Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F1uwN4COGuH6O6M-PtuRIfJKp0A.roa
File: F1uwN4COGuH6O6M-PtuRIfJKp0A.roa (raw, json)
Hash identifier: 40jJhjR0LdJ5gWngtHG4Vslb/u2kgJ7YYEzvfJYpIjE=
Subject key identifier: 17:5B:B0:37:80:8E:1A:E1:FA:3B:A3:3E:3E:DB:91:21:F2:4A:A7:40
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01844736E51400702639F287F3B201DA399C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F1uwN4COGuH6O6M-PtuRIfJKp0A.roa
Signing time: Sat 05 Nov 2022 09:54:50 +0000
ROA not before: Sat 05 Nov 2022 09:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203458
IP address blocks: 2a0e:b107:1c80::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:47:36:e5:14:00:70:26:39:f2:87:f3:b2:01:da:39:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 5 09:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=175bb037808e1ae1fa3ba33e3edb9121f24aa740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:bc:40:29:ea:0d:a4:17:47:82:e1:c8:38:
ab:48:c7:a8:fe:db:d1:4f:40:f4:f7:6e:27:e8:d7:
2f:45:51:39:f6:02:38:11:d8:2d:64:ed:b6:2d:93:
51:84:dc:d0:eb:41:82:69:73:61:48:6f:21:4f:f4:
08:79:d7:ff:85:25:04:4c:4b:9b:98:02:36:32:d3:
77:9a:0c:a8:e2:12:0b:5d:10:87:33:7d:df:05:f5:
b4:cd:21:e1:7a:84:c2:1b:67:e3:9f:d5:fa:ba:d3:
d9:3f:42:73:2e:03:8c:6b:ec:01:70:77:5c:c7:21:
eb:49:e5:10:2b:a7:6a:e4:d5:5c:bd:c1:73:66:ca:
ce:00:9d:27:4d:ec:74:51:8d:ee:96:c0:c7:fc:5f:
c3:01:85:46:5b:43:b7:47:ee:82:a0:d8:27:e4:30:
8a:5c:da:cd:f8:5b:7c:68:08:8b:8f:5b:7e:00:3a:
b9:ba:9d:eb:b4:b2:ac:0f:9e:7d:bf:63:64:df:68:
1a:69:0e:1a:53:5c:c1:ed:04:6b:2c:fc:b3:b7:25:
f3:85:37:be:24:60:0b:78:d4:3b:d2:b4:2b:09:5f:
70:5a:ff:6c:d4:c9:dd:1d:3b:ae:e4:1a:ee:5d:d7:
0e:53:85:4e:ad:44:5e:a6:eb:8f:80:ff:16:82:90:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5B:B0:37:80:8E:1A:E1:FA:3B:A3:3E:3E:DB:91:21:F2:4A:A7:40
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/F1uwN4COGuH6O6M-PtuRIfJKp0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c80::/44
Signature Algorithm: sha256WithRSAEncryption
89:a1:eb:7c:0d:b6:97:5b:ea:9b:d1:f2:9d:3c:19:0c:df:45:
b6:32:5d:1f:1f:d1:9c:67:fd:13:a9:10:a2:39:8a:07:34:cd:
11:a0:50:fd:9e:e5:f0:a0:f4:20:bc:60:6e:69:a2:4d:b4:d6:
47:48:05:c1:4d:bc:09:6f:5b:d3:f3:56:d6:1d:1e:fd:97:8a:
6e:c9:e2:5b:7e:1a:84:b6:b1:8d:33:42:92:e1:61:94:45:ee:
f7:60:d4:cf:dd:86:19:84:cb:b5:44:a0:11:b1:7e:10:0d:c9:
92:d8:d4:45:83:0f:fa:6f:cd:db:21:a6:46:a8:ae:b8:c7:27:
b0:d5:b8:16:e4:c4:06:2f:45:c0:68:4f:58:1a:94:8f:d5:e6:
d0:68:b7:c4:d9:a1:56:88:30:bc:48:46:3d:7f:ec:da:28:37:
f0:db:32:4d:93:d3:5c:f5:6d:13:1a:46:3a:68:a3:cd:51:45:
fb:00:35:dc:49:35:e2:c9:4c:aa:8d:e2:25:c8:12:2c:81:68:
55:fd:f3:46:8b:02:65:27:83:6f:db:73:33:34:cc:c7:e5:03:
25:8f:48:5c:27:db:c6:c6:99:cb:39:31:fb:ec:3c:84:6c:88:
e8:ab:55:2e:7a:23:31:60:f5:4a:11:73:6a:0a:06:d0:a7:a4:
02:cd:11:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org