Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5VmI45LWb0v_ah9fmgYQshATRzI.roa
File: 5VmI45LWb0v_ah9fmgYQshATRzI.roa (raw, json)
Hash identifier: /m6Bf+PzPXUwBsbkUDp35rtGAOV1eBwcZkK+Tuj173M=
Subject key identifier: E5:59:88:E3:92:D6:6F:4B:FF:6A:1F:5F:9A:06:10:B2:10:13:47:32
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 10948CBF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5VmI45LWb0v_ah9fmgYQshATRzI.roa
Signing time: Sat 01 Jan 2022 09:05:03 +0000
ROA not before: Sat 01 Jan 2022 09:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205635
IP address blocks: 2a10:2f00:124::/48 maxlen: 48
2a10:2f01:2b0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278170815 (0x10948cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e55988e392d66f4bff6a1f5f9a0610b210134732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:fb:14:a4:5d:b3:04:5d:d1:9d:51:bd:e0:
67:7c:d6:c2:0a:51:ff:9a:47:20:5c:05:98:34:43:
c2:f3:c9:ba:a2:36:04:1a:00:3b:6a:dd:45:6c:b3:
84:bf:eb:b1:53:5e:6c:7d:e8:80:08:74:5d:18:34:
f3:c6:5f:71:f8:95:4b:80:4c:ef:66:4e:43:c7:46:
54:19:06:f9:f1:cc:1e:8e:4e:3a:b5:6e:f0:94:e0:
c9:8c:8e:c6:fa:df:f5:1b:90:61:f5:b0:67:8e:11:
3d:57:63:31:bf:a7:fe:09:0b:80:48:fd:f2:8f:24:
26:c0:35:33:4f:b0:d0:50:ba:9b:c8:be:08:ff:93:
de:cf:07:de:5e:4d:ad:70:75:e2:71:b3:cc:14:3b:
a1:b8:c5:1b:8e:80:aa:6f:c3:45:2b:ff:4a:83:cd:
c8:1c:3b:c1:a1:08:93:1d:62:39:9c:0d:46:48:da:
32:7b:9a:e5:55:27:2e:45:9c:a0:92:80:7d:73:68:
97:46:f2:2d:17:2f:95:bf:20:92:e6:97:2f:81:36:
35:a6:75:b3:e5:8f:91:9d:1d:bf:2e:66:79:3c:00:
db:5e:8e:7b:6a:e1:b3:c5:ca:ea:21:37:7e:8c:5a:
04:29:66:76:bb:95:59:73:6e:30:83:56:72:21:16:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:59:88:E3:92:D6:6F:4B:FF:6A:1F:5F:9A:06:10:B2:10:13:47:32
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5VmI45LWb0v_ah9fmgYQshATRzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:124::/48
2a10:2f01:2b0::/44
Signature Algorithm: sha256WithRSAEncryption
96:69:3f:40:ed:c6:3b:ca:07:07:1b:ee:ec:c6:6a:1a:92:b2:
01:63:28:70:a2:2f:39:04:66:1e:58:0d:e8:8f:75:85:7c:2b:
ac:58:b4:e2:61:46:ea:75:23:f0:3f:3f:b4:28:5d:c0:af:a9:
d2:b4:55:64:e2:4b:a8:74:f6:d1:3b:6f:09:c1:63:49:6b:1f:
2c:5e:3d:f9:6a:ed:a3:01:9f:cf:0a:91:3e:14:b3:7e:e7:63:
78:42:76:9d:96:ad:91:4e:c5:cf:a0:dc:b9:95:69:05:2c:bb:
32:42:06:57:8a:3a:bf:5c:62:2e:da:e0:95:e2:90:6a:98:b2:
66:28:21:fd:ce:53:b4:fd:eb:46:0c:0a:67:b9:db:79:36:29:
0d:38:e3:63:03:99:1f:36:3d:ce:ae:f3:fc:48:7b:9c:22:0c:
d2:58:50:f8:e7:99:8e:93:1f:2a:f0:69:c6:df:c5:55:c8:bb:
6c:42:60:8d:26:76:bc:c9:41:a1:b7:63:ae:89:b0:e8:f7:e2:
ad:f6:ea:40:d0:d8:39:4f:6e:09:b6:9a:53:ec:8f:54:14:a0:
ef:ed:82:a4:c8:5c:27:4d:9a:ea:eb:7b:3e:a2:4c:6c:60:2e:
54:b1:ba:93:ec:7f:c4:2a:12:43:81:e4:4e:43:13:b3:32:8f:
b3:d0:20:c7
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEEJSMvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEw
MTA5MDUwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTU1OTg4ZTM5MmQ2
NmY0YmZmNmExZjVmOWEwNjEwYjIxMDEzNDczMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK0++xSkXbMEXdGdUb3gZ3zWwgpR/5pHIFwFmDRDwvPJuqI2
BBoAO2rdRWyzhL/rsVNebH3ogAh0XRg088ZfcfiVS4BM72ZOQ8dGVBkG+fHMHo5O
OrVu8JTgyYyOxvrf9RuQYfWwZ44RPVdjMb+n/gkLgEj98o8kJsA1M0+w0FC6m8i+
CP+T3s8H3l5NrXB14nGzzBQ7objFG46Aqm/DRSv/SoPNyBw7waEIkx1iOZwNRkja
Mnua5VUnLkWcoJKAfXNol0byLRcvlb8gkuaXL4E2NaZ1s+WPkZ0dvy5meTwA216O
e2rhs8XK6iE3foxaBClmdruVWXNuMINWciEW2O0CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTlWYjjktZvS/9qH1+aBhCyEBNHMjAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
LzVWbUk0NUxXYjB2X2FoOWZtZ1lRc2hBVFJ6SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoQLwABJAMHBCoQLwECsDANBgkq
hkiG9w0BAQsFAAOCAQEAlmk/QO3GO8oHBxvu7MZqGpKyAWMocKIvOQRmHlgN6I91
hXwrrFi04mFG6nUj8D8/tChdwK+p0rRVZOJLqHT20TtvCcFjSWsfLF49+WrtowGf
zwqRPhSzfudjeEJ2nZatkU7Fz6DcuZVpBSy7MkIGV4o6v1xiLtrgleKQapiyZigh
/c5TtP3rRgwKZ7nbeTYpDTjjYwOZHzY9zq7z/Eh7nCIM0lhQ+OeZjpMfKvBpxt/F
Vci7bEJgjSZ2vMlBobdjromw6PfirfbqQNDYOU9uCbaaU+yPVBSg7+2CpMhcJ02a
6ut7PqJMbGAuVLG6k+x/xCoSQ4HkTkMTszKPs9Agxw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:22 2024 by rpki-client on console-fra.rpki-client.org