Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SMDxsbwHR1_2zGCYsEChI8L0TUA.roa
File: SMDxsbwHR1_2zGCYsEChI8L0TUA.roa (raw, json)
Hash identifier: iafCGslt1yrzdLOGTllSoS+aeJ9a3pDfyCuhE0ppeDw=
Subject key identifier: 48:C0:F1:B1:BC:07:47:5F:F6:CC:60:98:B0:40:A1:23:C2:F4:4D:40
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 141EFE4A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SMDxsbwHR1_2zGCYsEChI8L0TUA.roa
Signing time: Sat 30 Apr 2022 22:51:12 +0000
ROA not before: Sat 30 Apr 2022 22:51:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211659
IP address blocks: 2a10:cc40:100::/44 maxlen: 48
2a10:cc40:110::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337575498 (0x141efe4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 30 22:51:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48c0f1b1bc07475ff6cc6098b040a123c2f44d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:1a:27:5e:e9:83:2c:04:4c:f6:53:e9:9e:
75:5c:1a:7c:02:8c:9f:bd:83:05:4b:50:74:55:6e:
85:1c:7c:9a:a6:7e:8a:07:c0:72:af:bb:dd:c2:c5:
2f:75:25:5d:5a:9c:07:5a:6e:ab:90:e3:b4:46:ea:
d1:29:a6:8b:d7:2e:20:6b:9c:06:2f:37:8a:35:b4:
7c:b1:e9:da:09:d3:cd:70:e5:7b:e5:3b:94:7e:65:
b6:29:15:24:ad:99:b3:68:46:72:4e:6b:43:d0:b2:
b4:3f:6e:66:32:ae:7f:d0:d4:96:89:c9:70:8e:1d:
9d:d6:cf:dd:0b:ca:96:e8:e6:59:76:12:77:0c:85:
49:09:68:e7:83:fb:5f:fb:af:00:36:ea:0a:4a:cd:
5c:e3:5f:cc:a6:da:b6:2f:22:b7:ff:17:32:8d:cc:
c6:a5:03:72:06:37:6e:fb:8a:d1:59:22:05:7a:6f:
67:a2:c2:0d:86:0e:db:a8:6c:49:7c:80:d2:4c:f7:
e8:b2:b1:13:92:c1:00:fa:b4:9a:0f:62:9a:52:d8:
5b:21:f8:b4:f7:5c:b5:5f:30:55:92:43:28:60:f8:
94:20:ba:ce:26:a0:5f:f9:46:1e:b3:07:31:19:9c:
b3:91:1b:d5:53:cb:6d:95:17:b9:67:15:ec:13:9a:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C0:F1:B1:BC:07:47:5F:F6:CC:60:98:B0:40:A1:23:C2:F4:4D:40
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SMDxsbwHR1_2zGCYsEChI8L0TUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:100::/43
Signature Algorithm: sha256WithRSAEncryption
8f:85:60:f8:e4:90:0e:a1:58:ea:34:ae:4a:c3:83:e5:2e:ab:
8f:f2:cd:59:d6:c3:b8:b0:1c:de:83:6c:69:8e:35:30:35:4a:
25:a0:51:d1:e4:de:19:37:c3:c1:10:fa:ec:e1:bb:5a:3d:6b:
a2:59:0c:8d:3c:55:6f:15:fa:f6:13:c3:1b:67:3b:39:4f:58:
63:7e:4a:61:bc:85:0c:5b:84:b0:90:46:1c:70:c1:21:fe:a8:
86:63:5c:8f:43:8b:46:fb:02:a2:5a:8a:26:68:72:8f:5d:22:
2f:35:b3:f1:a4:05:b2:4e:ee:00:25:73:09:a8:90:e5:fa:ae:
26:d5:69:7b:b1:6f:e7:30:a0:00:66:ee:0a:4d:ba:bc:b6:d0:
d6:24:0f:ea:ff:29:6d:c8:a7:6f:3d:44:9c:b9:5b:ec:82:b9:
6d:b7:5f:c0:da:64:13:9f:5c:ff:32:0c:b4:9e:ca:bc:1d:c0:
be:c6:55:dc:92:3e:d8:e4:ee:1e:ed:18:f2:e0:af:71:d1:36:
d9:72:fe:3a:82:b2:73:f8:f0:82:67:33:62:0a:f8:b5:2f:a6:
7b:b3:2a:1a:84:28:71:23:c3:b3:5e:47:25:35:f1:51:a1:14:
e7:d3:ad:cd:b9:4e:0e:38:c8:45:27:99:16:cb:30:a2:2d:70:
31:bf:2d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org