Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TTLT0ub3eBgctb--VbcFzAtj6mA.roa
File: TTLT0ub3eBgctb--VbcFzAtj6mA.roa (raw, json)
Hash identifier: 2/nIyCGTSHSK9WL34ddlZ4Xrd/tFMFHbDhEVm6Az1vY=
Subject key identifier: 4D:32:D3:D2:E6:F7:78:18:1C:B5:BF:BE:55:B7:05:CC:0B:63:EA:60
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 14E5357E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TTLT0ub3eBgctb--VbcFzAtj6mA.roa
Signing time: Sun 29 May 2022 00:44:14 +0000
ROA not before: Sun 29 May 2022 00:44:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212793
IP address blocks: 2a10:2f01:2d0::/44 maxlen: 48
2a10:2f01:350::/44 maxlen: 48
2a10:2f00:147::/48 maxlen: 48
2a0f:e401:130::/44 maxlen: 48
2a10:2f01:2d1::/48 maxlen: 48
2a0e:b107:88f::/48 maxlen: 48
2a10:2f01:354::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350565758 (0x14e5357e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 29 00:44:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d32d3d2e6f778181cb5bfbe55b705cc0b63ea60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:48:32:e8:0b:f8:cb:4e:3d:b0:a7:20:66:
a7:57:be:19:18:ee:60:c6:b1:26:56:d0:1b:49:3d:
4c:a6:07:5e:67:97:ec:17:ce:66:3b:a6:76:78:c6:
87:00:7d:94:78:9b:86:6a:61:44:41:73:51:e8:b9:
fe:ce:86:69:bd:bc:ca:f1:78:20:93:4e:c6:58:83:
86:12:e5:99:f2:81:15:9c:4b:66:45:92:f7:36:da:
6a:da:6c:54:b6:87:4e:4d:e0:f1:cd:d9:e9:d9:49:
0d:9f:46:ae:4f:01:98:1c:cd:9d:25:64:6c:c3:ab:
3b:b2:83:91:0d:0a:3f:59:51:d3:f9:96:9d:85:80:
10:35:f4:0b:6a:66:12:ff:70:01:d2:c4:bd:bf:e7:
b1:f3:5e:b2:6c:10:2a:cb:23:33:e5:a6:f6:a4:1f:
05:56:0c:03:63:86:44:08:34:46:c7:ea:e0:c6:04:
0f:4c:77:11:d8:71:71:5e:3a:73:75:1a:d9:bc:d6:
a4:d8:e5:e3:38:5d:4d:dc:02:61:a8:22:a2:02:77:
29:3f:c0:17:6e:47:89:46:fa:27:6d:80:36:9f:9d:
12:05:67:0d:e6:87:c1:ee:83:c7:18:46:3c:01:40:
e9:8c:4f:8c:92:73:e1:13:fc:c6:9e:e6:8f:4f:1b:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:32:D3:D2:E6:F7:78:18:1C:B5:BF:BE:55:B7:05:CC:0B:63:EA:60
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/TTLT0ub3eBgctb--VbcFzAtj6mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:88f::/48
2a0f:e401:130::/44
2a10:2f00:147::/48
2a10:2f01:2d0::/44
2a10:2f01:350::/44
Signature Algorithm: sha256WithRSAEncryption
1d:f4:a9:27:97:df:59:b5:93:e0:a0:93:50:fa:36:ad:e1:7b:
95:48:6f:21:e9:ba:9e:d5:db:20:24:21:35:3e:38:f3:c0:23:
df:84:0a:7e:a2:f8:a1:82:28:84:e6:e5:1e:28:8d:dc:91:80:
42:2e:42:f9:99:ef:cf:88:26:2f:9c:ae:55:4c:eb:f6:86:6e:
6c:93:b9:b7:91:9a:59:bf:e3:08:1f:00:18:5f:77:6c:62:24:
53:d7:d4:fd:86:80:9a:9a:9a:b5:85:ae:a5:00:8f:eb:f5:a3:
b6:5e:6e:8b:6a:81:20:5b:b1:e4:00:34:6d:c6:62:5c:ee:d9:
ef:bf:0b:93:e8:44:2b:37:5d:f5:0c:7d:04:ba:d0:cd:00:dd:
b7:4f:7f:2d:4c:63:77:57:67:b5:3b:76:c3:93:af:20:42:ee:
07:0b:21:29:73:e8:67:19:95:06:ed:83:e4:d4:6d:46:15:fc:
00:5b:18:af:34:93:bb:9f:f1:2c:4a:80:25:d9:55:a7:7c:42:
fc:d0:96:c4:c7:46:d5:5e:95:45:e9:48:e8:30:1b:6a:e6:af:
db:8c:bc:32:14:7c:45:79:a1:47:68:10:f3:89:5a:e4:80:2d:
1e:92:7c:58:a2:f7:d6:4d:1f:0a:6d:23:f8:e5:ec:d6:21:a6:
51:7a:d9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-fra.rpki-client.org