Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0wrzhbfWmdSoPbPnIPRIbw3W5nc.roa
File: 0wrzhbfWmdSoPbPnIPRIbw3W5nc.roa (raw, json)
Hash identifier: 86L+2HzCEhlTNBkUa3bUDgNstol934fkPCZTr7QiusI=
Subject key identifier: D3:0A:F3:85:B7:D6:99:D4:A8:3D:B3:E7:20:F4:48:6F:0D:D6:E6:77
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 1420284F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0wrzhbfWmdSoPbPnIPRIbw3W5nc.roa
Signing time: Sun 01 May 2022 02:03:30 +0000
ROA not before: Sun 01 May 2022 02:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210761
IP address blocks: 2a0e:b107:19c7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337651791 (0x1420284f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 1 02:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d30af385b7d699d4a83db3e720f4486f0dd6e677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:3a:1c:db:5d:dd:31:e5:8d:39:d0:fc:06:
39:71:0a:1c:13:fa:05:b5:b5:66:e9:97:3b:01:1f:
e3:88:a1:8d:b4:a9:1b:1e:c8:fd:9e:11:ea:a0:69:
4d:40:f2:c5:4d:80:1a:97:32:cb:48:a3:99:08:2e:
94:29:32:37:88:d3:fd:46:62:9e:1b:04:22:44:f3:
b2:2d:d1:69:54:1e:f5:cc:79:79:ec:04:83:ef:da:
6b:25:ed:35:9d:ab:e2:50:53:96:1e:72:29:a4:d7:
db:df:d0:3e:4f:e8:e9:aa:f1:65:18:cf:62:3a:56:
f7:4a:14:72:bd:f9:71:bd:d1:61:be:79:53:c3:cd:
b1:16:9f:45:4b:d4:e7:d2:05:b4:80:d6:72:c9:78:
f7:85:d0:92:22:61:46:69:3f:00:13:e7:30:48:ea:
5e:ee:2e:5f:fa:46:98:68:c8:5c:43:8b:25:14:77:
82:6d:ae:94:fb:09:6c:bd:92:5d:5b:0b:36:71:ee:
66:35:08:9c:a1:42:2f:70:ff:c7:47:7b:37:a5:fa:
ec:fe:40:81:4b:a5:b6:6c:81:f0:e5:2a:f1:0d:00:
05:a4:d5:c5:8d:e3:01:cd:55:a8:fe:fb:9c:a8:ff:
84:92:b6:f9:bb:21:48:88:e7:35:8c:f1:23:92:8b:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0A:F3:85:B7:D6:99:D4:A8:3D:B3:E7:20:F4:48:6F:0D:D6:E6:77
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0wrzhbfWmdSoPbPnIPRIbw3W5nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19c7::/48
Signature Algorithm: sha256WithRSAEncryption
51:bb:5e:1b:96:3e:a2:e9:b7:84:9f:0e:69:4e:3e:42:2d:fe:
98:c7:e6:5f:c5:6c:3a:07:aa:04:7f:7e:f8:0f:56:47:3f:12:
90:01:6d:a0:f4:7b:6a:2e:6c:86:39:9c:fc:82:f0:ca:fd:5a:
6b:a8:da:c0:70:3e:a6:f2:74:5e:e6:72:0c:12:5c:d0:12:06:
f8:54:bb:6c:05:bd:02:c2:11:ac:3a:12:77:31:05:e6:55:99:
06:bf:8d:8a:46:5d:cd:71:d5:0d:9a:a9:be:57:74:eb:37:e1:
37:54:12:93:59:11:54:61:ab:56:b4:5e:ae:72:6c:db:a4:68:
f2:6f:50:44:21:7c:52:6d:f0:fd:ca:82:a0:27:0e:9d:5e:69:
fb:5c:fb:b2:e7:a0:7a:ad:1f:a6:da:e9:fe:2c:16:66:08:26:
ba:ff:81:ad:b1:b6:3f:bd:ca:de:d3:64:45:62:f7:dd:62:f4:
9f:be:11:b5:70:f4:f5:39:b2:28:d5:ba:35:b9:cd:c3:84:d7:
81:77:6c:c3:39:f8:b3:51:a8:4c:92:b2:35:c6:05:4d:20:11:
1e:ec:8a:c5:13:e7:04:12:08:bb:72:1e:b5:d0:fd:0f:98:c1:
e6:c0:31:38:93:39:14:b1:11:69:76:ba:87:9b:cc:a2:9d:10:
b6:12:53:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:21 2024 by rpki-client on console-fra.rpki-client.org