Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/uMzb2-tkT5_JloyK2oAZN47QPxw.roa
File: uMzb2-tkT5_JloyK2oAZN47QPxw.roa (raw, json)
Hash identifier: rJ3qBtW3BNgITblREmYVDQAjJISHS0B8IdWgyruQiec=
Subject key identifier: B8:CC:DB:DB:EB:64:4F:9F:C9:96:8C:8A:DA:80:19:37:8E:D0:3F:1C
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 19A0F961
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/uMzb2-tkT5_JloyK2oAZN47QPxw.roa
Signing time: Sat 01 Jan 2022 05:52:37 +0000
ROA not before: Sat 01 Jan 2022 05:52:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57010
IP address blocks: 2a04:ac00:4::/48 maxlen: 48
2a04:ac00:5::/48 maxlen: 48
2a04:ac00:8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429980001 (0x19a0f961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 1 05:52:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8ccdbdbeb644f9fc9968c8ada8019378ed03f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:ce:6c:42:70:bd:cc:af:09:d5:6c:e6:9c:
0a:27:a5:9d:fe:3f:ce:0e:db:94:6f:e5:8b:11:c8:
85:16:43:8d:e5:d5:10:c3:55:2d:49:95:81:2e:73:
e5:fd:84:d0:60:95:7c:09:b3:43:20:34:58:26:0b:
25:6f:9d:f9:93:b6:c5:6c:8f:85:9a:7a:81:c3:9c:
e5:ae:27:0a:08:7b:67:7a:80:f4:6a:ec:6c:17:7d:
e7:cc:12:f2:bd:2d:25:e9:5d:21:5f:5d:88:db:5b:
c9:65:27:33:af:45:cd:68:bd:fa:ea:b0:69:c0:b8:
5d:7b:a1:dd:81:22:33:a0:2d:e0:5b:37:ce:42:f4:
18:19:98:73:38:1f:c1:97:eb:54:9e:bc:72:a2:7f:
bc:51:0d:d1:8b:b2:54:70:9f:c1:c1:25:b8:5d:fd:
fd:55:d2:40:92:54:a3:ee:62:5b:d2:69:d9:19:fd:
13:6e:76:91:ad:67:35:e7:d6:f0:e6:61:b0:67:27:
84:ed:a8:68:51:db:bd:a3:aa:3b:f4:f3:34:ab:9a:
ee:c4:bf:55:5e:12:ea:64:6e:fc:9c:c2:c0:08:40:
18:00:d2:4d:47:00:65:81:5f:4f:5f:38:38:e7:1b:
d2:1c:63:38:fe:82:bb:f0:4c:10:9e:4f:c7:d5:20:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:DB:DB:EB:64:4F:9F:C9:96:8C:8A:DA:80:19:37:8E:D0:3F:1C
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/uMzb2-tkT5_JloyK2oAZN47QPxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac00:4::/47
2a04:ac00:8::/48
Signature Algorithm: sha256WithRSAEncryption
4a:ff:30:13:4f:57:f1:66:8a:cb:d5:02:b0:d0:18:0b:a0:c4:
de:e8:d1:d6:9a:34:65:7a:df:ef:ae:19:9d:81:92:cf:12:f6:
63:bb:df:a9:96:95:e3:be:1a:57:c5:0f:94:ce:a7:a0:3e:87:
f5:21:52:30:5c:9a:60:34:0f:94:ff:96:60:4b:6c:58:7a:f2:
5e:88:1c:80:68:80:90:ce:ed:b9:16:90:99:30:61:81:e0:e8:
1d:be:fa:d5:d1:40:a2:94:66:e6:ba:20:2d:98:b1:b9:72:78:
f0:4a:d3:26:a0:74:67:27:f0:e1:b0:24:02:cc:0c:8e:1c:d1:
11:2f:af:22:67:d6:19:3b:44:c1:f1:21:2c:55:41:9d:7e:8b:
90:0c:6a:e9:0d:61:4c:3e:58:cb:7f:88:ba:80:4b:44:f0:1a:
45:b6:da:0a:f4:93:94:8a:4a:bf:bc:c5:2f:0d:ec:90:35:4f:
78:33:f2:d4:d9:16:18:54:c4:40:9a:44:b7:d0:8d:23:8e:dc:
73:45:b1:ad:ee:c8:e9:7d:05:c8:42:12:cf:3f:4e:eb:c5:f0:
d3:c1:97:fe:4e:54:33:2b:8a:05:a0:9a:06:4f:0c:c7:7b:11:
3e:cd:7c:52:d0:3f:fd:a6:73:b9:69:2a:ae:7a:6b:99:7e:ae:
42:2c:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:34 2024 by rpki-client on console-ams.rpki-client.org