Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H0Djqrvhm04KEEjxoSkvpkI28yM.roa
File: H0Djqrvhm04KEEjxoSkvpkI28yM.roa (raw, json)
Hash identifier: btqALhvRPOSy+iB6cJ9TeIudoHlCxBQ9rK3kWr8Z0cM=
Subject key identifier: 1F:40:E3:AA:BB:E1:9B:4E:0A:10:48:F1:A1:29:2F:A6:42:36:F3:23
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183D140F05728D868EABD6F973CBC9CC9FC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H0Djqrvhm04KEEjxoSkvpkI28yM.roa
Signing time: Thu 13 Oct 2022 12:10:37 +0000
ROA not before: Thu 13 Oct 2022 12:10:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202647
IP address blocks: 2a10:2f00:18c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:40:f0:57:28:d8:68:ea:bd:6f:97:3c:bc:9c:c9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 13 12:10:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f40e3aabbe19b4e0a1048f1a1292fa64236f323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:4b:dd:b8:d8:11:f3:36:8e:b2:3a:df:2a:
2d:ac:99:72:84:f3:98:c1:34:dc:32:11:30:6c:44:
6e:72:9d:65:25:26:1f:b7:b2:8f:5c:69:9a:d4:9d:
44:21:25:79:d4:5f:14:1a:4e:38:64:fa:28:1d:ba:
2b:e4:97:eb:3e:8f:32:ea:be:e8:5b:0f:87:82:3b:
80:42:a3:aa:60:d3:4a:00:66:9c:fa:a3:73:03:6d:
64:35:c2:8f:8d:e8:c6:5b:69:68:d9:2c:ed:2f:b8:
4f:dd:b6:36:58:b2:03:91:ac:88:dd:3a:52:59:2f:
e4:10:05:53:76:fd:28:ee:cf:5c:61:7e:dc:66:a2:
0a:f3:52:52:4f:79:b4:02:9b:7e:1f:2d:c1:3a:14:
91:c5:fa:27:7f:59:7d:ca:0d:20:01:6a:f4:b7:14:
6e:24:47:53:45:3c:0e:fc:3a:d0:03:aa:fd:1a:66:
cf:13:20:b7:5e:ac:8a:94:06:2e:10:5e:87:f3:de:
06:f3:9e:4f:33:de:ee:27:ba:33:9f:91:a9:fa:b6:
1b:b8:bd:c3:7f:fb:3c:09:ac:25:95:63:ae:a5:eb:
b1:30:76:38:4f:82:a4:d7:51:57:94:ea:38:3f:eb:
4c:ca:18:ce:de:01:3f:9d:6e:28:c6:39:da:c8:cc:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:40:E3:AA:BB:E1:9B:4E:0A:10:48:F1:A1:29:2F:A6:42:36:F3:23
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H0Djqrvhm04KEEjxoSkvpkI28yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:18c::/48
Signature Algorithm: sha256WithRSAEncryption
a7:08:7e:e2:5a:97:24:8e:61:99:90:7b:63:1f:21:54:f2:0b:
d3:53:0d:65:80:a0:9b:b5:2a:c2:dd:05:5a:dc:d6:39:ae:a4:
ed:7c:e3:65:f5:21:2f:14:13:8b:56:de:4f:6c:dc:9a:c2:9f:
27:21:77:08:31:f2:2f:c0:b0:97:ca:96:ee:21:cc:78:21:1c:
e6:62:4f:3a:cb:9d:6e:b0:54:97:ab:29:d7:7b:b7:ff:56:94:
19:9b:90:4b:63:88:8f:8a:9a:54:57:b1:6d:f5:0f:f9:1e:77:
33:94:4c:f0:77:1b:54:93:f9:e6:c0:fa:a3:6d:5d:31:da:86:
a4:0c:c5:6c:11:50:07:2c:6e:f9:46:5f:5e:8c:f6:01:b0:34:
3d:1a:8c:44:23:9c:a6:a9:79:dc:94:5a:93:17:51:46:77:d9:
6a:cb:fd:fd:45:dc:04:90:da:b8:72:b4:25:f8:53:b0:d0:41:
1c:be:38:6c:5b:b5:7f:2d:c6:13:60:a1:19:c4:2d:11:47:7c:
97:e4:e4:c3:5e:07:c0:7a:0e:40:fe:ff:dd:24:41:c7:a7:77:
76:22:11:8c:ac:81:86:a1:9e:f1:99:db:e8:46:e0:15:54:77:
18:c1:75:ad:db:ed:32:2c:d1:20:a8:2b:2b:e9:0e:14:52:a1:
60:04:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:28 2024 by rpki-client on console-fra.rpki-client.org