Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vg1C4aMeFqUM5p4SK2EANRweQVM.roa
File: Vg1C4aMeFqUM5p4SK2EANRweQVM.roa (raw, json)
Hash identifier: nGixRN6tgcGAaCVtm/N2P0h17S9GJRDQz7Efd7roSlM=
Subject key identifier: 56:0D:42:E1:A3:1E:16:A5:0C:E6:9E:12:2B:61:00:35:1C:1E:41:53
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 12C32F0F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vg1C4aMeFqUM5p4SK2EANRweQVM.roa
Signing time: Mon 07 Mar 2022 16:36:01 +0000
ROA not before: Mon 07 Mar 2022 16:36:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207111
IP address blocks: 2a0e:b107:1900::/48 maxlen: 48
2a0e:b107:1901::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314781455 (0x12c32f0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 7 16:36:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=560d42e1a31e16a50ce69e122b6100351c1e4153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e1:af:7c:15:09:64:4c:86:33:e9:fc:37:98:
5f:19:85:1b:78:6a:94:5b:b4:0b:66:40:5a:76:b0:
c2:0d:55:06:1a:90:ba:5c:3c:34:b7:79:9d:20:a6:
46:f4:aa:61:ac:98:10:1a:fe:04:01:85:19:50:a4:
d7:ce:c6:e3:c5:64:98:a7:9b:a0:19:f9:b1:71:f0:
26:3b:bc:94:14:e0:c2:38:05:95:83:12:01:7a:74:
9a:ca:c7:71:62:89:bd:60:c0:de:1f:fc:0c:1a:23:
6a:b0:a2:3e:41:43:95:1f:11:14:44:1e:be:03:4b:
a2:e0:a0:5e:ae:96:ec:25:02:33:de:31:4c:1c:76:
6b:47:c5:28:a0:68:e8:73:ae:6c:7c:d0:bd:06:4c:
9b:8b:b0:e6:14:0c:c8:43:0b:9f:0f:81:59:a1:89:
3d:42:82:76:4e:6e:f8:ac:05:d3:cd:67:02:64:aa:
0a:0c:3c:9a:8a:de:fa:19:56:71:b3:31:8f:53:b8:
e8:88:04:b3:0b:fc:c5:36:9c:f6:82:13:ac:eb:06:
56:5f:69:07:8b:a4:51:6f:a7:2e:a2:d7:5c:62:57:
1b:2b:b3:7f:ea:07:bc:a9:68:5c:37:a9:fe:3c:6b:
f7:02:c8:22:66:62:51:d2:4a:bf:0b:f0:26:9b:33:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0D:42:E1:A3:1E:16:A5:0C:E6:9E:12:2B:61:00:35:1C:1E:41:53
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vg1C4aMeFqUM5p4SK2EANRweQVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1900::/47
Signature Algorithm: sha256WithRSAEncryption
2f:f9:0c:da:19:12:f0:a5:59:8d:06:8c:3e:a9:f9:5d:bb:a8:
dd:6d:ee:8e:39:08:b5:2d:45:cd:db:f4:ae:6e:50:49:8d:e8:
da:b3:69:8d:bf:73:a4:74:2a:5e:84:ca:f4:b5:0b:25:f8:b3:
17:22:66:96:21:d2:af:a5:25:69:d5:d6:9e:d7:46:dc:ba:83:
f1:7a:7e:10:15:00:cd:1d:28:e9:6f:e6:09:5d:d1:de:27:80:
93:1d:3b:98:b7:34:33:02:a2:50:1f:ed:3b:40:1e:b0:9b:8b:
aa:3d:41:4a:03:57:75:63:31:20:19:49:a7:77:54:4e:15:76:
82:aa:45:c6:2a:40:57:45:30:be:60:98:dd:fe:5f:ea:91:62:
d4:bd:57:4e:86:67:09:8a:ef:5e:8a:34:22:d0:16:a3:29:1e:
a1:00:5b:64:3f:9a:3c:99:e0:96:e7:f4:39:33:2a:da:9b:99:
5e:c4:28:8a:e9:99:f5:1f:f8:3c:00:71:a4:67:3d:33:c7:59:
3c:42:3d:65:46:e5:91:a4:e8:41:1f:3e:a0:04:68:76:d3:4d:
dd:da:55:64:7b:5a:57:85:ec:46:6e:67:0d:a4:91:81:e5:7c:
18:6a:a2:7b:ed:f9:bb:eb:84:53:2f:69:3a:29:6c:66:c5:07:
d4:51:f9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:32 2024 by rpki-client on console-fra.rpki-client.org