Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KkbbJcJ7WQCiBayqChAeCHnbkUY.roa
File: KkbbJcJ7WQCiBayqChAeCHnbkUY.roa (raw, json)
Hash identifier: IFhM6Dt1ksAkJ/zCnu7/y3R2I72HXUAqfcVYntkCm5w=
Subject key identifier: 2A:46:DB:25:C2:7B:59:00:A2:05:AC:AA:0A:10:1E:08:79:DB:91:46
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0182470014E8872784FE62252C5D5DABCBA1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KkbbJcJ7WQCiBayqChAeCHnbkUY.roa
Signing time: Thu 28 Jul 2022 22:49:23 +0000
ROA not before: Thu 28 Jul 2022 22:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203790
IP address blocks: 2a0e:97c0:460::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:47:00:14:e8:87:27:84:fe:62:25:2c:5d:5d:ab:cb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 28 22:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a46db25c27b5900a205acaa0a101e0879db9146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:34:fd:3b:0d:01:97:96:28:81:4b:02:a4:
11:c3:f4:9e:21:1b:22:dd:45:2b:bb:0c:ce:10:33:
1b:42:4d:24:95:71:b0:1f:5d:b3:94:e8:d8:e2:af:
c7:1e:d8:23:90:54:e8:c1:d3:55:b5:55:cd:f9:48:
4a:c7:d7:92:3f:1c:4e:aa:36:10:b3:da:07:93:c0:
9f:b3:1a:bc:75:7e:0a:2a:e3:86:f7:3e:e8:8a:55:
ea:bd:64:14:54:66:9a:3c:2b:16:49:58:b0:17:08:
a4:90:02:cf:9a:36:39:c8:27:1b:e5:a5:62:8a:39:
1a:fa:91:06:04:b2:6d:31:04:c5:fa:68:fb:5f:65:
76:70:58:b9:b5:4b:ee:f1:40:d2:27:90:84:28:0f:
97:7b:e4:7b:82:26:09:27:24:2a:c0:2c:c3:48:45:
0a:72:7c:e6:52:be:d8:ee:bf:a4:49:a5:6f:cc:b9:
b0:2e:3b:5a:82:a5:72:03:e0:cc:a0:0d:02:36:35:
6d:e6:e2:27:48:f7:e1:e9:c7:9f:60:4f:53:41:b3:
7c:ce:d2:fd:c4:00:20:7d:58:f8:f3:4c:1e:4f:06:
ce:20:9e:b6:6f:e1:75:40:d9:a1:83:bb:7f:6d:72:
be:27:10:1f:b0:70:56:5e:22:47:1f:6b:58:25:c6:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:46:DB:25:C2:7B:59:00:A2:05:AC:AA:0A:10:1E:08:79:DB:91:46
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KkbbJcJ7WQCiBayqChAeCHnbkUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:460::/44
Signature Algorithm: sha256WithRSAEncryption
21:44:9e:6e:e2:ec:bf:8a:ca:36:7f:ba:eb:27:73:42:ff:fa:
b9:3d:6b:d1:05:22:d2:40:91:b7:1a:da:95:b7:12:df:07:3e:
8e:a3:72:5b:fc:d6:6a:f1:4c:6d:07:62:6e:ae:7f:03:62:4c:
0c:b5:5c:db:9e:cd:11:eb:ca:64:13:59:19:36:89:4a:c8:a7:
e2:7a:51:c3:3a:65:28:c6:f5:ce:f5:6c:3a:32:f7:88:fa:6f:
e8:39:51:3b:ea:5c:10:3d:63:aa:e6:b4:eb:1b:f5:1b:f4:f4:
87:52:5a:7b:28:03:81:cd:06:66:34:cc:9c:3e:48:dd:fd:c6:
2d:56:55:d4:3b:22:8c:4d:39:23:dc:d2:0c:2a:27:aa:9e:b0:
8b:52:fe:87:a7:58:0b:f4:86:c5:c0:d3:38:d5:55:1b:e3:32:
e5:8f:a9:bd:28:54:bb:41:3c:f5:ed:99:75:8c:18:d4:6c:84:
de:f3:f6:d0:00:ea:15:cf:4e:69:5d:a7:27:ed:f8:b4:12:85:
59:f0:e8:3b:7e:08:fe:1f:fc:e4:e6:0e:57:38:86:79:97:13:
be:61:10:6c:46:6e:de:ee:a6:6c:e6:07:df:26:d7:75:81:44:
9c:5c:be:ef:ee:5f:89:48:c5:59:13:80:2a:f5:dc:d9:95:48:
b0:1b:bd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:29 2024 by rpki-client on console-fra.rpki-client.org