Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C5ygmMeiL8aUMfd6972BDEoZczQ.roa
File: C5ygmMeiL8aUMfd6972BDEoZczQ.roa (raw, json)
Hash identifier: rOdWZI14sqb+1DX/BBzx/VC7x7fgZVzLYRoK7VJWrYI=
Subject key identifier: 0B:9C:A0:98:C7:A2:2F:C6:94:31:F7:7A:F7:BD:81:0C:4A:19:73:34
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185211BF58C079062E154229B63097C0961
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C5ygmMeiL8aUMfd6972BDEoZczQ.roa
Signing time: Sat 17 Dec 2022 17:22:38 +0000
ROA not before: Sat 17 Dec 2022 17:22:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207317
IP address blocks: 2a10:2f00:11a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:1b:f5:8c:07:90:62:e1:54:22:9b:63:09:7c:09:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 17 17:22:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b9ca098c7a22fc69431f77af7bd810c4a197334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:00:4f:bd:df:5c:7a:7e:ec:f3:46:ff:03:
3d:00:88:e2:36:27:8f:ec:10:4f:68:b4:08:83:cd:
b3:ee:be:f5:06:8d:2f:40:bd:b1:b4:b9:35:99:80:
c7:50:f3:a3:c4:2f:f8:25:4e:0e:29:5c:07:d1:de:
7f:86:1a:0a:4d:6e:ff:d4:5e:a5:f3:6b:5a:c8:e1:
c1:7c:79:07:ee:5c:e1:d1:b7:d4:8f:62:6d:86:cb:
52:21:25:9f:d2:70:98:83:57:07:86:56:b3:7d:6a:
85:25:7f:56:50:4e:14:9e:6e:1c:bb:88:63:fd:18:
2d:b9:c0:cb:f2:cd:b7:57:04:86:04:a7:64:ca:e1:
40:8c:52:66:2d:58:19:ec:4e:b7:62:83:14:09:9c:
1a:2f:23:78:b5:85:df:34:70:4c:6c:8c:31:26:02:
a9:9e:e1:35:d0:c6:87:21:7f:99:12:4f:de:0f:e7:
fc:41:d2:3c:ea:8b:5e:fc:1f:54:88:67:bb:a9:be:
17:b5:05:b5:e8:43:cc:0d:ac:9f:12:71:47:f2:64:
92:2e:51:30:45:d7:0b:1a:e0:3a:8c:2b:c0:04:d5:
19:1c:62:ef:86:0d:d6:40:a8:fb:30:50:4a:6c:1d:
8e:8c:80:a5:45:f9:d3:30:21:cd:fe:f0:36:76:c6:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9C:A0:98:C7:A2:2F:C6:94:31:F7:7A:F7:BD:81:0C:4A:19:73:34
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C5ygmMeiL8aUMfd6972BDEoZczQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:11a::/48
Signature Algorithm: sha256WithRSAEncryption
1e:06:9b:ff:19:11:a1:ce:44:ce:56:d4:17:ea:a6:c8:39:e2:
08:3d:84:12:12:a9:08:da:bf:4b:5c:09:89:f2:fa:31:3f:8a:
5f:03:3d:85:91:6a:88:0c:2c:c7:a4:1c:82:7c:82:19:2e:36:
e5:7f:37:7a:2b:07:b9:ed:1d:10:a1:10:bf:48:01:52:4d:bb:
56:75:b4:32:65:d7:82:93:11:9a:2c:d3:2c:e1:05:94:86:dd:
db:06:bc:08:b9:28:54:21:c5:66:5b:07:9e:8d:31:84:ac:48:
2a:96:55:11:ab:0a:bd:00:24:1c:d7:7e:ef:0b:12:f8:4c:5d:
72:91:f7:b8:34:f7:50:43:a6:57:67:5b:41:44:d3:07:35:1e:
eb:9e:bf:1d:3c:44:10:73:43:7f:40:cf:0d:36:88:e1:19:90:
97:f6:11:e5:5d:c2:45:59:7d:59:26:47:1d:ef:f8:8f:48:a0:
39:b0:be:54:89:09:b8:b9:58:b2:b3:7d:1d:3f:4f:5e:0f:6c:
89:f7:76:4c:e8:c6:34:32:b9:ac:e3:3d:9f:62:6e:52:e8:f9:
90:ae:a0:34:83:2e:9b:c0:0b:d5:8d:fd:6b:71:5c:49:20:7e:
ea:dd:a1:71:9c:28:ed:f4:1a:56:ac:9f:ce:b1:7b:5c:a8:79:
4e:8a:c2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:27 2024 by rpki-client on console-fra.rpki-client.org