Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/S2T5zQ8R9-p7d03zs3Ys6dtKqmU.roa
File: S2T5zQ8R9-p7d03zs3Ys6dtKqmU.roa (raw, json)
Hash identifier: hBRpkvCZtH2W1E0tkxl8IxgQBAFCZt1tlr13cciE+Ak=
Subject key identifier: 4B:64:F9:CD:0F:11:F7:EA:7B:77:4D:F3:B3:76:2C:E9:DB:4A:AA:65
Certificate issuer: /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial: 011F06B7
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/S2T5zQ8R9-p7d03zs3Ys6dtKqmU.roa
Signing time: Sat 01 Jan 2022 00:58:53 +0000
ROA not before: Sat 01 Jan 2022 00:58:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212580
IP address blocks: 2a11:e487:1::/48 maxlen: 48
2a11:e487:2::/48 maxlen: 48
2a11:e487:beef::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18810551 (0x11f06b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Validity
Not Before: Jan 1 00:58:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b64f9cd0f11f7ea7b774df3b3762ce9db4aaa65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:db:41:2e:31:8e:b5:e9:48:00:28:ce:93:
eb:77:e6:e8:b2:07:cb:65:b8:65:6d:fa:a1:06:19:
4a:61:81:fe:54:81:98:e6:8e:bb:f1:17:4a:dc:eb:
94:90:1e:2f:e8:9e:dd:56:0f:d6:8a:7b:98:b8:96:
c1:3a:00:2b:eb:6c:ea:16:ce:18:b5:61:b1:99:b0:
15:90:97:fe:fb:16:97:7e:ea:84:d8:92:1b:cb:f3:
5c:65:7b:b5:07:e8:39:08:2d:79:3e:99:62:6d:5a:
aa:6c:2e:e9:a4:37:c4:d7:db:05:1c:c5:a2:f4:3c:
32:45:7c:49:e9:f3:b5:0f:dd:60:6e:a8:65:aa:d4:
60:37:11:6e:6f:b5:74:5e:01:14:24:6a:13:05:54:
eb:73:f6:f6:33:36:30:35:2e:5c:57:10:82:88:d7:
49:2b:9d:c8:4f:74:cd:ce:30:14:1b:94:8b:8e:a2:
91:76:bb:5d:20:80:db:3e:2f:7a:d9:37:ab:95:24:
20:34:74:f3:0f:0e:cf:89:89:0f:1a:45:96:b7:b9:
4e:44:b1:aa:e2:25:b0:85:5f:a0:49:e2:b1:d8:f8:
6c:1f:06:dc:80:be:43:7c:63:e3:b9:3d:65:07:88:
f0:a5:e8:3a:68:f9:4b:7e:79:b1:95:38:67:b6:54:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:64:F9:CD:0F:11:F7:EA:7B:77:4D:F3:B3:76:2C:E9:DB:4A:AA:65
X509v3 Authority Key Identifier:
keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/S2T5zQ8R9-p7d03zs3Ys6dtKqmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e487:1::-2a11:e487:2:ffff:ffff:ffff:ffff:ffff
2a11:e487:beef::/48
Signature Algorithm: sha256WithRSAEncryption
15:06:89:9e:92:a1:40:42:ef:d7:85:7b:44:c8:a4:ce:1b:47:
cb:ba:0e:5f:1c:25:b6:57:8d:f1:a0:bd:12:1d:0c:69:03:ec:
15:f0:fe:70:a6:36:52:30:c2:82:26:e6:8b:ae:75:a0:46:39:
af:36:00:6c:49:83:1f:5a:9a:5d:fe:53:2d:27:26:16:e7:a8:
58:72:f0:52:7b:e3:14:27:f1:45:8d:36:6e:46:08:ed:19:98:
8a:d9:6e:95:c3:e8:d3:78:14:04:36:c9:b4:49:07:de:3a:2e:
ff:43:10:d1:72:33:9f:56:7b:b0:68:de:15:de:1f:ab:d4:bf:
75:3a:5a:9f:4c:70:98:7e:2a:e2:f0:37:ba:89:de:4d:cb:fb:
85:55:a0:bb:b7:d1:96:26:bc:88:55:17:9f:86:a5:c0:15:b2:
83:02:6a:03:2b:db:d4:a2:e5:86:c7:08:b0:e9:7a:15:b3:2f:
40:ef:fa:63:f2:8b:8d:68:64:0c:5f:27:ba:59:dd:c1:a6:8f:
ec:f5:13:a0:22:9a:99:94:b0:80:d9:aa:f2:b3:a8:fe:4e:55:
ee:70:84:d2:28:19:0b:40:2c:b3:ea:7c:75:56:4f:57:1a:5f:
f7:e3:66:c0:c9:9c:30:54:76:3b:f2:36:cd:a7:87:4b:90:1e:
ef:3c:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:03 2024 by rpki-client on console-ams.rpki-client.org