Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BXKvP-FSC6ZveQoW3aheudgjGGI.roa
File: BXKvP-FSC6ZveQoW3aheudgjGGI.roa (raw, json)
Hash identifier: IxTau70vpjjJaNULnYX0hIVhfw15DzjWWKLzcJDnCgc=
Subject key identifier: 05:72:AF:3F:E1:52:0B:A6:6F:79:0A:16:DD:A8:5E:B9:D8:23:18:62
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 14B4245F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BXKvP-FSC6ZveQoW3aheudgjGGI.roa
Signing time: Tue 17 May 2022 12:31:55 +0000
ROA not before: Tue 17 May 2022 12:31:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205043
IP address blocks: 2a0e:97c0:b10::/48 maxlen: 48
2a0e:97c0:b13::/48 maxlen: 48
2a0e:97c0:b11::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347350111 (0x14b4245f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 17 12:31:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0572af3fe1520ba66f790a16dda85eb9d8231862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:bb:21:0b:e5:15:11:b8:5e:9f:dc:7d:37:
2a:9e:78:95:7c:e8:08:ae:94:72:8b:8f:62:60:e3:
59:ce:1e:39:17:58:22:9d:74:e4:6f:cf:cc:c5:70:
02:e9:01:d1:76:e1:94:cb:70:ab:8c:78:8d:3f:03:
1d:f2:a9:4e:9b:a4:76:dd:92:c5:69:b1:a0:a5:8c:
25:57:a5:57:06:00:22:2e:74:10:c3:16:93:8b:29:
22:90:a9:08:dd:4f:de:84:db:7a:a9:c8:7e:81:56:
34:f8:a3:41:c3:14:a1:1a:f3:52:3b:24:17:0e:ab:
2e:10:ae:ee:7c:46:71:01:c1:cd:8e:66:bc:52:8e:
0b:1b:5e:33:94:59:c9:5e:08:ff:ce:73:02:f1:bc:
a1:bf:e1:27:a5:f2:c0:90:e2:bb:01:7c:c7:c4:54:
ab:e2:b0:58:f1:a9:ce:03:c0:5b:13:93:9b:56:9e:
8f:54:00:61:8e:a7:3d:36:d7:de:0e:1e:52:df:83:
46:cb:c2:ed:67:17:c4:24:6d:81:3d:87:9e:24:58:
a3:91:6b:f3:ec:b6:55:f8:b8:4d:98:e0:e4:6a:ca:
c6:05:14:51:5f:51:f3:9a:5a:02:e5:9e:7d:f5:fd:
53:47:30:02:94:84:b7:7b:34:91:9a:28:22:5a:2f:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:72:AF:3F:E1:52:0B:A6:6F:79:0A:16:DD:A8:5E:B9:D8:23:18:62
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BXKvP-FSC6ZveQoW3aheudgjGGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b10::/47
2a0e:97c0:b13::/48
Signature Algorithm: sha256WithRSAEncryption
46:6c:57:4f:de:fa:f2:78:25:5e:35:e6:47:5a:0a:17:ab:77:
99:a1:5e:38:81:fb:da:f7:21:32:de:2d:fe:c2:13:5a:a2:31:
4e:f1:0b:82:4b:4e:35:b9:fc:17:cf:c5:76:ef:ee:2e:76:1b:
c6:93:2b:ea:6e:9b:31:4d:79:1c:86:ee:74:e4:8a:a9:50:12:
d8:8e:e4:b9:51:1d:d1:23:98:44:54:a1:a7:1e:2e:d6:97:9e:
e2:e7:ec:4f:9a:79:6e:d7:8c:22:06:ea:a4:84:13:95:c8:2e:
b5:bb:4d:a7:80:4c:3a:51:a8:36:30:d5:fe:f9:46:6d:d8:1a:
3d:d6:9c:d6:28:e8:7b:a6:04:cf:b7:63:46:73:d3:aa:9d:ab:
27:e5:57:a3:66:81:50:40:54:cb:34:9c:f5:f4:fd:c3:91:08:
ed:0b:9e:2e:f1:e7:f3:03:9a:ef:98:b9:2d:34:3e:db:e0:bc:
82:be:56:1b:d9:a6:14:ea:86:22:ef:7f:57:e2:d8:b7:78:30:
88:c1:f6:3d:ec:a8:58:32:4c:37:a3:cf:97:3a:c0:7b:6d:91:
e9:70:d9:3c:10:e5:e7:ee:09:62:0c:22:e6:7d:37:57:cd:c7:
4b:84:24:d8:4d:ff:ef:c1:4a:83:fc:2b:9f:28:f6:27:92:54:
9f:27:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:27 2024 by rpki-client on console-fra.rpki-client.org