Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Kntox54A4SRjbD0ATOib9fGK6sI.roa
File: Kntox54A4SRjbD0ATOib9fGK6sI.roa (raw, json)
Hash identifier: AVA1ynCXwnWWx7f5JsBSsll7iUDw/Do4Su4GSp581go=
Subject key identifier: 2A:7B:68:C7:9E:00:E1:24:63:6C:3D:00:4C:E8:9B:F5:F1:8A:EA:C2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 142C430E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Kntox54A4SRjbD0ATOib9fGK6sI.roa
Signing time: Mon 02 May 2022 02:08:11 +0000
ROA not before: Mon 02 May 2022 02:08:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210320
IP address blocks: 2a0e:b107:18c2::/48 maxlen: 48
2a0e:b107:18c1::/48 maxlen: 48
2a0e:b107:18c3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338445070 (0x142c430e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 2 02:08:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a7b68c79e00e124636c3d004ce89bf5f18aeac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e2:7e:bd:92:ea:63:36:05:ac:9d:53:0d:db:
85:69:1d:cb:66:52:eb:fe:29:85:78:7e:fe:f4:c6:
28:55:5d:45:bb:1f:5f:73:8d:6d:87:57:db:bd:7f:
47:9f:f7:d0:88:e2:e2:04:96:5e:49:43:5c:6c:f0:
90:6b:1a:2f:b2:75:79:55:fd:9c:c8:90:bf:56:13:
4a:26:75:76:4e:1b:ca:1a:28:4c:29:4d:65:51:30:
5c:44:fa:6c:40:90:9a:58:ad:90:d4:bd:d9:19:6f:
8e:d7:d7:00:2e:7d:a9:f1:89:67:c5:a6:a6:a6:2b:
0e:7e:84:90:2d:c6:07:aa:c1:57:92:2a:72:99:6d:
2f:ab:cb:bd:cb:ac:93:4e:79:01:43:71:1e:ce:68:
f9:7b:9e:79:74:ee:68:3a:10:13:56:b7:79:e4:a6:
6f:2d:eb:c4:f0:6c:0b:dc:3e:37:ff:52:5f:56:a1:
e1:ef:f9:64:e0:49:5c:7b:6d:d7:7d:93:87:86:2c:
e5:48:d2:b1:2f:37:89:a2:98:05:92:3f:21:43:66:
f2:c3:df:8d:84:7f:dd:4f:0f:3f:6c:3b:be:7b:f8:
8d:80:62:b8:14:8f:61:56:42:52:37:f1:56:bf:48:
53:30:06:ed:01:ab:16:97:93:f9:ac:36:4e:51:d0:
0f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7B:68:C7:9E:00:E1:24:63:6C:3D:00:4C:E8:9B:F5:F1:8A:EA:C2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Kntox54A4SRjbD0ATOib9fGK6sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:18c1::-2a0e:b107:18c3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a0:1e:7f:04:47:c5:d0:b7:da:a4:9c:66:8c:f0:30:76:08:79:
84:d6:a7:b9:4c:f4:d5:39:a5:d8:0e:ff:82:a9:d5:6c:33:f0:
d9:ed:f1:cf:be:58:75:4e:87:65:cb:b2:d4:36:40:69:e0:4b:
c6:a8:00:98:f4:d5:7c:aa:c0:54:66:3e:6e:c7:47:0b:52:21:
38:f4:e0:9d:a4:bf:9f:3f:f4:7c:9d:c9:f0:6a:6e:55:56:fa:
90:35:22:1a:98:67:b8:c8:f9:71:4d:6d:d6:fa:bb:6d:a3:9c:
cc:2a:ab:10:a1:3f:92:50:28:0b:d2:88:a6:94:54:8d:63:6e:
03:49:84:4a:e5:09:34:3f:6f:c6:ac:c1:79:e9:aa:ac:27:df:
04:dd:ea:ac:a0:ed:f6:26:79:d9:b7:f9:bd:c9:c5:ea:b9:4e:
4e:6f:12:cb:7e:0b:fe:3d:96:38:a8:2c:2a:a2:54:30:2e:89:
0e:51:bd:ae:81:f6:e2:6f:d5:24:07:be:43:0a:7f:d3:39:e7:
7d:cc:a7:e6:f1:e8:0a:ec:33:f0:c7:06:ef:33:c8:a2:d4:a1:
1a:bf:a1:23:1b:33:82:b9:de:14:54:fc:d7:36:97:cd:b9:bb:
dc:90:9d:01:5a:54:22:57:cc:b4:d0:17:8e:1f:78:e9:8e:70:
22:91:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:00 2024 by rpki-client on console-ams.rpki-client.org