Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G8sK2OFuwpQqhwTEY-eHFvTc560.roa
File: G8sK2OFuwpQqhwTEY-eHFvTc560.roa (raw, json)
Hash identifier: Uj3j4qrGwm5MW/9aK1LQrW5z3fBgTItSBQOVdeWdvMo=
Subject key identifier: 1B:CB:0A:D8:E1:6E:C2:94:2A:87:04:C4:63:E7:87:16:F4:DC:E7:AD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 136D8F3D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G8sK2OFuwpQqhwTEY-eHFvTc560.roa
Signing time: Sun 03 Apr 2022 11:32:35 +0000
ROA not before: Sun 03 Apr 2022 11:32:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2a0e:b107:e70::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325947197 (0x136d8f3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 3 11:32:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bcb0ad8e16ec2942a8704c463e78716f4dce7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:16:f9:a5:d3:0a:66:74:11:06:ef:13:b5:
2b:11:78:a6:9a:36:1f:d2:3a:43:9a:e7:84:7b:ff:
2b:d0:c1:1e:a2:5d:d8:e7:c8:19:93:3f:7a:d0:c6:
56:13:7d:bc:82:35:83:57:67:e8:e8:99:27:6d:5d:
9a:e6:47:2c:30:a4:9e:c7:fc:5f:30:69:ec:1d:73:
5b:0c:b0:99:c7:75:99:e8:1f:85:64:18:93:86:90:
5a:7d:78:ef:80:6a:2a:1d:4e:9b:91:be:08:d5:96:
39:56:78:4f:b0:c4:c2:fd:79:16:1e:77:71:4e:d9:
4d:01:db:85:70:96:ca:83:d7:cd:b3:1a:f0:27:d2:
2d:57:45:42:7e:b3:34:f4:c5:21:ca:36:2c:67:62:
77:5e:fc:8c:4d:69:64:e4:fe:b8:cb:ef:63:aa:66:
e9:e5:b8:94:0d:71:05:98:c7:3f:d5:b2:e7:16:65:
91:71:ac:cb:a5:31:a2:5a:75:1c:5e:f4:08:d1:3e:
c4:6c:ed:c1:aa:ed:f5:2a:34:76:39:ab:e7:e8:54:
ec:0b:bf:9e:3c:f2:a9:1b:d7:a3:2f:ab:a6:c7:65:
d7:3c:6e:4f:68:99:1d:6e:1c:b0:4c:9c:42:94:b5:
e8:42:5d:80:3e:1f:54:f1:6e:3a:29:99:11:65:32:
82:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CB:0A:D8:E1:6E:C2:94:2A:87:04:C4:63:E7:87:16:F4:DC:E7:AD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/G8sK2OFuwpQqhwTEY-eHFvTc560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:e70::/48
Signature Algorithm: sha256WithRSAEncryption
48:fe:54:e4:59:b1:3a:59:34:17:26:17:e7:b1:a0:0c:1d:93:
d1:58:b7:5b:80:4e:86:e0:34:e2:75:a1:fe:34:fb:49:96:e1:
e9:91:e4:55:30:99:3a:b3:5c:23:1e:96:d8:88:1e:5d:fc:8f:
ef:c7:5e:23:5d:1d:05:46:d6:ac:8e:1e:40:fc:34:d5:80:0a:
47:f5:8b:f8:fd:c3:f8:40:bb:2d:ea:c8:4f:78:6f:28:49:9d:
52:7a:94:c7:2f:16:be:8f:ae:5e:be:e3:e8:75:a7:18:c5:3b:
9e:1b:43:d9:34:30:08:1b:97:b9:f5:7c:c5:98:5b:0a:0b:c3:
a6:45:a5:e8:15:d7:d4:fb:a3:1c:2b:eb:c6:91:ab:71:64:8b:
cc:74:e5:2a:a5:db:40:9b:ec:c0:f2:86:43:b9:1b:1e:db:77:
a7:63:87:1e:6f:4e:76:7e:40:10:26:f1:0a:ca:ae:5a:d1:92:
a2:ca:b9:c8:52:0c:d2:29:4c:88:3c:0b:ce:e0:59:02:b3:6e:
fe:8a:38:65:12:5f:0e:ef:20:50:7c:b7:67:7c:26:85:ec:28:
8d:82:9d:68:8d:4f:c4:36:e9:9f:ad:77:54:ba:9a:5f:c6:e0:
c0:b0:2d:a1:b5:66:21:a6:68:28:7f:80:50:86:5b:37:c1:76:
22:de:9e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org