Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/X25Jh-aUFlGUjMk229YCdH15q2I.roa
File: X25Jh-aUFlGUjMk229YCdH15q2I.roa (raw, json)
Hash identifier: rGP8zWAU/7jBoDF8v7BCPzgFV8valhxDu7/36mTKXR4=
Subject key identifier: 5F:6E:49:87:E6:94:16:51:94:8C:C9:36:DB:D6:02:74:7D:79:AB:62
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 018417F559B0D95657B37232473573FA2BB3
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/X25Jh-aUFlGUjMk229YCdH15q2I.roa
Signing time: Thu 27 Oct 2022 05:41:06 +0000
ROA not before: Thu 27 Oct 2022 05:41:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:17:f5:59:b0:d9:56:57:b3:72:32:47:35:73:fa:2b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Oct 27 05:41:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f6e4987e6941651948cc936dbd602747d79ab62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d6:fd:18:0d:3d:aa:ef:c6:18:79:1a:25:db:
ba:4c:0a:5a:ec:12:8b:37:13:46:ea:4c:8f:f4:ba:
59:5b:53:19:36:ff:37:9f:e3:27:23:ce:af:cf:ef:
ae:53:18:40:a9:6c:ac:ea:bf:ea:6d:44:a5:7e:23:
63:81:bb:9e:4a:b5:ec:0a:2e:84:60:64:3c:d0:b2:
39:60:3f:63:58:dd:79:12:51:98:c6:e5:12:2c:d4:
2d:e8:00:d3:9a:e1:e9:e6:5d:bd:bd:bb:ec:08:54:
df:bf:2d:39:ad:23:c7:27:2e:ea:6f:11:e5:07:d5:
f6:59:d6:23:a2:de:6b:7d:a1:ea:54:ac:a2:cf:69:
60:9b:9e:79:92:f1:2c:79:f3:47:e0:ba:e4:7d:5d:
9d:65:75:b0:61:c3:05:97:88:bf:74:6e:14:45:6e:
16:ec:91:5e:87:59:52:e4:cd:e5:8e:30:06:ff:e0:
0e:d4:9c:3e:cc:6a:61:84:e4:2d:94:69:74:82:7c:
9b:29:92:a3:62:be:ed:17:5d:72:46:4d:bb:33:88:
4c:4c:df:90:7c:98:9d:a9:a6:0c:86:8b:aa:44:2d:
21:96:f0:57:47:4b:7c:e0:00:d1:99:59:09:6d:61:
33:02:33:36:31:fa:be:10:bd:08:09:96:96:e4:9c:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6E:49:87:E6:94:16:51:94:8C:C9:36:DB:D6:02:74:7D:79:AB:62
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/X25Jh-aUFlGUjMk229YCdH15q2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff21::/48
2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff35::-2a03:2887:ff37:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff39::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff40:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff43::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff4a::/47
Signature Algorithm: sha256WithRSAEncryption
34:73:d0:e9:b1:68:20:35:56:fa:6e:ed:7d:7f:39:4e:60:f4:
6d:cf:78:13:41:79:88:b7:82:e4:8f:a8:c9:22:ab:9a:85:69:
66:ca:da:4d:75:3e:8f:f1:34:c0:8b:c5:0e:f4:04:cf:d5:22:
f1:64:89:fc:05:be:b7:e8:15:1e:a7:e2:a8:b6:b8:d7:d0:e7:
03:dd:6a:7d:2f:2a:97:9e:10:ad:38:f8:cf:87:cc:6e:81:fc:
5c:05:57:76:1b:0f:11:38:fd:bc:65:2d:19:9d:6e:28:cc:48:
00:70:c1:c3:7e:77:90:5e:7b:26:b6:6b:bd:68:1c:2d:f6:71:
a0:fd:e6:b2:2d:11:47:e2:4e:b8:59:61:17:f3:2e:bc:dc:0e:
93:df:40:ba:3a:8c:9f:e3:83:1b:14:21:d1:3a:13:5e:6e:37:
6e:ed:93:19:f8:92:da:a8:d6:ff:80:df:95:ff:80:7d:93:3a:
ac:86:f0:95:8c:f1:b2:97:e7:60:c6:0f:54:2d:70:0b:dd:2d:
2d:0b:95:b6:e7:f1:64:69:4b:e6:c2:07:6d:75:ba:b3:5a:bb:
f8:c9:48:44:bc:da:8f:5d:2e:61:4f:72:e9:0c:53:02:b4:3f:
17:92:3a:3f:0f:47:c9:1c:68:e8:5f:c1:eb:18:9e:c6:bb:7a:
55:53:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:57 2024 by rpki-client on console-fra.rpki-client.org