Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/11AoHcu9HHsAqwnOCK2C53RusG0.roa
File: 11AoHcu9HHsAqwnOCK2C53RusG0.roa (raw, json)
Hash identifier: CzCM9g3hfH+6BXANO3VNQKmOKL0zNdPaqQ8E62eVRhI=
Subject key identifier: D7:50:28:1D:CB:BD:1C:7B:00:AB:09:CE:08:AD:82:E7:74:6E:B0:6D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 15338976
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/11AoHcu9HHsAqwnOCK2C53RusG0.roa
Signing time: Sat 18 Jun 2022 21:25:45 +0000
ROA not before: Sat 18 Jun 2022 21:25:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a10:cc42:1000::/36 maxlen: 48
2a0e:b107:1163::/48 maxlen: 48
2a0e:b107:5d0::/44 maxlen: 48
2a0e:b107:5e0::/44 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:900::/44 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:97c0:736::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b102:12f::/48 maxlen: 48
2a0e:97c0:73f::/48 maxlen: 48
2a0e:97c0:76f::/48 maxlen: 48
2a0e:97c0:aca::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355699062 (0x15338976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 18 21:25:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d750281dcbbd1c7b00ab09ce08ad82e7746eb06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:1b:b0:8b:d3:26:14:9f:0c:2f:2c:04:ac:
01:47:cd:fb:dc:fb:7f:3d:5b:5c:6b:ff:fd:9c:64:
ae:32:9e:fd:e7:7d:24:3f:95:9e:7e:d5:7a:7f:6a:
44:69:78:27:06:73:c9:18:a5:79:19:a7:ce:9f:2d:
48:95:90:88:ac:d5:0b:d2:f4:25:97:0b:6f:66:ab:
d3:e0:33:3f:81:bf:a5:f1:cc:9d:4a:9c:4a:c5:4f:
2d:1a:ec:5c:08:65:9d:dd:3d:bd:b8:3f:3c:c6:92:
b3:a1:cb:24:f5:19:97:5c:f6:cd:0c:b1:8f:f6:c9:
a1:da:74:f8:59:b8:b6:50:71:c4:66:dc:d4:81:7b:
ed:cd:dc:e6:31:f4:8e:64:fa:d7:fd:a1:13:5f:19:
dc:49:90:cc:df:cb:a5:27:eb:f3:df:3c:59:da:c1:
0c:a5:df:89:bc:e6:79:a9:a5:b7:0a:2a:4f:e4:cc:
ab:6a:82:cd:34:87:66:42:f9:e5:01:5e:43:80:80:
9b:63:b6:f2:f0:e9:30:e0:c5:1a:a2:9b:d2:44:02:
42:e6:a7:42:4c:a8:38:fd:66:85:10:32:24:eb:c4:
bd:bf:b0:9c:86:a9:f1:d3:ce:de:11:c5:fc:e9:7f:
2d:eb:c7:24:e8:8f:ae:1b:ea:7b:d2:a6:3a:53:35:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:50:28:1D:CB:BD:1C:7B:00:AB:09:CE:08:AD:82:E7:74:6E:B0:6D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/11AoHcu9HHsAqwnOCK2C53RusG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:736::/48
2a0e:97c0:73f::/48
2a0e:97c0:750::/48
2a0e:97c0:76f::/48
2a0e:97c0:aca::/48
2a0e:b102:12f::/48
2a0e:b107:5d0::-2a0e:b107:5ef:ffff:ffff:ffff:ffff:ffff
2a0e:b107:900::/44
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1163::/48
2a0e:b107:1870::/48
2a10:cc42:1000::/36
Signature Algorithm: sha256WithRSAEncryption
72:ee:52:94:b6:da:c6:d5:4d:1c:9b:1e:ce:58:7b:3c:1f:f5:
ea:e0:75:9b:6a:2e:a2:60:3d:45:ae:3d:7b:d5:d3:de:be:ad:
26:85:27:08:58:a8:69:ea:e0:ab:31:76:79:4d:e6:23:ac:42:
7b:23:b7:0f:b7:b5:be:c6:06:b3:8b:41:83:50:ef:29:06:ab:
bd:21:d3:c1:c4:73:3c:19:d2:e5:a3:fc:dc:17:db:f9:26:2a:
37:dd:d0:6d:76:e5:83:c9:53:ea:77:4e:c1:b0:83:cb:81:ae:
84:0a:5e:e6:c6:78:f2:a8:98:55:27:37:93:5a:58:2d:2b:23:
3e:35:c3:c6:3d:1b:9d:30:22:30:3e:dd:18:99:a9:00:64:06:
18:ae:21:a4:f1:6c:f2:47:58:7d:22:a5:cc:9b:70:7b:bd:27:
92:0f:6e:2f:ce:67:1a:5f:af:a6:fe:29:d6:31:57:c0:22:98:
5a:56:f6:30:38:4a:f1:1a:a8:c6:f9:1d:e0:f5:e2:c7:ac:4e:
fb:f8:45:fb:08:c0:c0:68:3b:73:8f:ce:ed:d8:c5:12:db:90:
40:8f:f6:03:2a:d4:6d:7f:7e:60:93:a4:df:fa:75:02:2b:89:
a0:60:56:cc:f7:5d:2f:da:cb:38:58:56:49:46:b8:cf:d6:a9:
83:b4:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:52 2024 by rpki-client on console-ams.rpki-client.org