ad:6f:31:74:ce:7c:52:ad:e8:e7:e3:a6:ff:13:d0:00:
7d:9f:b4:47:90:9b:68:52:59:f9:59:7f:d6:99:a3:7e:0c:ca:
68:56:de:13:9f:b8:59:c2:4d:96:5b:85:83:b6:5e:e1:fa:e8:
51:da:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:17 2024 by rpki-client on console-ams.rpki-client.org