Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/1-lLz4vDcJx4tnQaTfLqHnNDi890.roa
File: 1-lLz4vDcJx4tnQaTfLqHnNDi890.roa (raw, json)
Hash identifier: DEruQWtBJwKMKs6V9rcFWs12fC4YE/vwONu1X35UROY=
Subject key identifier: FA:52:F3:E2:F0:DC:27:1E:2D:9D:06:93:7C:BA:87:9C:D0:E2:F3:DD
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 01D3A6CD
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/1-lLz4vDcJx4tnQaTfLqHnNDi890.roa
Signing time: Thu 16 Jun 2022 13:40:45 +0000
ROA not before: Thu 16 Jun 2022 13:40:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51847
IP address blocks: 2a12:e100:1::/48 maxlen: 48
2a12:e100:2::/48 maxlen: 48
2a12:e100:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30648013 (0x1d3a6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Jun 16 13:40:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa52f3e2f0dc271e2d9d06937cba879cd0e2f3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:15:c4:89:e2:73:16:91:03:04:3f:b1:b0:
ce:57:1a:4b:a1:85:50:22:a7:94:25:5c:38:15:d1:
cf:a9:2a:ef:97:81:97:86:50:3c:54:48:4f:31:6d:
8b:f9:31:02:fd:4e:77:ab:3f:8b:8e:c3:33:8d:8b:
89:88:e2:83:ab:02:91:6c:98:36:08:8e:e6:4a:ed:
cc:3e:90:a1:87:fe:4e:c2:98:c1:0c:ae:a0:a8:83:
30:8a:d9:f8:7c:38:6a:41:52:7f:61:b6:c3:79:3f:
5f:62:c4:5e:7a:f4:75:69:f2:ce:52:1d:78:ce:01:
03:6d:b9:05:35:10:82:73:73:9e:7e:34:52:4d:0c:
a4:ba:78:c7:b3:3d:79:1a:d6:80:8d:d9:12:cd:2b:
cb:a5:4d:c9:d7:da:1e:b9:9e:4f:13:c5:f7:5e:93:
c4:d1:1c:1b:04:a0:f3:bc:94:01:d8:42:2f:92:82:
bb:81:12:f8:01:99:90:0d:35:59:d7:f7:2c:96:a3:
fb:74:85:a2:ca:8e:5b:b6:b7:59:8f:e2:54:98:76:
ba:45:9f:eb:10:8e:b8:9b:64:42:ca:c2:85:2d:61:
b5:38:4d:cd:4b:93:89:f8:b6:75:92:43:0f:37:29:
1b:93:3d:3b:42:4f:3c:4a:13:9b:33:e9:58:1d:07:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:52:F3:E2:F0:DC:27:1E:2D:9D:06:93:7C:BA:87:9C:D0:E2:F3:DD
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/1-lLz4vDcJx4tnQaTfLqHnNDi890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e100:1::-2a12:e100:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:03:f5:98:ae:b1:91:2c:64:42:ca:5c:29:dd:f7:a6:70:6c:
45:10:eb:d5:8d:d3:67:bc:09:d4:bd:69:e9:ba:6f:7c:ea:89:
fd:03:9a:3d:0e:89:e3:57:3f:f0:d0:12:9d:65:54:a1:46:48:
08:c7:2e:ed:67:74:e8:86:3c:9b:21:12:73:da:98:1c:99:66:
9e:1a:ab:eb:e4:f6:96:2e:8a:7b:4e:52:e1:1f:07:04:e8:3e:
d2:bb:57:88:6d:ee:73:da:65:df:21:2f:d4:65:dc:53:f3:16:
f5:16:6c:3b:9a:27:16:b4:0e:fb:c3:df:8a:e6:f5:df:97:1c:
33:ac:68:37:ed:f3:a3:b8:ff:ed:c3:02:6e:7a:ca:ab:61:27:
9d:65:a3:0d:26:ec:ad:d6:1d:ad:30:7e:0a:8c:91:73:62:14:
6c:9a:cf:0f:e5:b0:c6:bf:e6:7d:f0:b4:f5:d6:71:c5:db:c1:
ec:82:b2:2b:5b:80:80:90:00:a1:a8:e7:03:a4:b0:d7:94:b9:
a6:0e:63:b9:f2:e3:00:b7:eb:df:f8:d2:3f:d9:f1:b5:ef:4d:
a2:46:83:d0:f2:48:25:7a:9b:11:77:a6:36:f2:ff:45:2f:63:
ed:af:01:45:9c:8a:bd:56:54:12:36:ea:97:b6:7a:18:69:2c:
45:79:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:10 2024 by rpki-client on console-ams.rpki-client.org