Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Oi5TTUdsFbCPis8bax3gZDS6UGc.roa
File: Oi5TTUdsFbCPis8bax3gZDS6UGc.roa (raw, json)
Hash identifier: AYxHb+x7L734kwLT6bEOxf9NxkmjahUSDknkyqf0+Cs=
Subject key identifier: 3A:2E:53:4D:47:6C:15:B0:8F:8A:CF:1B:6B:1D:E0:64:34:BA:50:67
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01827D0F65EFE37306CA156583EB8F60354E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Oi5TTUdsFbCPis8bax3gZDS6UGc.roa
Signing time: Mon 08 Aug 2022 10:45:37 +0000
ROA not before: Mon 08 Aug 2022 10:45:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49922
IP address blocks: 2a0e:97c0:b80::/44 maxlen: 48
2a10:cc44:100::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:0f:65:ef:e3:73:06:ca:15:65:83:eb:8f:60:35:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 8 10:45:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a2e534d476c15b08f8acf1b6b1de06434ba5067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:68:2f:99:d8:ab:d9:b6:60:e2:de:64:30:d0:
91:a6:1a:be:e3:39:b0:5e:60:7b:f7:d1:e9:bb:d7:
b0:e2:11:ed:fc:2d:a7:fa:73:96:4a:67:ec:94:d1:
44:97:3d:9f:2d:6b:88:ca:3a:54:31:17:1b:fa:53:
99:20:54:83:42:a2:66:88:57:70:2f:46:87:a7:95:
68:6b:f8:d6:dc:9a:5b:19:43:f4:d6:17:16:f5:cd:
d8:8a:6c:01:0c:c4:02:1d:78:40:c1:97:fa:6e:34:
53:20:b4:02:85:d7:e2:d5:83:d3:dd:fc:14:12:22:
d4:9b:88:c9:39:2b:5f:a9:b6:6f:f0:23:93:a3:68:
33:31:1e:58:3f:c6:90:e8:2e:67:c8:0b:65:b5:d9:
38:18:2d:61:31:bf:eb:b6:c0:75:ac:93:c2:54:91:
1a:2a:6f:f6:66:42:9a:a4:0e:e9:7b:55:33:be:4c:
c2:4e:bd:c3:e1:85:8e:c6:b3:85:a3:be:e3:34:f1:
41:e0:19:29:f6:d0:f8:1b:de:a8:30:59:06:d8:f0:
d7:80:34:a0:07:18:72:00:03:b9:79:e4:06:98:e7:
e2:28:d0:b4:00:ee:93:79:7f:4e:3d:98:a7:5f:50:
94:5f:5c:97:6e:93:29:a3:2e:31:23:3b:27:01:20:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2E:53:4D:47:6C:15:B0:8F:8A:CF:1B:6B:1D:E0:64:34:BA:50:67
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Oi5TTUdsFbCPis8bax3gZDS6UGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b80::/44
2a10:cc44:100::/44
Signature Algorithm: sha256WithRSAEncryption
84:66:86:a3:ca:82:c6:0e:71:6a:ba:01:39:97:c8:3e:32:42:
87:53:5e:99:bd:99:6c:59:f0:d7:b6:0b:c5:00:b7:8e:f9:af:
07:6a:cb:42:33:34:ea:fc:a5:8b:fb:7f:69:5a:fc:ae:c8:ee:
6f:c8:ce:d2:9e:14:30:01:ac:d0:97:f4:c3:9f:9d:9b:7e:fa:
c2:a7:6a:b5:c9:af:0d:78:6e:df:b4:b7:7c:4f:b9:b3:da:c3:
91:99:36:28:92:fd:84:c8:e4:94:e7:46:db:18:cb:df:74:b4:
d6:67:1d:5a:04:0a:65:66:c5:09:e4:1f:ef:1f:57:58:26:d6:
41:f9:cc:b3:6c:4a:d3:6e:13:9b:84:6d:94:d2:d7:e8:ae:30:
fb:b1:19:77:5c:a2:ee:7a:bb:ad:6a:64:09:d8:b0:c6:b1:b4:
c9:a6:56:e3:83:61:71:ed:f9:55:3c:2b:ed:f2:bf:0c:c1:98:
fc:ac:71:50:aa:18:bc:f1:3f:00:59:84:1d:cb:40:81:49:48:
77:0e:76:b8:8e:b8:9e:a2:88:92:84:28:95:ff:04:80:74:a8:
7e:6b:07:ef:86:4d:3d:54:e1:54:19:78:2d:65:c3:87:8c:8c:
8e:13:8f:72:d1:c4:c8:c4:55:b4:de:8f:27:39:c2:d5:b7:e2:
a3:33:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org