Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/oUA3B9hMPN6k0mXyS6vXqyQo8aU.roa
File: oUA3B9hMPN6k0mXyS6vXqyQo8aU.roa (raw, json)
Hash identifier: yW8yf9Ww0IH4y8Hl45DdEHAoN4UOUDKVkEyMe88/1rg=
Subject key identifier: A1:40:37:07:D8:4C:3C:DE:A4:D2:65:F2:4B:AB:D7:AB:24:28:F1:A5
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 01839E254ED3E9A31A623E13DCE1EE983948
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/oUA3B9hMPN6k0mXyS6vXqyQo8aU.roa
Signing time: Mon 03 Oct 2022 13:59:48 +0000
ROA not before: Mon 03 Oct 2022 13:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20495
IP address blocks: 2a04:d9c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:25:4e:d3:e9:a3:1a:62:3e:13:dc:e1:ee:98:39:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Oct 3 13:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1403707d84c3cdea4d265f24babd7ab2428f1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:30:31:9d:fa:3b:b7:eb:f0:1f:ba:55:fd:d1:
db:6a:0d:8b:fd:fd:50:5b:92:a3:7c:80:f1:15:c1:
2b:68:c1:41:5e:29:98:6c:46:17:c6:30:de:90:ba:
ac:79:85:c7:09:75:6d:fc:7c:b1:9c:a6:c5:03:0f:
ff:ab:83:1e:25:17:0e:96:2f:06:8a:45:75:4a:9a:
e4:b9:df:54:d6:cb:55:5b:98:e4:42:9b:d8:08:4d:
1f:12:9d:e7:8f:1c:39:59:98:5b:7d:bb:53:c1:dd:
6d:59:79:bb:a1:3d:06:8e:51:48:2d:73:0a:63:fc:
9e:19:49:56:45:60:0a:97:a3:6e:a4:6c:ba:a0:c2:
ee:bc:4b:ff:8c:e5:95:98:31:96:bf:a6:04:f9:85:
3e:d2:cb:06:c1:f8:74:78:42:30:b4:7e:9a:d0:31:
41:ba:09:88:a7:54:12:5f:1c:ee:67:10:43:e8:ed:
52:b4:2f:bf:3f:d3:f4:a3:bd:ab:af:35:2b:4c:57:
d4:e9:0f:49:2b:0a:cc:b7:12:80:47:8a:fb:1c:f9:
ce:63:ff:15:69:12:94:bb:1d:ff:c3:81:0d:65:e5:
1e:49:8a:6b:74:49:5f:44:d3:3b:1f:18:cb:0d:62:
0e:64:f2:97:ec:30:51:00:e3:ae:15:2b:67:e9:11:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:40:37:07:D8:4C:3C:DE:A4:D2:65:F2:4B:AB:D7:AB:24:28:F1:A5
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/oUA3B9hMPN6k0mXyS6vXqyQo8aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:d9c0::/32
Signature Algorithm: sha256WithRSAEncryption
50:9d:e4:37:65:f4:26:9d:bf:12:3f:c6:e0:29:05:e0:77:a4:
ad:d8:5a:57:e0:7e:33:89:b5:7d:a5:71:53:2a:12:fe:95:3f:
8e:17:f5:0d:ae:4a:cc:81:68:4e:37:31:32:f1:17:13:4e:16:
4f:69:46:a2:74:ff:14:81:ff:82:c8:6f:a7:3d:70:27:b4:22:
07:f8:1c:0e:1d:98:18:29:a7:ab:c1:33:2b:66:07:57:db:bf:
e9:63:2d:63:b2:ec:31:3a:a6:07:9b:90:3b:cd:60:2c:6a:6a:
e1:10:36:2d:45:b7:aa:4f:8d:a4:07:f3:e5:9a:75:f3:47:10:
af:cb:a4:35:b5:8a:0a:36:45:a6:e8:0d:06:99:5a:38:2c:a6:
22:36:c2:98:5f:c0:33:14:c4:99:97:3e:31:68:e1:fa:67:b2:
6f:af:93:06:62:12:da:e7:d2:d4:27:fe:e7:ed:76:68:05:a9:
de:cc:d7:7c:f9:20:2d:9e:0f:6e:6e:64:02:ef:c5:db:df:f2:
d6:bb:cb:64:ac:b5:d9:1b:a5:17:70:06:f0:7c:2a:15:a5:94:
85:e0:a5:08:24:8c:5c:45:79:57:28:73:63:dd:66:69:f8:0a:
18:ed:89:16:07:fb:7b:14:d8:00:7c:1d:ed:de:c9:99:f7:4f:
5b:a6:88:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:18 2024 by rpki-client on console-ams.rpki-client.org