Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L53d2XL6dfEkktZpVLd_LOx8Bdg.roa
File: L53d2XL6dfEkktZpVLd_LOx8Bdg.roa (raw, json)
Hash identifier: oATd5aJpNY/V3+TtMK8SAADvy7kEkFcx7fT6b54HoN0=
Subject key identifier: 2F:9D:DD:D9:72:FA:75:F1:24:92:D6:69:54:B7:7F:2C:EC:7C:05:D8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 14B0F9F4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L53d2XL6dfEkktZpVLd_LOx8Bdg.roa
Signing time: Mon 16 May 2022 18:50:29 +0000
ROA not before: Mon 16 May 2022 18:50:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205043
IP address blocks: 2a0e:97c0:b10::/48 maxlen: 48
2a0e:97c0:b11::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347142644 (0x14b0f9f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 16 18:50:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f9dddd972fa75f12492d66954b77f2cec7c05d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:d7:bc:65:0e:66:51:fa:83:75:33:05:8f:
a5:0d:98:cd:70:ad:65:cf:33:ff:ee:81:d7:d0:af:
5c:cb:f9:d6:4b:b2:1b:42:03:91:21:7b:d5:c7:7f:
0e:3c:6b:6c:b4:21:8d:f4:bb:45:23:1f:b8:f6:a8:
62:01:fc:89:3c:38:16:fd:df:61:90:28:bf:e9:5e:
89:1a:d8:1a:27:3c:ea:da:09:b2:50:8a:c6:f3:5c:
fa:73:be:3d:af:b0:e3:65:4e:f6:ef:3b:d4:dc:d1:
a1:8e:47:5b:09:f0:70:b0:99:53:c1:ca:ff:8f:a8:
43:61:18:be:a6:5a:fc:76:da:9a:86:1e:54:fd:81:
68:ee:25:c3:d7:0f:8e:ab:3b:ff:49:10:d0:0b:e1:
ec:8a:74:fc:95:c7:e8:c1:41:b5:44:d0:35:27:4a:
61:5b:55:b1:a4:dd:da:7e:f3:ca:a7:19:83:da:db:
74:40:2e:a5:43:df:fe:fa:76:c6:cc:c8:fb:13:ef:
46:b8:76:96:2a:2f:ae:82:79:48:b2:b6:e7:77:4d:
46:28:bc:57:1b:65:a7:84:0b:a3:58:c3:a6:54:91:
e4:54:86:76:5b:ba:76:5d:9f:68:71:a6:1a:7f:26:
85:09:9e:88:5a:0c:66:80:30:3d:e3:33:81:50:f8:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9D:DD:D9:72:FA:75:F1:24:92:D6:69:54:B7:7F:2C:EC:7C:05:D8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L53d2XL6dfEkktZpVLd_LOx8Bdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b10::/47
Signature Algorithm: sha256WithRSAEncryption
b8:2c:55:f0:cf:93:4e:ae:cd:d5:82:0b:1c:2f:f5:fe:da:d4:
03:28:19:e7:72:2f:a7:fa:d4:fa:b9:4e:22:83:26:e3:02:44:
d1:54:a6:73:e9:17:89:a5:b9:4c:38:ad:94:ef:15:a2:61:2c:
09:75:23:3a:24:b0:5e:23:05:e5:3c:91:23:90:84:08:56:b3:
6f:a9:13:e2:09:ca:40:1b:e0:48:37:37:d6:3e:8d:48:65:36:
20:f8:e5:92:57:b1:ef:63:d7:f7:56:19:e5:c1:e8:c8:e6:3c:
47:bc:09:70:3b:a9:31:1a:ea:90:f7:6c:c2:07:d0:87:ae:c6:
a1:47:40:b1:20:2b:2d:de:3e:02:a1:1f:83:2e:62:b0:e9:ce:
57:01:04:c2:86:b1:6e:1a:ab:8c:7c:43:45:f1:a4:5f:46:1d:
49:ad:6e:6c:9c:6a:39:0f:1b:2c:a8:cc:bd:25:8f:95:ff:14:
4e:d8:d4:a2:91:12:ee:cd:8d:0c:4f:68:f0:46:56:84:15:d0:
12:2c:9c:c4:66:68:5a:db:9a:81:13:3c:8a:2c:15:b1:77:dc:
17:67:cb:9d:7b:ed:52:68:e5:0d:0f:53:6e:76:c4:b6:1b:03:
8b:f1:57:7b:cc:98:b0:dc:5a:df:56:95:2f:da:fc:9a:cd:0f:
8a:48:f5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:29 2024 by rpki-client on console-fra.rpki-client.org