Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NY5gtaW9DrEfqeOHhgzW7oaf7w4.roa
File: NY5gtaW9DrEfqeOHhgzW7oaf7w4.roa (raw, json)
Hash identifier: G5MET80MhW1xRjpO7gf4WZr3/kQvveCVgUKQEoYm7O8=
Subject key identifier: 35:8E:60:B5:A5:BD:0E:B1:1F:A9:E3:87:86:0C:D6:EE:86:9F:EF:0E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01829DF0D600B3B0FE81C1CAD1441E327B58
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NY5gtaW9DrEfqeOHhgzW7oaf7w4.roa
Signing time: Sun 14 Aug 2022 19:59:42 +0000
ROA not before: Sun 14 Aug 2022 19:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212154
IP address blocks: 2a0e:b107:1c00::/48 maxlen: 48
2a0e:b107:1c0f::/48 maxlen: 48
2a0e:b107:1c0e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9d:f0:d6:00:b3:b0:fe:81:c1:ca:d1:44:1e:32:7b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 14 19:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=358e60b5a5bd0eb11fa9e387860cd6ee869fef0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:0f:f1:d9:77:a6:cf:8a:0b:31:7a:95:ed:
b9:94:14:57:7d:eb:c5:c4:a6:6d:ba:da:53:12:d2:
bc:08:1b:41:ab:5d:b9:bc:ef:79:56:e9:c7:b5:2e:
a0:99:46:ca:01:c9:41:6c:6b:16:65:9a:06:91:53:
59:a1:dc:b8:eb:88:1d:a7:33:4a:d2:8e:51:c0:e4:
16:5c:bf:f0:7a:c2:cd:a3:7b:6f:9d:e3:24:f3:38:
65:9f:8a:37:bf:f6:91:11:5c:c3:78:5a:75:d6:b7:
63:9b:cf:13:c6:f3:0a:90:8f:bf:79:24:1b:0a:0b:
42:1f:d7:00:93:84:90:79:19:fa:5a:a0:df:c8:aa:
1f:e4:5e:f9:d6:58:20:f3:8f:86:2d:f3:57:57:22:
68:15:02:3d:49:28:21:f8:bc:cc:01:73:6b:53:a2:
9d:73:ff:0e:d0:71:42:da:43:43:b6:3a:f5:14:77:
7b:a3:6b:2f:1b:5f:c1:88:bb:87:d9:21:f9:cd:d4:
b7:34:25:bb:c5:11:e4:8b:d9:07:05:50:85:70:c4:
c2:d7:d2:10:c9:ad:58:c3:d6:d6:5a:b8:12:ab:6d:
cc:2e:99:14:97:c4:5b:b7:f8:d6:88:3b:4c:b1:1e:
50:fb:90:97:a1:44:eb:46:44:33:58:4a:e3:2a:b6:
eb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:60:B5:A5:BD:0E:B1:1F:A9:E3:87:86:0C:D6:EE:86:9F:EF:0E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NY5gtaW9DrEfqeOHhgzW7oaf7w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c00::/48
2a0e:b107:1c0e::/47
Signature Algorithm: sha256WithRSAEncryption
59:ca:c8:1f:b4:d5:3c:ea:7b:b8:cc:e9:4c:c3:d5:7c:8e:9c:
31:50:d3:95:6c:6a:ec:0a:e2:21:c7:37:f7:78:61:8d:4b:f5:
70:b2:3c:68:65:39:14:d8:08:0f:42:e6:6d:43:2c:92:f2:7a:
40:46:de:65:6e:00:4b:66:db:94:6a:fe:a2:39:be:15:34:42:
76:7a:1b:1a:ef:a7:8c:0f:53:30:e3:5d:80:62:7f:8a:32:db:
6d:4a:8c:98:b5:7b:ba:f8:bf:91:ef:19:cd:2d:0e:6b:cb:a7:
5c:db:98:61:07:be:a0:d0:84:1a:b4:a9:98:36:00:91:84:9d:
cb:f3:97:87:f3:d4:f5:ea:91:66:56:2b:38:39:58:0d:47:6f:
61:dd:3f:f8:8a:e2:42:81:bc:8d:90:84:d5:1f:b0:1c:eb:95:
a6:cf:38:d5:c1:42:73:51:28:dd:4a:4d:12:32:8e:ea:83:4a:
d4:d5:3c:7d:0e:14:2c:10:f5:b7:24:3d:81:b5:ff:56:b8:6f:
8b:f2:b9:80:28:a3:2b:e3:4f:12:8c:99:71:8d:fb:13:38:c3:
5a:3b:ab:87:79:d5:85:2e:a3:e3:df:c8:3a:71:dc:e1:ff:3e:
78:c9:4d:e4:5f:fd:0a:92:3c:d9:3a:2e:4b:2a:36:0d:78:0e:
4e:5d:d8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:30 2024 by rpki-client on console-fra.rpki-client.org