Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C5k9IPIagLb7MDrwIam-8u-JQnc.roa
File: C5k9IPIagLb7MDrwIam-8u-JQnc.roa (raw, json)
Hash identifier: 5Qh/CU8zKNOXu6ENGonHeEtmQucEMna1NxpW29AL33w=
Subject key identifier: 0B:99:3D:20:F2:1A:80:B6:FB:30:3A:F0:21:A9:BE:F2:EF:89:42:77
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018506F1E571AFC4AE4FDAEF4166868A8886
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C5k9IPIagLb7MDrwIam-8u-JQnc.roa
Signing time: Mon 12 Dec 2022 15:26:34 +0000
ROA not before: Mon 12 Dec 2022 15:26:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212164
IP address blocks: 2a0e:b107:1d20::/48 maxlen: 48
2a0e:b107:1d22::/48 maxlen: 48
2a0e:b107:1d21::/48 maxlen: 48
2a0e:b107:1d23::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:f1:e5:71:af:c4:ae:4f:da:ef:41:66:86:8a:88:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 12 15:26:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b993d20f21a80b6fb303af021a9bef2ef894277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:23:c0:44:eb:72:d7:49:a6:15:69:d2:b4:
70:2a:6f:24:c4:e6:ad:24:fc:01:b5:5f:ae:a7:e4:
58:21:80:50:60:f3:73:5a:d8:b6:b1:45:a1:43:23:
9a:80:e8:ad:76:81:97:66:01:6c:9e:cd:c4:5f:95:
7d:1c:f7:07:ac:3b:e9:fc:ef:f4:a2:a2:b3:99:28:
20:38:b4:ab:5c:e3:3b:33:c8:4d:97:a1:71:50:57:
45:97:74:bd:b8:9c:e3:73:94:b0:df:2b:a4:d3:f4:
cc:09:fb:88:24:ed:82:b5:f1:4a:1d:85:fa:9a:90:
09:2e:6d:82:89:b9:b7:68:b1:c7:ca:0d:2c:fc:b8:
df:18:ae:d5:96:7d:16:6a:5e:09:12:1c:8e:62:74:
7d:22:27:fd:95:65:6f:af:12:e6:e1:38:19:c0:94:
10:17:31:5b:aa:52:b5:4e:2c:de:5e:f2:d5:e5:fc:
cb:34:11:99:77:54:8e:c0:88:51:f3:7f:1f:10:5a:
51:bc:64:41:83:56:5b:27:eb:0b:ae:e6:85:73:c3:
82:fb:12:58:55:7a:e6:56:75:a6:90:3e:05:0b:3a:
9b:57:cf:fd:58:ad:3f:d1:70:de:28:b0:2c:ba:48:
52:c4:c5:f7:ca:e0:52:54:29:87:e8:b5:4c:1b:65:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:99:3D:20:F2:1A:80:B6:FB:30:3A:F0:21:A9:BE:F2:EF:89:42:77
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C5k9IPIagLb7MDrwIam-8u-JQnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1d20::/46
Signature Algorithm: sha256WithRSAEncryption
20:23:dc:0f:fd:cf:ca:7a:cf:13:02:6f:cf:61:dd:3c:6e:4a:
e3:b1:c6:74:ec:d4:71:43:45:29:34:b7:de:96:f6:e7:1c:98:
b2:68:1f:fe:c0:d8:eb:9d:44:bb:61:97:16:34:87:13:70:47:
78:79:b2:9b:16:8e:92:b1:39:9c:84:1c:3b:6c:09:7f:d9:70:
94:81:50:1a:99:51:e2:7d:3c:fc:67:26:94:40:a0:91:c0:cb:
01:3e:8c:37:59:2b:b0:e5:09:0e:fe:50:21:5b:16:b6:90:94:
cb:53:3c:84:67:06:3f:2c:5f:a9:6e:46:68:97:57:a0:fb:8c:
79:02:21:7f:3d:3d:f3:9f:38:54:af:95:35:bc:9c:51:33:cc:
30:0f:c8:12:f8:3c:b9:59:22:21:d7:b5:36:5a:4f:66:06:26:
05:6f:bd:bf:f5:80:cc:c8:4a:2e:86:f9:13:a5:7c:f6:3d:77:
27:01:5c:38:2c:40:05:1f:eb:f1:ad:18:c3:8f:f8:c7:06:94:
88:c1:81:7f:83:57:ef:a9:d6:9e:cd:4a:18:06:ad:de:f7:e5:
a9:fc:36:ac:46:f1:95:6a:6c:de:62:73:a1:71:38:e3:7d:1a:
d6:97:0a:a1:aa:d6:f3:c6:d9:2a:10:d0:36:c1:f2:d3:ca:c6:
ef:a3:0f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:27 2024 by rpki-client on console-fra.rpki-client.org