Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/326131323a646434373a333330303a3a2f34302d3438203d3e203531313834.roa
File: 326131323a646434373a333330303a3a2f34302d3438203d3e203531313834.roa (raw, json)
Hash identifier: ldAX67WQuyWAxaZJfx2Bwww2uVQUNxe/bf9TnHVrUUs=
Subject key identifier: F5:A1:7E:80:2E:86:0B:42:0A:E2:BD:82:05:5C:5C:7C:C5:E1:20:19
Certificate issuer: /CN=AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF
Certificate serial: 5C85BD4B751605EFDFA8479FAD5CFE81E13A7918
Authority key identifier: AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF
Authority info access: rsync://rpki.co/repo/AS945/1/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/326131323a646434373a333330303a3a2f34302d3438203d3e203531313834.roa
Signing time: Tue 16 May 2023 10:42:49 +0000
ROA not before: Tue 16 May 2023 10:37:49 +0000
ROA not after: Tue 14 May 2024 10:42:49 +0000
asID: 51184
IP address blocks: 2a12:dd47:3300::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:85:bd:4b:75:16:05:ef:df:a8:47:9f:ad:5c:fe:81:e1:3a:79:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF
Validity
Not Before: May 16 10:37:49 2023 GMT
Not After : May 14 10:42:49 2024 GMT
Subject: CN=F5A17E802E860B420AE2BD82055C5C7CC5E12019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:36:db:01:82:b4:85:f5:43:34:99:29:82:
5a:50:b2:c2:c7:0a:70:40:7a:42:bd:59:32:cd:b9:
0b:e1:8d:e9:9f:16:5d:fa:f1:4b:7f:7e:c1:50:0c:
55:e0:fc:f9:3c:b8:e3:6e:f6:c5:fd:c5:c2:3e:75:
3a:1e:31:bf:bb:ac:e3:ab:1c:06:dc:8d:cf:da:df:
fe:00:f7:c0:a4:8d:bc:01:99:bb:cf:f4:23:dd:2d:
8a:b8:50:9c:65:57:7c:f5:42:bd:68:1f:3d:b2:e5:
95:ad:80:2d:b6:56:e6:7b:70:df:54:3f:15:26:59:
ff:0c:5a:a4:4e:24:28:9c:85:51:f9:e0:b9:b4:da:
85:9f:91:eb:d2:f7:38:bd:96:ca:74:eb:43:0a:a4:
69:a0:6e:a5:67:b6:65:ba:6c:fa:7c:e4:4f:91:03:
09:27:7c:7d:ad:25:c0:f7:f2:56:1a:b2:f4:b6:60:
49:8c:05:11:7c:98:53:ea:b4:92:6e:7b:84:9a:bb:
59:52:f4:84:6f:b6:30:cb:d3:c9:d2:64:dd:5b:f2:
12:00:ba:f0:82:49:c8:c2:27:46:fc:f3:ec:fb:66:
70:c7:1c:65:04:9d:8f:9d:26:3f:24:04:a6:41:57:
b3:24:bc:6d:54:56:42:c2:62:18:2e:7e:b2:f7:8f:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A1:7E:80:2E:86:0B:42:0A:E2:BD:82:05:5C:5C:7C:C5:E1:20:19
X509v3 Authority Key Identifier:
keyid:AE:12:47:2D:A1:E0:AF:D2:B0:E9:D5:DC:6F:4E:DE:16:C4:D1:11:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/AS945/1/AE12472DA1E0AFD2B0E9D5DC6F4EDE16C4D111CF.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/2/326131323a646434373a333330303a3a2f34302d3438203d3e203531313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:3300::/40
Signature Algorithm: sha256WithRSAEncryption
a5:59:a4:fb:e4:15:db:e7:36:8b:14:45:91:e4:9b:4b:0c:e8:
77:89:e5:c5:81:6f:e5:84:39:68:d0:07:66:1b:3b:90:15:af:
3f:7b:94:3d:18:2f:71:4f:62:2b:58:70:e6:6e:5d:f6:d2:74:
a2:33:49:6c:95:b8:1c:7a:a7:3b:cd:78:dd:2e:3f:b4:c7:ed:
ff:cd:be:77:1e:b4:56:77:ce:82:79:e1:22:78:db:6e:cd:e9:
e0:43:05:34:86:fb:71:a5:57:4b:ff:35:1b:ee:8a:cc:66:37:
0d:bb:36:d2:74:e9:54:f3:63:19:b0:2c:71:cd:c7:79:0a:2b:
c0:65:3e:5c:de:cc:c2:1c:29:06:96:c6:bd:e3:64:d5:c5:b0:
62:56:40:14:9c:5f:e3:39:bd:0b:86:54:83:b8:24:fd:6f:4c:
6b:04:2b:24:b0:1c:5e:0d:8a:c5:4e:37:1c:d6:b2:64:55:55:
38:5d:a2:62:7d:1f:dc:73:55:ce:50:19:46:d3:96:55:f1:bb:
cd:e3:ba:9b:fc:7b:69:05:3f:d9:27:d3:6f:6b:05:13:20:25:
f7:3d:d6:b0:49:95:ef:cd:98:87:b5:1e:01:bb:0a:57:0e:0c:
ad:f0:08:cc:f4:50:0a:aa:69:ce:b4:df:e6:88:4c:80:5f:93:
ff:79:e0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:18 2024 by rpki-client on console-fra.rpki-client.org