Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jwnd2MqTslQuXRwG8-HtDv1tj60.roa
File: Jwnd2MqTslQuXRwG8-HtDv1tj60.roa (raw, json)
Hash identifier: 4W9N9djo1geakNXZtdk7fRhxIs3Eg6uSdr0lD1UeJio=
Subject key identifier: 27:09:DD:D8:CA:93:B2:54:2E:5D:1C:06:F3:E1:ED:0E:FD:6D:8F:AD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 1074DE34
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jwnd2MqTslQuXRwG8-HtDv1tj60.roa
Signing time: Sat 01 Jan 2022 09:04:42 +0000
ROA not before: Sat 01 Jan 2022 09:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42394
IP address blocks: 2a0e:b107:ff0::/48 maxlen: 48
2a0e:b107:1110::/44 maxlen: 48
2a0e:b107:fff::/48 maxlen: 48
2a0e:97c7:160::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276094516 (0x1074de34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2709ddd8ca93b2542e5d1c06f3e1ed0efd6d8fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:58:16:fe:88:e2:74:94:8c:34:46:7d:4c:
83:a5:94:64:f4:93:61:87:e9:f3:bb:44:5f:05:62:
d4:ee:06:30:14:07:d7:fa:72:5b:d3:de:90:0f:18:
ad:f3:cf:d8:d0:e6:ff:00:8e:f9:66:24:44:fd:fd:
78:48:e7:69:9b:bd:a2:bc:90:6f:ac:89:d0:b0:ed:
b6:bd:6f:f6:72:22:ba:8a:7a:e4:a0:8f:4c:cc:15:
9a:bc:e1:d7:0b:bd:cb:37:9d:99:98:4f:bf:58:a0:
00:83:8c:8d:d4:6f:5d:8c:35:fe:45:83:18:8b:09:
85:62:f1:d8:59:6a:d4:53:11:f4:b4:06:75:27:95:
af:7a:e4:4b:b1:56:b7:56:8d:f6:d8:da:fd:bc:58:
ac:77:b9:9d:4d:6a:39:15:51:0b:91:d1:59:4c:a4:
47:fc:7b:d9:01:95:a0:9d:4f:18:06:8f:ab:89:a3:
09:10:59:84:32:a1:84:13:ab:ab:eb:e2:f5:bc:98:
ae:ac:d0:6a:c0:13:a6:dc:d4:17:df:43:a3:d6:ef:
b6:90:15:c7:87:20:fe:a7:ac:47:81:5d:9c:e4:68:
3a:91:d4:5c:72:a8:77:ba:0e:d1:4d:c7:35:3e:cb:
ba:88:dd:e8:68:ed:66:31:6e:8a:21:a4:c5:cd:ec:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:09:DD:D8:CA:93:B2:54:2E:5D:1C:06:F3:E1:ED:0E:FD:6D:8F:AD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Jwnd2MqTslQuXRwG8-HtDv1tj60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c7:160::/44
2a0e:b107:ff0::/48
2a0e:b107:fff::/48
2a0e:b107:1110::/44
Signature Algorithm: sha256WithRSAEncryption
a7:03:ef:49:4a:f9:cd:7d:e5:38:2f:58:7f:01:3a:c3:74:5f:
6e:54:0e:c8:23:c4:47:4f:96:7f:d6:52:fb:56:5d:4e:73:7b:
2f:03:f5:c5:ff:a2:cd:06:87:c2:13:3e:38:a6:32:11:0c:2e:
2d:b4:55:70:2b:97:68:9e:0c:fe:95:06:9d:f2:96:b2:03:a4:
59:b4:f2:5e:0d:ab:10:67:0b:f4:31:76:7d:b7:54:19:f4:34:
0c:e0:51:17:f7:c1:c0:eb:a9:22:b4:ae:45:8e:d5:8d:79:79:
13:60:9e:8d:80:d6:a0:01:27:08:4f:5f:0c:7b:0d:f9:6f:82:
53:bc:1f:3e:bc:d1:31:16:06:ff:6d:f3:20:28:6f:10:23:c6:
31:05:f6:5d:a9:95:ef:45:93:c5:9d:62:35:a3:95:12:60:04:
16:c4:26:f2:b7:9f:3f:bb:f6:80:ca:34:da:f0:43:0e:ac:28:
82:f7:04:46:7b:26:54:95:95:ae:2e:13:98:5d:d6:59:3c:35:
b6:97:23:c5:8a:02:8d:03:fb:5f:03:e1:0d:5a:d9:6c:23:a8:
55:22:bb:b6:5d:29:b1:82:a2:c1:02:18:c8:37:57:d0:86:1a:
a0:ef:59:dc:b0:7c:53:ad:58:ea:03:e1:2a:f9:b0:62:8c:6b:
f7:e3:d0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:58 2023 by rpki-client on console-ams.rpki-client.org