Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EQHYQV614_4M5mzf2MavRRuTsZ0.roa
File: EQHYQV614_4M5mzf2MavRRuTsZ0.roa (raw, json)
Hash identifier: 56StksnX99iAO2Bt9Aqc6EWqUnFUBZ8XxcNjA3U/M+I=
Subject key identifier: 11:01:D8:41:5E:B5:E3:FE:0C:E6:6C:DF:D8:C6:AF:45:1B:93:B1:9D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183A868F3E65725D43ECDD313B0447DBAAF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EQHYQV614_4M5mzf2MavRRuTsZ0.roa
Signing time: Wed 05 Oct 2022 13:49:53 +0000
ROA not before: Wed 05 Oct 2022 13:49:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213244
IP address blocks: 2a0e:b107:d91::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:68:f3:e6:57:25:d4:3e:cd:d3:13:b0:44:7d:ba:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 5 13:49:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1101d8415eb5e3fe0ce66cdfd8c6af451b93b19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:17:05:20:e8:6d:c1:ce:fd:da:ca:dd:ef:
3a:7b:6e:cb:1a:0d:2f:ce:25:08:37:43:9e:1d:a9:
cf:2c:a7:aa:9d:f6:c1:a5:3e:6a:1c:70:a5:12:fb:
3c:73:0c:b9:bb:b9:4e:d2:f3:cc:7c:a1:53:fc:4b:
95:c8:cb:0d:5d:5c:d6:11:f6:00:f0:20:a9:30:82:
59:d0:10:28:ab:a3:10:8c:63:8b:35:30:1e:99:36:
7a:3a:6e:fc:b1:60:09:81:51:08:e2:89:24:bb:29:
01:4f:69:3c:67:bb:ee:95:58:44:42:31:60:03:e5:
14:c2:df:20:69:9e:1e:e9:cf:24:8e:38:7d:eb:a1:
43:d3:f6:5f:18:8b:b2:7f:40:48:59:de:87:26:84:
c3:51:c4:f9:37:32:46:67:b2:73:6f:57:a2:d3:f2:
df:b4:f0:af:b0:d0:9e:c6:7d:55:77:74:fc:1d:5e:
86:2a:e1:9e:f4:47:c6:b1:10:83:34:d1:21:df:d4:
db:63:b7:e7:ee:ba:7f:cc:ad:83:0b:9b:fd:5b:f6:
62:83:d1:13:30:04:eb:24:74:9d:26:db:ed:2f:cb:
ac:62:77:49:0d:6b:ca:4e:9f:60:05:36:79:3c:2b:
c1:b2:66:e6:34:62:01:80:1e:fb:a5:bd:15:43:d2:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:01:D8:41:5E:B5:E3:FE:0C:E6:6C:DF:D8:C6:AF:45:1B:93:B1:9D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EQHYQV614_4M5mzf2MavRRuTsZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:d91::/48
Signature Algorithm: sha256WithRSAEncryption
7a:ed:86:76:14:eb:2d:83:f6:d8:a9:63:64:70:c2:73:d5:0e:
36:01:1f:d4:31:88:8b:f0:fe:ff:71:f7:d7:70:38:3e:a5:97:
77:13:ee:6c:40:62:e4:a3:93:02:4e:9c:08:1b:45:af:3e:eb:
73:40:24:c6:7a:c2:0a:b4:d6:45:b6:70:a1:66:88:df:c8:e3:
11:21:c5:c6:9c:a0:0d:da:66:cf:85:2b:55:68:cd:f3:e5:db:
7a:10:27:5d:17:7a:a4:c3:1a:f0:88:e0:d4:25:89:db:83:cd:
37:fb:18:1c:f1:88:09:aa:c2:81:f0:92:62:00:22:74:63:e2:
98:09:6a:c2:6d:78:7f:8e:5f:e6:82:63:69:55:32:99:42:f8:
cc:48:f9:b8:8c:b0:e3:07:22:d0:46:c7:e7:a5:6c:ec:f3:d0:
e3:eb:bb:97:63:6f:7a:8a:65:0d:1f:27:ce:62:12:c2:73:02:
65:7f:1f:e4:06:17:44:02:a9:58:64:3e:0b:07:d0:41:07:f5:
67:00:2d:4a:45:dd:23:83:be:0b:ed:40:ef:e9:a4:b3:e8:4a:
3d:5b:9c:84:19:9c:0c:bc:4c:c0:ae:f8:a0:56:d6:c9:a2:e0:
02:d8:13:70:25:0a:30:e9:67:49:81:05:f5:c6:54:71:61:5a:
8e:ae:61:0c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYOoaPPmVyXUPs3TE7BEfbqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIxMDA1MTM0OTUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTAxZDg0MTVlYjVlM2ZlMGNlNjZjZGZkOGM2YWY0NTFiOTNiMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHoXBSDobcHO/drK3e86e27LGg0v
ziUIN0OeHanPLKeqnfbBpT5qHHClEvs8cwy5u7lO0vPMfKFT/EuVyMsNXVzWEfYA
8CCpMIJZ0BAoq6MQjGOLNTAemTZ6Om78sWAJgVEI4okkuykBT2k8Z7vulVhEQjFg
A+UUwt8gaZ4e6c8kjjh966FD0/ZfGIuyf0BIWd6HJoTDUcT5NzJGZ7Jzb1ei0/Lf
tPCvsNCexn1Vd3T8HV6GKuGe9EfGsRCDNNEh39TbY7fn7rp/zK2DC5v9W/Zig9ET
MATrJHSdJtvtL8usYndJDWvKTp9gBTZ5PCvBsmbmNGIBgB77pb0VQ9Jv0wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBEB2EFeteP+DOZs39jGr0Ubk7GdMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRVFIWVFWNjE0XzRNNW16ZjJNYXZSUnVUc1owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBw2R
MA0GCSqGSIb3DQEBCwUAA4IBAQB67YZ2FOstg/bYqWNkcMJz1Q42AR/UMYiL8P7/
cffXcDg+pZd3E+5sQGLko5MCTpwIG0WvPutzQCTGesIKtNZFtnChZojfyOMRIcXG
nKAN2mbPhStVaM3z5dt6ECddF3qkwxrwiODUJYnbg803+xgc8YgJqsKB8JJiACJ0
Y+KYCWrCbXh/jl/mgmNpVTKZQvjMSPm4jLDjByLQRsfnpWzs89Dj67uXY296imUN
HyfOYhLCcwJlfx/kBhdEAqlYZD4LB9BBB/VnAC1KRd0jg74L7UDv6aSz6Eo9W5yE
GZwMvEzArvigVtbJouAC2BNwJQow6WdJgQX1xlRxYVqOrmEM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org