Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/44UxnaIQelFzoPIfhO-uhMTBQiI.roa
File: 44UxnaIQelFzoPIfhO-uhMTBQiI.roa (raw, json)
Hash identifier: qJgggvdjcaZirMi8DwbPkEYFD9d6ysm650LlqReTQEM=
Subject key identifier: E3:85:31:9D:A2:10:7A:51:73:A0:F2:1F:84:EF:AE:84:C4:C1:42:22
Certificate issuer: /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial: 0184C2451F0B8565B5777CD7309D6E70A704
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/44UxnaIQelFzoPIfhO-uhMTBQiI.roa
Signing time: Tue 29 Nov 2022 07:23:40 +0000
ROA not before: Tue 29 Nov 2022 07:23:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29156
IP address blocks: 2a01:5440::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:45:1f:0b:85:65:b5:77:7c:d7:30:9d:6e:70:a7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Validity
Not Before: Nov 29 07:23:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e385319da2107a5173a0f21f84efae84c4c14222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:a1:7d:20:15:3c:a1:db:27:72:a9:71:4e:
97:c5:6f:06:aa:0b:2c:4f:55:a3:00:f3:e3:ab:dc:
b0:8b:6d:a9:55:9c:c0:e4:4d:e5:63:36:86:5b:b1:
65:a1:93:eb:ed:8c:61:df:45:af:0e:78:76:4c:26:
54:9b:a1:58:01:34:cf:49:f1:81:51:4d:7f:dc:58:
4c:1a:e9:e7:8d:09:88:56:c7:da:04:f0:75:7b:3b:
57:d9:12:5a:d5:4d:af:69:e5:ad:ab:de:d6:d8:9c:
99:3b:da:d3:2b:c3:cd:a4:76:db:20:69:5e:fd:85:
b4:d1:62:e9:bf:31:ba:92:96:dc:b9:f1:18:99:af:
56:55:78:5a:76:b2:41:f4:b0:af:df:e3:98:71:06:
e2:f5:16:de:a3:51:8e:93:00:31:ff:74:3e:ae:ec:
8d:ec:a0:84:27:32:d1:2a:7f:63:48:ac:97:e4:87:
95:17:46:b0:a0:21:65:7b:e3:c1:b7:38:8b:11:46:
ab:f7:93:45:48:dc:da:23:68:e8:22:66:90:1e:65:
3e:77:e2:fd:81:df:84:97:c4:6f:9b:12:f7:3f:81:
50:93:96:a7:d4:e6:d5:61:df:1f:56:da:2d:c4:2d:
d7:f6:7b:84:9d:80:e6:29:25:1e:69:f3:05:53:de:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:85:31:9D:A2:10:7A:51:73:A0:F2:1F:84:EF:AE:84:C4:C1:42:22
X509v3 Authority Key Identifier:
keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/44UxnaIQelFzoPIfhO-uhMTBQiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:5440::/32
Signature Algorithm: sha256WithRSAEncryption
46:bb:f0:f5:06:02:ad:bb:b8:9d:5d:5c:03:c2:1b:b8:a4:f6:
58:20:b4:15:fe:17:77:c5:60:e6:d7:a9:c8:ae:9c:07:7e:e9:
56:04:e3:2a:7a:22:b5:36:73:56:23:c6:e8:40:17:da:a4:fc:
dd:74:1f:a6:9e:40:a1:f4:84:e2:5a:1f:64:6b:bf:c4:0a:21:
a0:f7:dd:54:57:65:ba:1e:8e:8e:93:5e:e0:fc:69:59:05:99:
8f:4c:40:52:19:97:03:67:02:fe:2b:49:38:de:1f:6a:ec:f8:
3b:ac:ad:98:4e:dc:7d:d4:4b:22:7b:cc:08:1a:2c:04:a5:1d:
a4:2b:bd:d3:18:ee:d3:65:9c:22:9b:2d:4d:36:65:85:cc:53:
70:2b:d8:96:f7:e9:ee:e1:62:24:3a:3a:20:1b:b9:c3:73:64:
b0:03:1d:35:7a:cb:8a:96:45:e2:41:19:7d:b2:c7:be:36:be:
93:ce:7a:49:fc:e2:06:69:03:1e:cb:7d:09:d7:31:1a:20:23:
a5:d9:74:2e:7f:c2:7e:44:29:68:85:2a:4b:35:d4:38:37:6a:
4b:5f:f6:57:3a:4e:c8:26:3f:8e:84:fb:9e:8f:c7:1c:4a:ea:
d7:98:36:a2:d4:a3:bc:94:a2:23:9a:34:c8:d7:c6:27:4b:69:
9e:bf:ed:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:53 2024 by rpki-client on console-ams.rpki-client.org