Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DvUYGsZX_1o0MZ5-n7mmeKOmMpY.roa
File: DvUYGsZX_1o0MZ5-n7mmeKOmMpY.roa (raw, json)
Hash identifier: 4ZiDy6XuZ7CYTow/tCXB1PYEkbEjZgMrW7hQBxdRqiM=
Subject key identifier: 0E:F5:18:1A:C6:57:FF:5A:34:31:9E:7E:9F:B9:A6:78:A3:A6:32:96
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 10A4C8AA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DvUYGsZX_1o0MZ5-n7mmeKOmMpY.roa
Signing time: Sat 01 Jan 2022 09:05:11 +0000
ROA not before: Sat 01 Jan 2022 09:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210354
IP address blocks: 2a0e:97c0:690::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279234730 (0x10a4c8aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ef5181ac657ff5a34319e7e9fb9a678a3a63296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:7e:cb:e6:0b:7b:18:4d:05:27:9f:21:f9:
e2:7d:33:74:80:b6:1b:6e:ba:df:a8:85:ff:87:ff:
91:ae:6f:a9:a2:0f:f3:8c:b8:48:88:8c:3d:1b:75:
ea:c1:f1:55:c4:b9:e4:0b:0f:42:e4:74:7c:ae:90:
ce:85:69:8e:11:e0:15:88:a8:dd:91:91:33:a7:44:
6a:e7:3c:ed:26:3b:85:37:d3:05:ec:46:71:17:f5:
eb:cf:56:60:70:60:e1:cb:8b:29:57:bd:f7:14:bd:
ff:ce:ee:cb:c1:a6:9d:97:b2:1c:7e:b9:bd:9d:f0:
d4:11:54:5f:38:48:56:78:e9:fa:3a:6c:dc:3b:43:
11:14:6c:e9:ca:ea:b4:0e:39:88:72:0c:46:75:6c:
b4:bd:1d:e8:f5:85:ad:86:d9:d6:09:60:0a:25:d4:
e4:32:3c:99:40:da:7b:79:15:f8:78:b7:0e:38:76:
74:b1:81:81:48:bf:1a:bf:3c:44:5b:61:79:f1:ac:
9e:dd:07:7c:0e:0c:a2:b6:98:52:c3:cb:c2:7c:2f:
32:27:9e:27:61:1e:ba:7a:a9:75:8e:b7:a8:af:3e:
4b:70:95:c5:55:4e:e7:17:04:98:be:70:88:e0:32:
66:6d:aa:33:03:37:03:ec:40:6b:cf:60:17:b0:f8:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F5:18:1A:C6:57:FF:5A:34:31:9E:7E:9F:B9:A6:78:A3:A6:32:96
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DvUYGsZX_1o0MZ5-n7mmeKOmMpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:690::/44
Signature Algorithm: sha256WithRSAEncryption
56:7e:02:9f:0b:1b:04:fb:81:ce:7c:7c:19:8e:f2:53:6e:9a:
03:f0:b6:f5:cb:de:0c:27:f8:5d:e7:64:72:82:7a:c4:60:95:
45:96:18:93:44:81:14:d9:46:e5:7c:96:42:8e:01:fe:b7:09:
8f:36:e2:01:2d:de:34:4f:9a:cb:aa:c3:b2:01:a8:2a:a5:8d:
2a:d7:a6:ca:44:5e:99:31:e5:2f:df:e2:7a:a0:81:ad:bc:69:
7e:a4:a7:72:08:5d:f9:aa:af:99:fc:30:2f:20:65:1f:2c:b6:
38:8a:1b:4d:0d:32:df:2f:55:22:0d:4a:1b:35:00:69:c4:69:
9f:cb:2e:36:c7:3a:32:da:e9:60:c6:b5:d4:08:3a:8a:b3:43:
ac:0c:15:b2:2a:f4:49:a2:f1:ef:72:7b:ce:c4:11:80:41:6d:
25:df:21:dd:4f:99:ec:bd:48:5a:55:fa:cb:bc:86:ce:c0:12:
f0:35:e3:7e:85:0b:86:ec:93:93:d0:d9:cd:e2:91:98:6a:0f:
21:5c:73:ff:ac:ee:34:7a:1c:cd:c3:6d:3e:5e:5d:de:0c:9b:
8a:ee:bf:ba:eb:a5:85:ee:06:ca:a4:6b:02:f2:0b:90:a2:02:
01:fe:02:80:18:07:70:ec:7d:8a:dd:d1:4e:fe:08:b9:9d:62:
e3:dc:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org