Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FARfv1ouCj-EEAJ5lLfUZhC6LUQ.roa
File: FARfv1ouCj-EEAJ5lLfUZhC6LUQ.roa (raw, json)
Hash identifier: AGTL2AKkycfROKRQpeqP+IJQC8ZLTvY7ijSqcNjWZhk=
Subject key identifier: 14:04:5F:BF:5A:2E:0A:3F:84:10:02:79:94:B7:D4:66:10:BA:2D:44
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 121F5551
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FARfv1ouCj-EEAJ5lLfUZhC6LUQ.roa
Signing time: Wed 16 Feb 2022 13:12:57 +0000
ROA not before: Wed 16 Feb 2022 13:12:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210980
IP address blocks: 2a0e:b107:ae0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304043345 (0x121f5551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 16 13:12:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14045fbf5a2e0a3f8410027994b7d46610ba2d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:42:ce:b9:9e:1f:e4:50:78:db:95:90:31:
c5:f9:5c:58:b6:49:b3:79:8c:48:dd:4b:60:bd:93:
a0:3f:e4:38:85:65:53:68:a2:21:4e:57:a9:63:cd:
c3:a0:33:a2:9d:c6:7f:7b:1d:7a:d6:ca:ac:df:b2:
71:c4:6d:70:86:64:4c:65:94:2a:bb:af:04:7e:20:
dd:a0:1d:dd:87:3a:73:2f:c1:3a:50:2b:38:bb:59:
80:19:ef:e9:33:a0:88:25:33:72:c7:e6:91:30:04:
a5:a6:c6:33:a1:52:13:55:4c:f1:e7:1d:ba:6c:dc:
71:48:5d:41:7d:6f:98:f6:af:9f:cf:28:41:65:d0:
53:fd:66:fa:63:0c:2c:3d:f9:ca:8c:d0:85:dc:4c:
37:d7:7a:51:7e:fa:1c:ae:99:af:27:03:00:92:5f:
21:d0:39:90:f7:3a:24:c9:e4:df:9c:7c:3d:c1:90:
38:82:61:b1:50:4c:8c:d8:5e:26:19:e7:d2:4b:78:
0d:15:01:99:69:f1:8f:e8:27:29:5d:ba:ef:20:78:
0a:07:f3:10:54:7f:d1:7d:86:50:24:91:dc:44:ed:
a9:5a:50:e3:ac:ec:46:f3:41:44:5b:65:12:14:73:
0c:39:13:9e:2b:5e:ef:19:85:4e:f4:7b:d0:6b:c7:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:04:5F:BF:5A:2E:0A:3F:84:10:02:79:94:B7:D4:66:10:BA:2D:44
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FARfv1ouCj-EEAJ5lLfUZhC6LUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ae0::/44
Signature Algorithm: sha256WithRSAEncryption
51:c4:3f:da:10:34:25:61:c6:04:2f:fe:39:b5:e0:1d:99:9a:
89:a6:da:7a:0b:b8:06:42:84:9a:c8:81:72:41:f6:07:d2:29:
09:db:2e:9f:70:a6:ac:e7:d2:2c:db:66:99:10:44:c8:11:46:
fc:f6:46:bf:a0:67:92:23:18:16:8f:a4:2c:a8:96:0e:48:34:
8c:e3:7a:61:a4:bf:0d:15:e2:ab:d9:ba:29:bf:f6:d0:a7:58:
71:ad:34:bb:5a:10:83:d6:03:ea:12:84:2f:92:23:9f:6c:c0:
1c:36:63:c9:d2:ba:cd:6e:f9:8a:aa:d0:2d:87:b7:b2:b0:9b:
45:95:59:6b:1a:ea:08:a7:8d:82:67:29:04:6b:60:c1:57:22:
1a:03:42:20:4d:62:6d:4e:70:bf:34:5f:67:22:ad:aa:ee:55:
95:48:12:e3:a2:16:10:2c:38:c4:89:8f:9d:b1:dd:de:c8:f5:
e7:c8:19:5f:ad:29:2f:e9:ce:76:84:bb:cf:0c:56:10:26:67:
5c:c4:e9:c4:96:ce:6b:d7:21:81:7d:06:6a:58:7a:ff:71:1c:
e4:35:11:84:60:40:64:76:c7:63:b3:2c:03:84:ea:37:27:50:
f8:a8:03:07:8a:ba:44:be:04:34:11:ea:38:ac:c1:fd:de:97:
17:e2:8d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org