Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-cbv9O6z9jn9vALRjM9Xqf1d-GI.roa
File: 1-cbv9O6z9jn9vALRjM9Xqf1d-GI.roa (raw, json)
Hash identifier: fVJlPPnTLNCj6Q5/WghkwtA/m+gPkmapeHONhPT+kHE=
Subject key identifier: F9:C6:EF:F4:EE:B3:F6:39:FD:BC:02:D1:8C:CF:57:A9:FD:5D:F8:62
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 10D49C6D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-cbv9O6z9jn9vALRjM9Xqf1d-GI.roa
Signing time: Sat 01 Jan 2022 09:05:40 +0000
ROA not before: Sat 01 Jan 2022 09:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211977
IP address blocks: 2a0e:97c0:120::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282369133 (0x10d49c6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9c6eff4eeb3f639fdbc02d18ccf57a9fd5df862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:f4:df:d3:a3:42:62:ec:12:61:ba:68:ff:
79:07:cc:7a:5c:35:2b:d0:df:0a:99:56:ec:80:71:
c3:50:91:89:89:b1:c1:c2:5c:8c:94:6a:61:97:e2:
63:a0:07:aa:98:b0:ea:5f:e3:0e:b2:52:2c:34:8e:
4d:1e:4e:d7:38:39:f1:44:fa:da:56:28:66:70:cb:
ec:c4:30:39:e7:17:b7:a0:bd:27:84:1d:fe:d0:ef:
0b:9e:0f:9a:57:e6:75:15:49:cc:2e:1a:ab:56:1d:
cc:fa:fc:81:81:9a:bb:70:96:b1:ee:e4:54:01:dc:
aa:4b:0c:f0:fd:10:cc:bb:1f:c1:06:8b:38:07:7e:
35:af:a8:4e:0d:63:af:77:fc:65:ef:ec:32:7c:0b:
cc:ec:74:0e:60:dd:0c:60:40:31:08:03:96:c6:e1:
62:f5:e0:75:7c:36:9f:06:a9:d2:12:0f:d1:ec:4a:
54:26:80:9c:de:88:12:d5:b8:7d:50:ad:c3:2a:89:
eb:12:a0:df:0e:9e:2a:a9:b8:49:64:f7:03:21:ae:
6b:4c:93:58:0d:b6:b9:fa:73:29:86:6c:08:81:a3:
c6:2d:cd:1d:6b:b4:e6:39:ca:e3:87:1a:c6:ef:8c:
6e:74:10:57:80:a4:3a:25:98:f3:34:a8:be:b3:55:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C6:EF:F4:EE:B3:F6:39:FD:BC:02:D1:8C:CF:57:A9:FD:5D:F8:62
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-cbv9O6z9jn9vALRjM9Xqf1d-GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:120::/44
Signature Algorithm: sha256WithRSAEncryption
24:a1:1c:14:0c:a1:f7:b8:f8:85:5e:5e:65:d1:95:46:25:06:
91:c6:1a:1d:7d:c9:94:d3:a3:db:d2:1f:7e:bb:e3:30:5b:fb:
33:dd:64:47:0c:2b:39:34:d4:a3:58:92:c8:c1:74:92:99:88:
28:38:12:4f:3b:c7:f1:a7:02:e4:f4:b7:77:34:52:a3:d0:f7:
92:10:07:be:87:54:b8:b5:6f:87:e4:2b:13:07:45:e3:77:de:
ba:19:75:ef:e2:c0:8e:8a:c4:4e:84:47:17:19:19:bf:94:9b:
86:78:d7:8f:88:13:c1:3b:0f:ea:98:21:4e:2c:17:67:bf:4f:
e5:4e:94:b2:29:4c:68:75:e2:dd:3b:48:08:1e:a8:2a:fe:1b:
ba:87:69:a6:a8:23:a3:87:63:77:40:9f:57:ad:30:35:5e:2e:
65:85:b8:96:dc:83:54:2d:c8:91:8e:6a:06:9a:8c:8d:35:42:
29:5e:0b:4d:9c:70:df:61:31:aa:16:35:11:38:cd:34:f0:e3:
67:a0:00:68:6c:20:9c:a8:1c:d1:49:d3:96:8a:3d:25:60:e8:
78:bc:cc:e4:cb:62:e4:f4:57:65:4b:d9:cb:c5:ae:fd:8e:5c:
fb:8b:70:02:19:49:82:8a:f9:f2:27:1f:d8:55:e9:e3:ad:99:
74:ae:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:21 2024 by rpki-client on console-fra.rpki-client.org