Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DObcLvnBWLBes0R2a-wpVBSR4lU.roa
File: DObcLvnBWLBes0R2a-wpVBSR4lU.roa (raw, json)
Hash identifier: ttfI3rzBLZzIIsXHRixz0lnlFN4rBmQWYECcgcVcccg=
Subject key identifier: 0C:E6:DC:2E:F9:C1:58:B0:5E:B3:44:76:6B:EC:29:54:14:91:E2:55
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0182F7CED47DC8B2DA7E45478B09C273AA16
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DObcLvnBWLBes0R2a-wpVBSR4lU.roa
Signing time: Thu 01 Sep 2022 06:48:23 +0000
ROA not before: Thu 01 Sep 2022 06:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211405
IP address blocks: 2a0e:b107:1c10::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f7:ce:d4:7d:c8:b2:da:7e:45:47:8b:09:c2:73:aa:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 1 06:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ce6dc2ef9c158b05eb344766bec29541491e255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:f9:bd:5e:aa:ed:cc:b8:30:a5:7c:6f:87:
35:c8:17:7f:6b:b9:2b:ee:31:cd:23:3d:b8:7f:df:
da:77:15:2e:b0:ea:d3:39:89:a3:2e:80:99:c3:9b:
fa:45:ed:ba:45:71:b0:9f:5f:c4:e2:7b:bc:0e:1b:
99:e1:5f:e5:13:5b:aa:2b:08:61:b8:74:a7:0c:e4:
1f:5d:c8:55:92:e7:c9:c6:02:57:88:21:65:75:52:
15:d7:6c:79:8d:d4:27:3b:82:b0:fe:48:98:4d:21:
21:bd:38:51:45:b5:41:58:d1:49:a9:ad:53:d3:35:
f7:80:0a:4a:ae:95:7b:3b:f8:a6:43:8f:55:9e:4b:
7c:ed:d2:bf:42:6e:a4:19:78:79:be:4b:c3:9a:fa:
32:76:e7:8b:dc:19:88:73:23:32:06:b4:80:08:94:
b3:8e:c5:0c:67:14:32:18:c8:35:ca:96:91:dc:df:
7d:b9:f2:89:81:c3:1d:49:53:7a:fc:03:96:72:34:
6e:31:49:40:29:36:bf:86:01:fe:4b:8a:b5:87:38:
b4:89:4b:cc:5f:79:80:93:ef:71:57:a0:a0:b6:fc:
bb:f0:f6:6a:ae:2c:88:2b:64:d2:e2:83:7c:b3:3e:
38:aa:ff:60:a6:79:b4:33:4c:8b:7c:ea:21:68:eb:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E6:DC:2E:F9:C1:58:B0:5E:B3:44:76:6B:EC:29:54:14:91:E2:55
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DObcLvnBWLBes0R2a-wpVBSR4lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c10::/44
Signature Algorithm: sha256WithRSAEncryption
96:fc:4c:be:c7:52:a7:b8:91:c8:47:5e:f1:38:53:c1:34:2b:
ec:4d:c2:9c:e2:9b:ec:5b:9b:99:bb:74:0c:2f:95:90:ce:7e:
8c:91:f8:1e:f6:9e:a8:99:fa:17:01:6c:60:ad:ef:6b:7c:44:
0c:70:90:4a:3e:cf:0e:4b:68:2f:8f:8c:8d:c4:4d:52:c3:98:
8f:9b:2e:02:33:a1:9f:60:db:cb:a4:9d:26:f5:65:8c:ea:ad:
f8:a1:28:8e:50:dc:da:5d:0e:72:82:84:78:2c:88:3b:74:75:
f0:8b:95:cc:b9:5e:45:19:5f:ed:57:84:83:7d:a9:ff:36:ef:
c9:a4:7c:39:be:72:7b:17:82:be:11:6a:d4:11:77:4f:7a:11:
b7:6c:22:a1:12:c5:90:f2:e3:d5:2d:29:75:1c:7f:dc:39:1b:
ad:0d:96:cc:a1:42:47:15:b6:74:c5:07:a6:22:35:0f:e9:30:
17:b7:ad:6b:53:e7:74:73:3e:c9:ec:f2:38:d4:a3:e2:57:1a:
6c:b5:78:ff:95:5e:ce:0b:3a:07:04:90:69:ea:6c:d8:c1:75:
cb:32:a1:f5:c6:30:1a:2e:f7:43:8a:d5:ef:66:a0:7f:cf:67:
3a:c6:ad:a5:a0:83:fd:16:43:3f:d4:e8:50:23:94:90:ca:67:
a9:c0:f9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:27 2024 by rpki-client on console-fra.rpki-client.org