Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Cu4rj_VWYRv9XP_IbdqAY1oSFbI.roa
File: Cu4rj_VWYRv9XP_IbdqAY1oSFbI.roa (raw, json)
Hash identifier: yZsCaHORQcDedL/Q3To+V+OHS/ThmmmHmA7nW86WOwk=
Subject key identifier: 0A:EE:2B:8F:F5:56:61:1B:FD:5C:FF:C8:6D:DA:80:63:5A:12:15:B2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01848FEFA2E8B7D67F6CA6179AF98AE0422C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Cu4rj_VWYRv9XP_IbdqAY1oSFbI.roa
Signing time: Sat 19 Nov 2022 12:49:17 +0000
ROA not before: Sat 19 Nov 2022 12:49:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202613
IP address blocks: 2a10:cc41:100::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8f:ef:a2:e8:b7:d6:7f:6c:a6:17:9a:f9:8a:e0:42:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 19 12:49:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0aee2b8ff556611bfd5cffc86dda80635a1215b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:3e:34:e5:21:04:aa:95:10:9f:04:a8:d5:
94:55:a5:eb:80:3d:46:2d:26:26:09:bc:14:d4:92:
b4:3d:3d:44:a9:23:d9:f8:a6:c5:2d:13:79:9a:92:
de:44:95:2e:11:3c:93:c4:4a:fe:38:45:64:05:82:
2a:d1:de:53:9d:3c:08:98:6e:25:28:10:16:03:35:
33:a2:61:b8:37:d2:67:03:15:5d:79:bd:18:06:13:
3c:02:de:2b:85:99:ae:7e:2e:39:3d:7a:71:0b:c8:
10:0e:cb:31:d5:4d:2e:f9:3f:de:53:1b:b3:a3:08:
d9:40:b6:fe:bf:45:70:ff:aa:88:9e:a3:a8:42:b7:
32:df:27:2a:f9:ff:b6:25:77:f2:3a:15:eb:4d:95:
b6:58:60:f5:3e:51:6d:f4:bb:d6:96:dd:05:4f:ef:
3f:e5:d8:17:eb:6c:27:b6:16:bc:e0:8c:68:3e:94:
72:ca:23:1f:49:60:9c:8f:e9:26:e6:76:c9:fa:f9:
5a:18:c5:09:33:d9:19:0a:a8:b1:0e:50:ef:2a:a9:
b2:a4:86:ca:40:44:34:1e:60:49:fc:c5:3a:d1:4a:
e4:a0:37:59:3c:c6:5e:23:06:08:39:d9:10:a0:31:
a9:52:04:05:6b:29:70:57:35:9e:1e:8b:ef:aa:05:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:2B:8F:F5:56:61:1B:FD:5C:FF:C8:6D:DA:80:63:5A:12:15:B2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Cu4rj_VWYRv9XP_IbdqAY1oSFbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc41:100::/44
Signature Algorithm: sha256WithRSAEncryption
af:ed:19:48:c2:a5:5d:c9:f9:16:01:7e:37:e9:8f:07:35:38:
cc:41:e3:54:06:ac:01:ba:7b:e6:1a:95:33:ae:4d:38:74:fc:
43:e3:11:b5:51:1f:6d:57:0a:6e:c5:5a:fd:01:d3:c7:72:5e:
44:52:6f:4f:68:53:d0:2f:7f:dd:4b:c0:04:9b:9f:29:81:63:
1f:80:e4:e5:34:80:fc:52:b4:22:1a:ce:b9:25:fd:8a:a3:7b:
ee:98:75:4d:25:1f:80:58:b1:e0:32:f9:7e:9d:51:42:f6:d2:
f9:f2:40:dc:0d:0b:2d:64:d5:aa:69:d6:4a:cf:af:6f:c1:2f:
f5:16:da:90:1c:90:aa:a9:1b:73:0c:a8:f6:51:bd:79:26:e9:
02:28:93:8e:be:c9:35:0d:f3:56:25:24:a9:a3:b9:f5:a5:d3:
da:4f:b4:02:55:6f:ef:28:9d:08:97:82:ad:4c:fd:45:cd:ef:
50:ac:93:b9:ea:f8:b1:8e:25:7b:fc:9d:77:6b:0f:0b:4c:a0:
50:26:ed:72:8f:71:cd:70:6e:cb:dc:87:c0:a2:4f:09:04:7a:
d6:82:88:bd:28:5f:6c:a4:63:19:3c:4e:35:93:a0:51:0e:bf:
c9:03:0d:4a:34:af:d2:55:e4:d0:5d:ac:c8:76:14:49:74:72:
86:85:89:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:27 2024 by rpki-client on console-fra.rpki-client.org