Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1x0dc_NGwZzgNypU0G18mkZjP4w.roa
File: 1x0dc_NGwZzgNypU0G18mkZjP4w.roa (raw, json)
Hash identifier: EAIH3KnIWJP/ow5cUXPXN80YET2mb7nWI8hrN0gp6ck=
Subject key identifier: D7:1D:1D:73:F3:46:C1:9C:E0:37:2A:54:D0:6D:7C:9A:46:63:3F:8C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 11E62977
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1x0dc_NGwZzgNypU0G18mkZjP4w.roa
Signing time: Thu 10 Feb 2022 17:32:49 +0000
ROA not before: Thu 10 Feb 2022 17:32:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:5d0::/44 maxlen: 48
2a0e:b107:5e0::/44 maxlen: 48
2a0e:b107:900::/44 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a10:cc42:1000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300296567 (0x11e62977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 10 17:32:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d71d1d73f346c19ce0372a54d06d7c9a46633f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:22:86:28:7b:b9:64:6c:54:0c:47:66:fd:
ee:25:31:1c:6a:7f:3e:28:17:78:94:3e:5b:07:44:
be:fe:ab:73:78:75:e8:2c:68:39:ae:25:6c:8e:c1:
54:46:42:18:3b:f3:49:5a:70:68:c8:93:5f:a7:1c:
4e:3f:3e:ec:c3:de:e7:e0:d4:49:f8:aa:3b:84:78:
fd:71:49:fd:fd:f0:60:ab:f8:5c:7e:62:77:a9:7a:
4a:68:9f:e7:fd:80:17:ff:15:26:d9:e3:3a:4e:57:
2f:07:fa:dc:32:0d:43:c6:19:d5:a7:41:08:1f:a7:
fa:fd:37:f2:c9:f4:3f:bf:74:e6:21:ac:28:19:1f:
46:ad:5f:af:ca:6d:22:ae:0c:5c:2f:b3:0a:ad:11:
14:48:b4:f0:2a:45:70:8a:f0:b4:29:3b:f4:65:cd:
64:87:f3:58:0e:06:af:49:35:be:0c:01:99:d5:20:
e4:a3:c9:89:a6:ee:6c:77:ff:64:4c:b0:47:d1:8d:
78:dd:fa:fd:07:bc:4e:66:91:3d:5a:22:e4:04:e9:
d6:58:66:54:ff:0c:3f:f1:d6:12:46:6c:50:c3:b8:
9c:b3:b2:8f:75:25:11:cf:ad:96:ee:6f:32:57:cf:
d2:c4:6f:95:f3:4d:03:17:cd:e0:c8:c5:cc:45:34:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1D:1D:73:F3:46:C1:9C:E0:37:2A:54:D0:6D:7C:9A:46:63:3F:8C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1x0dc_NGwZzgNypU0G18mkZjP4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:5d0::-2a0e:b107:5ef:ffff:ffff:ffff:ffff:ffff
2a0e:b107:900::/44
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a10:cc42:1000::/36
Signature Algorithm: sha256WithRSAEncryption
78:b0:dd:9f:63:b3:89:aa:e0:ac:74:f6:7e:ea:13:06:42:7f:
c2:a7:6f:e4:07:ff:22:92:69:4c:9a:b3:b4:a3:33:3b:c8:3e:
0e:b2:4e:63:cf:c5:ed:76:bd:ad:c6:ae:cf:bb:18:8e:ad:76:
24:a7:40:aa:c7:cb:81:20:c1:a4:16:a0:d9:37:74:28:e8:27:
e0:91:a9:7b:94:6f:07:f1:80:55:f8:04:49:f3:dc:82:a7:2d:
a9:18:83:e4:6c:92:1b:6b:46:25:a6:7f:ea:8c:40:6a:87:54:
c0:30:13:40:dd:41:f5:70:f7:43:2b:50:43:43:1b:16:d4:19:
39:9e:db:e9:1a:61:3b:93:78:7d:ae:1f:80:bc:54:7c:86:29:
8f:a4:80:50:41:d9:40:21:00:46:f4:c0:c8:f1:0f:43:0b:37:
e7:1a:a3:a7:33:94:c3:d7:0e:c8:89:39:5f:b8:36:58:34:7e:
76:6d:db:1f:6f:27:bf:8c:27:bf:be:35:64:41:84:eb:75:68:
79:76:d4:d3:66:d2:10:7d:56:7d:0e:8e:20:cd:84:5e:8d:6d:
c5:81:37:a3:c7:d2:5b:39:50:ca:a0:0e:13:a1:c9:e8:fb:71:
82:73:75:b4:e9:60:2c:cb:9c:06:de:0f:c9:e0:f0:fe:bd:62:
e2:26:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:21 2024 by rpki-client on console-fra.rpki-client.org