Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/56BGapwz5abmk1VhpX8q0dMKvMk.roa
File: 56BGapwz5abmk1VhpX8q0dMKvMk.roa (raw, json)
Hash identifier: GBkaRQX8guAfNM/+fuaYq2AtNMyPxgcYIsQ9OVOg2h0=
Subject key identifier: E7:A0:46:6A:9C:33:E5:A6:E6:93:55:61:A5:7F:2A:D1:D3:0A:BC:C9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0184F23095A53E19F7A6170ABF511F4F41A1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/56BGapwz5abmk1VhpX8q0dMKvMk.roa
Signing time: Thu 08 Dec 2022 14:43:00 +0000
ROA not before: Thu 08 Dec 2022 14:43:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204160
IP address blocks: 2a0e:97c0:b70::/44 maxlen: 48
2a0e:97c0:b70::/48 maxlen: 48
2a0e:97c0:b73::/48 maxlen: 48
2a0e:97c1:100::/44 maxlen: 48
2a0e:97c0:b71::/48 maxlen: 48
2a0e:97c0:b74::/48 maxlen: 48
2a0e:97c0:b72::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:30:95:a5:3e:19:f7:a6:17:0a:bf:51:1f:4f:41:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 8 14:43:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7a0466a9c33e5a6e6935561a57f2ad1d30abcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:66:24:e4:c7:77:2f:e7:00:01:44:13:9e:
41:da:1e:ce:3b:61:8d:3c:55:20:a8:fa:34:fd:17:
65:38:dc:bd:b6:85:4b:5b:a5:64:bc:71:af:0a:7d:
ff:00:86:8c:47:7a:0e:99:fa:9d:96:12:5d:c4:d3:
71:45:ca:ee:6a:f3:38:67:d6:dd:21:46:87:4f:27:
07:ff:5b:e4:94:7d:fb:02:28:e8:fa:a5:7b:ab:f5:
18:5b:c1:fe:19:a2:96:db:56:f4:06:34:69:2c:d5:
75:10:2a:28:a9:45:61:d9:06:21:44:70:8f:18:62:
56:2a:07:42:ab:11:1b:ae:e5:84:83:a3:b8:a9:e4:
a5:34:0c:80:cc:9f:9c:6a:04:ff:b2:f4:6b:fc:41:
5c:b4:07:66:20:20:f6:fe:c3:1c:38:56:eb:03:15:
de:4f:9f:2a:ab:ae:9f:bb:41:01:6b:df:60:e6:59:
38:5d:7c:73:cf:b9:43:7f:72:72:3f:e2:09:f7:20:
75:e5:8a:4b:00:ac:3b:ac:5c:25:7c:c9:be:2e:3c:
03:17:e8:13:d4:23:70:5b:84:c2:2e:c7:7b:a0:41:
a9:f3:11:ec:77:28:6d:64:2e:de:ff:0c:fd:50:39:
9c:45:52:2f:57:0a:d5:d4:e2:69:ef:e7:b9:8b:50:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A0:46:6A:9C:33:E5:A6:E6:93:55:61:A5:7F:2A:D1:D3:0A:BC:C9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/56BGapwz5abmk1VhpX8q0dMKvMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b70::/44
2a0e:97c1:100::/44
Signature Algorithm: sha256WithRSAEncryption
41:94:dc:bf:dd:b2:30:69:55:5f:4d:8a:c9:62:c7:23:40:26:
d9:35:33:50:1a:cc:3e:01:18:67:70:81:a6:66:66:82:e9:c0:
db:58:23:f8:d4:32:b5:4d:f8:a9:55:a5:98:42:d9:2d:e3:7d:
73:7f:b7:0f:9d:52:ed:d9:75:52:cd:77:4e:06:5d:3d:00:a3:
7e:d0:69:27:78:88:b6:ae:dc:30:af:c7:23:a8:dd:f7:b3:94:
11:63:a6:de:3a:ed:54:67:aa:c2:8b:76:4b:b8:8c:88:78:d2:
9e:08:77:f1:9f:4b:24:24:b8:3a:e0:f2:00:0c:f0:ef:56:76:
6e:50:6f:76:f3:43:71:13:84:62:de:62:72:22:c6:d8:6b:9a:
7c:9c:ef:f4:96:00:30:aa:65:a7:bd:28:63:c6:09:52:10:6a:
e6:28:01:fc:db:a3:9b:a9:80:9e:11:47:bc:94:15:57:ae:d9:
c8:7f:f1:54:28:44:3b:7b:43:77:df:1a:9f:b2:e1:c8:7a:f6:
c0:2d:c5:25:23:a2:75:78:0a:09:86:5c:f5:07:fc:a1:c9:3e:
ef:1c:e3:6c:d7:82:7f:00:cd:3b:06:af:91:1e:36:72:9b:cf:
82:cc:b8:2e:72:3a:87:62:2a:95:d1:0a:a0:c4:bb:91:ed:eb:
a3:59:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:55 2023 by rpki-client on console-ams.rpki-client.org