Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W-0fmA3dmDhD1x6KXvxOjxlZrl8.roa
File: W-0fmA3dmDhD1x6KXvxOjxlZrl8.roa (raw, json)
Hash identifier: kAkWvoCh/PD9VUkFLKKdDBLvVnauGhzUVcTaUngPYL4=
Subject key identifier: 5B:ED:1F:98:0D:DD:98:38:43:D7:1E:8A:5E:FC:4E:8F:19:59:AE:5F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 1087A011
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W-0fmA3dmDhD1x6KXvxOjxlZrl8.roa
Signing time: Sat 01 Jan 2022 09:04:54 +0000
ROA not before: Sat 01 Jan 2022 09:04:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141237
IP address blocks: 2a0e:b107:df4::/48 maxlen: 48
2a0e:b107:9dc::/48 maxlen: 48
2a0e:b107:df1::/48 maxlen: 48
2a0e:b107:df3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277323793 (0x1087a011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:04:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bed1f980ddd983843d71e8a5efc4e8f1959ae5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:b3:81:f2:9b:ea:0c:ba:d1:7d:09:10:5d:
d3:cd:55:0b:da:b8:a4:26:0c:ec:36:30:4d:8a:01:
06:67:fa:04:8a:98:a3:97:b1:8c:c2:fe:cd:e5:db:
22:12:7d:8c:ce:06:32:f0:0f:05:26:62:ff:47:6e:
42:e4:74:a0:cb:bc:64:dd:bd:dd:8c:9a:00:ee:ca:
6e:fc:7c:3f:64:2e:f7:80:9b:69:a9:56:96:97:b7:
a7:df:db:b1:8c:d7:7a:de:2b:7d:58:21:0e:4c:74:
bd:aa:fc:bb:1d:8c:48:46:14:2f:6a:fa:c1:f8:57:
b8:ed:97:7c:aa:d8:27:58:6f:de:4e:20:70:05:86:
07:f4:84:25:af:29:c4:2a:2e:92:72:10:aa:fc:49:
69:46:18:95:63:8d:d4:ef:12:29:e3:34:e9:6f:60:
76:fb:33:3f:c6:78:40:8c:b9:a3:ec:fd:1f:a0:88:
42:90:d0:89:27:b7:a6:e4:4a:8d:9d:97:bb:09:b6:
0a:b0:38:89:55:f1:36:b4:a6:fc:f8:2d:64:60:18:
f2:c8:44:9a:fa:ff:0d:68:6b:2d:4e:a3:8a:ba:d6:
c4:3e:02:f8:5a:c6:63:77:3f:35:d1:e2:21:af:4b:
51:fc:7f:1b:cf:8c:32:5f:f0:16:96:42:99:cf:26:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:ED:1F:98:0D:DD:98:38:43:D7:1E:8A:5E:FC:4E:8F:19:59:AE:5F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W-0fmA3dmDhD1x6KXvxOjxlZrl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:9dc::/48
2a0e:b107:df1::/48
2a0e:b107:df3::-2a0e:b107:df4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
27:eb:7f:fb:38:84:84:6e:6c:8e:6d:f1:39:3d:a8:ce:3f:74:
11:b5:19:22:a1:52:09:c9:fc:10:43:a0:ea:6c:8d:51:ba:26:
9e:0f:15:c5:30:10:69:e2:10:4f:9d:49:f7:f9:35:8d:b7:87:
61:50:e8:dc:c0:2f:28:e4:15:41:1e:94:64:61:29:d9:29:a0:
dd:06:96:eb:4f:da:14:94:ff:ba:19:82:11:25:c1:e0:97:b5:
a1:a7:97:c4:63:63:b5:2e:ff:12:af:d9:02:01:63:94:5a:89:
37:c8:1c:fb:ee:97:6e:9e:56:66:32:a4:c7:3b:8b:59:76:9f:
ed:5d:fe:a2:4a:be:cd:3f:86:fc:b1:d3:10:ae:32:73:46:c2:
4f:fa:8a:9e:c6:15:54:81:60:c2:86:7c:33:86:1c:00:2d:39:
59:06:53:30:4b:2d:66:c2:da:82:e2:49:32:70:ae:ca:ca:ef:
59:81:a9:44:51:bc:b6:86:7a:8c:e6:79:8e:27:4d:7e:4f:4a:
b2:a0:a4:b8:78:91:a4:8b:99:06:c3:19:09:c4:b9:b3:ab:7c:
8a:a7:8c:3a:5c:c9:0d:dc:42:0b:cb:07:f9:d2:75:30:4d:1f:
3b:6a:95:8f:d3:fd:3d:9a:2f:6b:de:f9:28:96:d5:02:67:84:
dd:e2:40:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:32 2024 by rpki-client on console-fra.rpki-client.org