Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PPiSQRYu4Fxa4nYzFyoaIijwxnw.roa
File: PPiSQRYu4Fxa4nYzFyoaIijwxnw.roa (raw, json)
Hash identifier: vhLQiPhg70PH+E/IuS/NRkGaf2kfgNpuWJ9mh/NU8nk=
Subject key identifier: 3C:F8:92:41:16:2E:E0:5C:5A:E2:76:33:17:2A:1A:22:28:F0:C6:7C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0184525547661831CB1287D1B7E951D4AF90
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PPiSQRYu4Fxa4nYzFyoaIijwxnw.roa
Signing time: Mon 07 Nov 2022 13:43:51 +0000
ROA not before: Mon 07 Nov 2022 13:43:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202256
IP address blocks: 2a10:cc44:800::/37 maxlen: 48
2a0e:97c1:800::/37 maxlen: 48
2a0e:97c7:800::/37 maxlen: 48
2a10:cc42:1000::/36 maxlen: 48
2a10:cc42:1800::/37 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:55:47:66:18:31:cb:12:87:d1:b7:e9:51:d4:af:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 7 13:43:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cf89241162ee05c5ae27633172a1a2228f0c67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8f:97:36:dc:ff:1d:7f:67:3c:31:34:18:8b:
87:f6:2f:56:b7:6f:7a:c6:ea:b8:37:a7:08:60:53:
29:71:28:78:41:f1:76:2d:0d:fc:13:ed:1f:31:de:
b7:f9:0d:c9:83:ed:a7:6d:d9:94:fc:c3:f8:de:57:
f3:63:16:81:60:19:21:12:26:66:14:05:82:20:b7:
34:b5:d7:da:27:8d:9b:d0:d7:5b:83:2f:5f:86:51:
64:0b:c9:9c:32:cb:23:cc:ba:c4:f0:6a:02:d0:20:
ab:d3:ab:75:ac:83:88:a9:0e:e7:17:28:90:4a:70:
83:15:2a:65:fd:11:80:16:4c:d3:31:33:68:15:8d:
7b:9b:a3:75:e9:4b:f4:ef:61:12:29:f6:15:5a:b4:
67:cc:ae:63:d0:af:f7:ca:62:b3:19:16:f3:b0:20:
06:3f:fa:ad:8a:1b:c4:3e:88:1d:eb:7c:c9:b5:f8:
1e:ab:93:b0:e8:94:33:54:6f:f1:0f:46:07:a8:15:
1f:a2:84:8b:7a:6b:24:2c:25:62:66:57:67:e4:2a:
23:14:83:4a:db:cc:56:aa:1e:bc:05:5a:a7:50:d7:
e3:89:45:6d:f6:9f:4d:37:a9:d8:46:f5:4a:ec:0b:
10:02:ee:bd:c3:65:a5:9b:ca:8b:23:54:9d:8a:d6:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F8:92:41:16:2E:E0:5C:5A:E2:76:33:17:2A:1A:22:28:F0:C6:7C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PPiSQRYu4Fxa4nYzFyoaIijwxnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c1:800::/37
2a0e:97c7:800::/37
2a10:cc42:1000::/36
2a10:cc44:800::/37
Signature Algorithm: sha256WithRSAEncryption
86:28:d3:4c:d2:59:42:93:e9:72:92:8f:07:15:27:86:d7:43:
e2:5d:dc:19:bc:b4:98:2a:8f:7c:fa:1a:9c:1c:d0:22:19:8d:
03:8e:78:90:cc:18:1e:bf:b3:6f:bc:8e:0b:53:9d:de:9f:80:
33:6c:0a:6c:59:ee:56:f0:db:c1:05:ff:9f:a6:df:2f:22:34:
51:b9:fc:da:7a:81:9f:89:61:97:66:d0:94:e2:b3:50:c4:e2:
e2:98:6e:3a:df:7f:a2:8d:9b:3c:80:6d:03:a3:e4:90:3d:bb:
57:a0:9b:28:7a:c3:ea:6f:df:86:1a:49:e8:92:34:7e:3a:4f:
90:95:9d:db:62:95:d7:16:a3:bc:ea:89:78:ac:ee:17:03:d8:
3f:3a:16:6b:30:21:06:f9:4f:dc:df:92:1d:bd:bf:aa:95:87:
94:af:32:ff:21:90:8e:0e:04:17:aa:11:ef:89:1a:3f:8c:0d:
3a:17:ae:fb:e8:e6:c9:45:ea:4a:4c:d6:4e:e6:7f:41:0f:7b:
e1:82:f5:da:cd:d9:ab:2d:9d:e9:f1:92:34:66:eb:c4:71:3c:
7c:47:e0:75:de:9f:47:2b:47:41:98:28:a5:5a:bc:b9:52:07:
ef:91:5b:c9:87:c9:71:a1:15:0e:ee:23:71:ad:1f:9f:06:22:
cd:72:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org