Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EdASgmmGPq2i3-2TxiGZ_NJakjc.roa
File: EdASgmmGPq2i3-2TxiGZ_NJakjc.roa (raw, json)
Hash identifier: hme56WC1WDU81vW8rXiGDdBMLWesO2ZQm9yBPlXzh4g=
Subject key identifier: 11:D0:12:82:69:86:3E:AD:A2:DF:ED:93:C6:21:99:FC:D2:5A:92:37
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183DBFE42CBFE64B6AC785186C17A6A9E94
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EdASgmmGPq2i3-2TxiGZ_NJakjc.roa
Signing time: Sat 15 Oct 2022 14:13:36 +0000
ROA not before: Sat 15 Oct 2022 14:13:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202256
IP address blocks: 2a0e:97c6:4000::/34 maxlen: 48
2a10:cc42:1000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:db:fe:42:cb:fe:64:b6:ac:78:51:86:c1:7a:6a:9e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 15 14:13:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11d0128269863eada2dfed93c62199fcd25a9237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:44:31:cf:f5:de:a9:b3:0f:60:24:a6:37:
54:bb:57:c2:b9:5e:87:77:b6:ca:ae:81:5b:0d:fe:
b2:95:2b:62:1b:b3:b0:0d:8d:ed:84:32:cc:fb:b6:
42:95:ab:e4:52:3f:5e:c2:ad:0a:21:51:d6:02:3d:
89:36:2a:dd:01:43:16:78:f7:c0:39:6c:2c:7e:d7:
90:7a:04:a4:9c:66:37:59:ee:03:09:3f:ce:e8:bf:
4c:4b:34:b7:19:b8:ad:96:e5:ba:fe:0f:69:0b:a6:
f1:f4:2e:c6:56:cf:9c:11:08:8a:db:e2:ab:da:b8:
ed:f4:fa:b0:bd:75:54:24:be:8d:2c:80:67:48:f3:
d3:62:fe:10:72:bc:ae:34:4d:3f:ef:59:2c:83:c8:
e6:7b:42:e2:83:fc:f5:05:58:32:98:f4:33:3e:43:
4c:44:80:a7:72:ae:41:81:a9:c5:d8:8c:42:6b:aa:
cd:fc:32:68:1f:95:8d:d5:d6:87:de:e7:50:e6:cd:
44:3c:53:44:a0:2b:09:b7:b7:5d:f3:4e:26:72:7a:
39:85:8c:dc:8f:c3:75:78:dc:5f:fb:78:cf:2d:b0:
20:12:47:59:b7:05:62:94:89:54:51:70:b6:15:dc:
92:d8:cb:3c:0a:92:5d:b6:20:2b:22:21:97:02:88:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:12:82:69:86:3E:AD:A2:DF:ED:93:C6:21:99:FC:D2:5A:92:37
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EdASgmmGPq2i3-2TxiGZ_NJakjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c6:4000::/34
2a10:cc42:1000::/36
Signature Algorithm: sha256WithRSAEncryption
0e:07:e0:c2:01:d2:46:92:12:09:40:42:d4:38:9c:d3:3f:a8:
24:8a:44:97:c8:4f:0d:bb:49:b9:c3:5b:14:97:3d:db:c6:2c:
40:32:4d:6f:c7:92:c4:63:ab:82:dd:4b:bf:90:28:21:38:fd:
51:2d:f1:4d:ab:75:f3:a2:67:13:f7:bb:12:37:ff:24:d8:d1:
fe:88:a4:79:f6:16:9c:f4:56:9c:a9:bc:6e:5a:32:ae:50:b9:
3e:6b:98:d8:f1:13:3b:ad:71:0b:19:40:c0:2e:f1:e2:81:46:
89:12:f6:66:48:87:1b:39:29:95:51:c7:1a:c5:3f:95:c9:05:
3f:eb:f6:47:d4:4b:89:fc:09:b8:48:9e:b6:7d:cf:e2:48:cd:
90:3c:96:b3:6a:c1:72:10:4d:31:40:f5:7b:da:1d:c7:e7:b7:
ea:d1:7f:cd:ce:e7:39:66:e2:90:c5:9b:b6:b4:2f:99:1b:cc:
aa:2c:c4:c3:e8:33:f1:02:97:7b:ce:21:24:5a:2c:2f:31:34:
c0:18:59:7b:b3:59:0b:8b:88:10:f4:23:07:a8:08:0c:43:8a:
58:4e:fc:98:5c:94:bc:f6:1f:3c:28:bc:f7:87:67:cc:85:ba:
75:2d:e5:6a:5e:ab:91:10:09:31:c0:0c:48:e1:44:53:cc:27:
a3:bf:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:58 2024 by rpki-client on console-ams.rpki-client.org