Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4bjn8eJgWOOjKdEynq19Vis_qMY.roa
File: 4bjn8eJgWOOjKdEynq19Vis_qMY.roa (raw, json)
Hash identifier: kI+o2EkzM/tMWn1xcS6SBnYF3C9JIPWoloVVcaGZ1XE=
Subject key identifier: E1:B8:E7:F1:E2:60:58:E3:A3:29:D1:32:9E:AD:7D:56:2B:3F:A8:C6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183EF6770E95551C0E7FD7CFCAE29C073B9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4bjn8eJgWOOjKdEynq19Vis_qMY.roa
Signing time: Wed 19 Oct 2022 08:41:17 +0000
ROA not before: Wed 19 Oct 2022 08:41:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202673
IP address blocks: 2a0e:97c0:c40::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:67:70:e9:55:51:c0:e7:fd:7c:fc:ae:29:c0:73:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 19 08:41:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1b8e7f1e26058e3a329d1329ead7d562b3fa8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:53:9e:fb:31:da:6a:1c:d2:00:90:ae:91:
31:93:25:be:f6:b1:58:dc:9c:a6:b1:a3:54:b0:34:
1c:57:02:29:8a:1f:3c:dd:3a:58:e7:2f:e0:02:a4:
d8:10:06:2c:c2:11:63:82:c3:5a:4c:2f:18:2e:15:
70:70:9c:31:5a:90:a4:fe:ae:f7:56:3a:d7:36:ea:
0a:b1:69:b1:41:35:1d:06:6f:aa:57:ea:68:e3:da:
fa:8c:1c:1e:a2:58:37:02:41:41:72:11:b6:d9:64:
e5:86:04:c6:19:cb:2a:fe:23:60:f7:03:0c:a6:25:
9f:16:ee:4b:86:06:26:2c:6a:ae:21:b9:98:3c:e5:
60:e9:a4:25:fa:6c:9e:65:2d:3b:ce:bd:d9:f2:f7:
ea:b0:68:e4:97:4c:5b:3b:fb:3e:17:83:6a:68:9f:
75:e9:52:6d:16:8b:56:0e:ca:de:44:ac:cd:e9:ad:
dd:bc:e2:ed:3b:be:7b:20:d2:ac:6a:c0:ee:ea:0b:
19:b8:f3:b8:e7:e9:c2:bc:3c:08:bb:9b:05:89:17:
b1:52:c4:ce:a1:44:ad:2f:5e:f5:f3:ef:22:99:7a:
53:2d:da:48:99:fd:67:55:11:3c:c6:cb:28:2f:36:
69:18:86:1f:e2:57:34:a5:ed:41:97:28:2f:1f:a0:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:E7:F1:E2:60:58:E3:A3:29:D1:32:9E:AD:7D:56:2B:3F:A8:C6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4bjn8eJgWOOjKdEynq19Vis_qMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c40::/44
Signature Algorithm: sha256WithRSAEncryption
71:2c:e3:5e:d3:30:e0:0f:bb:3b:a2:19:60:ff:d3:6e:b4:96:
5a:0b:aa:2d:4c:10:a6:70:4f:8f:ee:c6:b3:69:18:95:32:7b:
f6:a4:b9:6d:39:d8:d8:39:00:b6:55:ab:df:eb:ca:c9:8b:b9:
f0:ad:72:d8:25:10:95:f8:a0:fa:f4:e7:2b:bf:1c:08:7a:8d:
57:1b:3d:ee:ee:21:0d:02:28:cc:ee:3b:03:0b:b8:b1:48:61:
7c:1f:61:fb:d4:fe:fe:36:5f:51:80:60:2f:a1:11:b6:7e:7c:
33:0d:ac:c5:84:f6:8f:39:df:ad:82:0d:17:57:d8:8b:9b:3c:
f0:ed:67:b7:70:e1:34:09:8a:8a:38:8c:ae:68:4e:49:5f:bd:
44:bc:e8:9a:ab:b7:96:9f:0d:bd:63:2f:8b:ca:c7:69:71:ea:
d3:e1:13:11:33:8e:8f:5a:6d:89:6e:1c:bf:4e:75:6e:3e:1e:
ca:bb:51:ea:2c:7b:df:a6:20:65:ff:37:f1:09:6d:ad:c3:4a:
9f:46:75:bb:a8:9b:f3:87:ed:9c:20:e3:6e:e6:74:ce:40:ba:
50:5b:d0:5a:55:85:d2:29:91:06:3f:3f:ef:fb:c3:f8:6e:6b:
86:ee:62:4b:9e:27:f1:64:f1:1b:1e:6c:88:85:9a:26:7b:83:
aa:50:53:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:22 2024 by rpki-client on console-fra.rpki-client.org