Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Se7cw-OPH1DCmYW3KnOBjXXfpbI.roa
File: Se7cw-OPH1DCmYW3KnOBjXXfpbI.roa (raw, json)
Hash identifier: Ad6+KXerSIjf+8V2tJDTNrVALMWbUdLGRwryb4Ryu18=
Subject key identifier: 49:EE:DC:C3:E3:8F:1F:50:C2:99:85:B7:2A:73:81:8D:75:DF:A5:B2
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 018240D038EF2D1C564233C10F0F42818932
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Se7cw-OPH1DCmYW3KnOBjXXfpbI.roa
Signing time: Wed 27 Jul 2022 17:59:24 +0000
ROA not before: Wed 27 Jul 2022 17:59:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204508
IP address blocks: 2a05:4140:300::/40 maxlen: 48
2a05:4140:21::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:40:d0:38:ef:2d:1c:56:42:33:c1:0f:0f:42:81:89:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jul 27 17:59:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49eedcc3e38f1f50c29985b72a73818d75dfa5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:6b:24:17:ec:b8:2f:dc:ea:4e:39:ae:7e:
ae:a6:2a:b5:fb:86:37:ad:a7:74:75:e4:55:2c:a7:
6f:8e:cd:6a:cd:a7:ad:2c:96:14:4a:d6:17:77:89:
99:84:de:fe:fd:31:94:b0:8d:2e:1f:90:88:2d:1c:
53:a2:e0:b8:df:d6:f0:e8:08:d7:54:9d:9a:75:cd:
c3:3e:b7:63:c0:92:b4:02:ff:07:93:20:ad:a3:14:
98:65:ab:2b:44:1a:34:23:a8:c8:bc:f6:bb:65:39:
42:2d:e2:fe:d6:5a:0d:35:07:86:76:cf:ef:1b:33:
f0:c4:87:2f:33:eb:a4:d5:2a:72:b6:86:ee:64:ae:
30:6c:4b:78:32:2a:6e:19:a6:07:ab:d4:64:06:db:
fa:dd:b9:20:45:62:6b:02:4b:3c:20:0f:a0:43:a8:
83:00:f2:9f:1c:1e:dc:36:41:c2:19:0d:bc:4c:a3:
dd:c3:a5:4d:24:11:d0:5f:b0:07:70:7f:f3:d6:79:
88:32:50:d2:5a:bd:c6:56:6e:1f:7d:e6:90:a7:b6:
83:ff:f3:88:ce:a4:3b:7a:38:71:bf:c0:4a:08:7f:
2e:03:ba:ad:c7:7c:e9:a7:8b:f4:01:1b:5b:0a:b0:
68:56:d1:6a:05:69:ea:01:6e:14:98:d1:26:da:3a:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EE:DC:C3:E3:8F:1F:50:C2:99:85:B7:2A:73:81:8D:75:DF:A5:B2
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/Se7cw-OPH1DCmYW3KnOBjXXfpbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:21::/48
2a05:4140:300::/40
Signature Algorithm: sha256WithRSAEncryption
82:1d:10:75:19:c5:75:8a:8c:3f:c9:e9:8f:04:87:ca:7b:73:
f7:98:a7:d7:13:96:2d:0c:ce:e9:d1:46:92:4a:ca:2a:9b:cc:
a2:94:14:de:a3:46:cb:50:6c:dd:03:64:46:80:85:3c:aa:1e:
59:43:e8:cd:6f:6a:aa:dd:11:d1:40:89:31:0c:80:d4:e3:58:
73:be:7c:c3:e8:ee:94:02:74:61:05:42:92:0e:02:3e:e0:03:
22:1d:03:99:74:bb:8c:2a:cf:71:81:a6:c1:93:f1:cb:95:7a:
d2:3f:c7:82:66:4f:0a:83:48:f4:a7:55:2f:a5:c8:aa:bd:c8:
54:8d:3f:7c:08:f4:dd:1f:98:7f:c1:38:79:be:04:2f:8b:3c:
cc:de:16:b8:4d:19:6b:57:2c:99:54:31:61:d8:14:c5:a8:17:
84:3c:ec:4f:e3:30:a2:68:84:09:12:1b:aa:09:53:bd:51:fc:
af:cf:8b:2e:93:2b:23:ea:3b:46:6b:c2:26:e7:10:7f:24:85:
42:4c:8e:5e:8b:7b:60:1d:82:0d:ef:35:a9:bf:df:8b:22:ce:
6b:ec:d6:a5:3a:5b:5d:a7:c1:41:b5:88:b3:30:cb:bb:9e:84:
c9:86:e5:af:78:f5:82:24:c6:81:46:7e:d1:5d:2f:23:75:29:
ae:e0:d8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:30 2024 by rpki-client on console-ams.rpki-client.org