Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2M47hw1jBbBA1uhUQo_t_b1k1LA.roa
File: 2M47hw1jBbBA1uhUQo_t_b1k1LA.roa (raw, json)
Hash identifier: 3btX4mA1HVzd2qjDUqPVkMoAA0AxVOzHW8F85SiA6Pk=
Subject key identifier: D8:CE:3B:87:0D:63:05:B0:40:D6:E8:54:42:8F:ED:FD:BD:64:D4:B0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 15299959
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2M47hw1jBbBA1uhUQo_t_b1k1LA.roa
Signing time: Wed 15 Jun 2022 10:17:56 +0000
ROA not before: Wed 15 Jun 2022 10:17:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204750
IP address blocks: 2a0e:97c0:3d5::/48 maxlen: 48
2a0e:97c0:3d0::/48 maxlen: 48
2a0e:97c0:3d3::/48 maxlen: 48
2a0e:97c0:3d1::/48 maxlen: 48
2a0e:97c0:3d4::/48 maxlen: 48
2a0e:97c0:3d2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355047769 (0x15299959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 15 10:17:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8ce3b870d6305b040d6e854428fedfdbd64d4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:d1:92:b0:83:08:9e:0c:d3:8f:a0:a2:69:
f9:c8:e4:5a:0a:01:6a:08:18:6a:2e:04:94:58:13:
99:93:93:bc:be:6f:c9:2c:99:41:dc:2e:cf:b6:a5:
38:33:39:5a:6f:30:8b:33:09:5f:81:12:38:da:6e:
24:9d:24:61:0b:71:fe:42:01:de:e3:cc:60:a3:61:
58:de:1d:0a:01:d6:e7:66:1e:5d:12:db:68:58:c1:
ce:04:bf:62:dd:76:97:29:4c:2d:80:1b:08:07:2a:
2e:5f:2e:9b:50:b9:65:0c:3c:2c:a3:25:06:72:c8:
95:23:9d:9d:4f:91:ec:32:45:bf:87:3f:ff:3a:11:
25:a2:94:c5:5c:76:93:1d:3a:5b:8c:35:08:1f:08:
61:5f:e9:f3:a6:27:05:83:4d:8a:4a:47:18:5d:fe:
da:c9:c4:f4:3c:94:63:0d:5c:64:8d:93:ce:38:e9:
d2:a4:ff:d2:2e:f4:6f:59:a2:2f:8f:57:76:f8:c7:
01:50:43:ba:ed:b1:3f:3a:44:04:d2:45:cc:b2:a5:
b0:3d:8c:a4:7d:30:40:06:9d:09:24:08:7e:b1:9c:
e8:81:04:04:08:4e:44:68:c0:93:3d:9b:76:18:67:
14:b9:86:c9:64:8b:76:5d:71:82:d4:f7:f0:3e:83:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:3B:87:0D:63:05:B0:40:D6:E8:54:42:8F:ED:FD:BD:64:D4:B0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2M47hw1jBbBA1uhUQo_t_b1k1LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3d0::-2a0e:97c0:3d5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ca:bb:90:60:91:3a:d3:6a:8f:36:27:74:c8:67:40:6c:27:79:
92:79:1c:ef:89:c3:44:59:87:8f:1a:fa:35:cb:ec:f2:15:e2:
e0:3a:0f:ac:c3:89:5c:71:d4:7b:d3:a2:a9:e6:d5:98:cc:24:
7c:c3:ed:4e:67:36:c9:4f:05:04:45:2f:5b:c1:4e:8a:b2:16:
75:ee:eb:46:bb:0b:4b:c0:81:ff:7b:9a:29:da:39:4f:0d:37:
d8:c8:10:af:f7:80:6b:85:c8:72:b5:5a:cc:04:f5:0c:16:48:
9e:9d:ff:9a:d8:80:04:e2:19:f9:01:2f:96:45:ab:ed:1b:ad:
85:d5:ed:7b:11:40:9d:38:10:dd:ba:b6:93:5a:a8:1c:d5:b1:
7a:3b:ef:b9:1a:5e:d2:75:9a:0c:1d:3e:53:fa:ee:de:7a:31:
02:94:a4:e7:3e:70:77:1f:0b:dc:c3:7a:bc:c2:d4:bb:b3:ed:
e1:b7:5e:97:a8:59:14:c3:39:26:4e:1d:4d:50:34:03:39:0e:
14:11:bb:0a:1c:53:75:86:bc:78:a3:d7:9e:3c:37:f5:3f:b9:
7a:09:e7:8e:64:db:55:3d:fd:7e:8c:a6:29:5c:ef:7e:b6:4e:
6c:fe:fb:88:6f:22:6c:b2:b7:e2:e5:69:3b:cf:41:08:80:ae:
9a:9d:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:52 2024 by rpki-client on console-ams.rpki-client.org