Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XgdQ5ahJW-k8Zab39LwXXuF2dTM.roa
File: XgdQ5ahJW-k8Zab39LwXXuF2dTM.roa (raw, json)
Hash identifier: e0opMkzpydqEw4KHfRzoEg1B+XHJ38FJ3brDRJFaM4A=
Subject key identifier: 5E:07:50:E5:A8:49:5B:E9:3C:65:A6:F7:F4:BC:17:5E:E1:76:75:33
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 10A62C54
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XgdQ5ahJW-k8Zab39LwXXuF2dTM.roa
Signing time: Sat 01 Jan 2022 09:05:13 +0000
ROA not before: Sat 01 Jan 2022 09:05:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210426
IP address blocks: 2a0e:97c0:5e0::/44 maxlen: 48
2a0e:97c0:5ee::/48 maxlen: 48
2a0e:b107:17e4::/48 maxlen: 48
2a0e:b107:17e9::/48 maxlen: 48
2a0e:97c0:5ec::/48 maxlen: 48
2a0e:b107:17ee::/48 maxlen: 48
2a0e:97c0:5e7::/48 maxlen: 48
2a0e:97c0:5e2::/48 maxlen: 48
2a0e:b107:17e0::/44 maxlen: 48
2a0e:b107:17e2::/48 maxlen: 48
2a0e:97c0:5eb::/48 maxlen: 48
2a0e:b107:17e7::/48 maxlen: 48
2a0e:97c0:5e6::/48 maxlen: 48
2a0e:b107:17ec::/48 maxlen: 48
2a0e:97c0:5e9::/48 maxlen: 48
2a0e:97c0:5e4::/48 maxlen: 48
2a0e:b107:17e0::/48 maxlen: 48
2a0e:97c0:5ed::/48 maxlen: 48
2a0e:b107:17e5::/48 maxlen: 48
2a0e:97c0:5e8::/48 maxlen: 48
2a0e:b107:17ea::/48 maxlen: 48
2a0e:97c0:5e3::/48 maxlen: 48
2a0e:b107:17ef::/48 maxlen: 48
2a0e:97c0:5e1::/48 maxlen: 48
2a0e:b107:17e3::/48 maxlen: 48
2a0e:b107:17e8::/48 maxlen: 48
2a0e:97c0:5e5::/48 maxlen: 48
2a0e:b107:17ed::/48 maxlen: 48
2a0e:97c0:5e0::/48 maxlen: 48
2a0e:b107:17e1::/48 maxlen: 48
2a0e:b107:17e6::/48 maxlen: 48
2a0e:97c0:5ef::/48 maxlen: 48
2a0e:b107:17eb::/48 maxlen: 48
2a0e:97c0:5ea::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279325780 (0x10a62c54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:05:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e0750e5a8495be93c65a6f7f4bc175ee1767533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:e6:19:66:d6:53:dd:57:85:9d:53:60:83:
13:d8:09:4d:07:c7:11:42:2d:f7:2d:87:b8:75:1f:
c1:43:f3:8d:67:1f:bf:84:7b:5f:a3:bd:f0:71:77:
f5:d7:05:6a:bf:20:dd:7e:42:51:dc:ad:34:68:e6:
fe:41:00:e2:2f:1f:09:95:64:15:a2:10:95:c0:41:
4b:95:ac:1c:c2:81:70:34:d6:1e:6b:7c:71:0a:33:
78:a6:ca:e1:e5:08:68:59:a2:06:1e:a9:b2:62:3b:
c9:11:bb:d0:de:40:73:2b:95:ce:62:2c:85:60:b1:
1d:90:6e:84:c7:b7:10:79:f2:33:b4:44:92:5b:36:
11:10:2a:3f:1a:46:81:60:cb:ca:4a:32:51:88:ed:
c5:da:21:c5:e4:f8:91:27:89:e3:cc:de:25:c7:8d:
e7:ff:68:7b:43:cc:6f:b5:e4:c4:77:5b:c0:ee:aa:
9a:f4:de:5f:83:af:53:01:c6:b1:e6:1e:c1:5e:05:
8d:f3:b6:f9:2f:dc:40:da:7a:b7:19:d5:83:ab:69:
1a:f0:ea:ab:eb:ce:73:6a:1d:a6:46:5e:58:45:9b:
6c:b7:9b:82:39:a7:99:b1:8e:15:a5:3b:25:86:7b:
bd:02:ff:fd:95:4e:19:f3:a5:d3:72:5f:b3:71:69:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:07:50:E5:A8:49:5B:E9:3C:65:A6:F7:F4:BC:17:5E:E1:76:75:33
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/XgdQ5ahJW-k8Zab39LwXXuF2dTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5e0::/44
2a0e:b107:17e0::/44
Signature Algorithm: sha256WithRSAEncryption
99:ef:9a:20:47:31:c6:92:f4:5d:d2:f6:14:40:eb:63:6e:23:
46:ad:c2:da:bc:b2:37:66:58:b6:d8:67:53:2e:74:74:20:86:
28:f5:aa:b5:30:d1:c6:7c:34:d8:34:97:e8:cb:b9:db:75:12:
7b:a9:dd:98:a2:bd:7b:73:54:ca:fb:b1:98:93:58:0c:d4:3a:
a4:81:38:e4:b7:08:2e:c0:91:91:5e:5b:99:fd:4d:b7:e4:8a:
2a:5f:b1:2d:8f:73:79:6d:2c:64:50:db:69:e7:f5:75:cc:af:
4e:20:71:45:24:af:11:f5:f6:91:31:35:57:fc:40:f8:e5:66:
fd:24:47:4a:35:09:3f:41:8c:6d:0c:4d:5a:5e:e4:1f:2f:0b:
ed:87:8f:c6:fe:dc:31:59:5a:4b:f7:ed:87:14:48:22:aa:0f:
e5:fe:d1:e5:a4:a3:c6:e5:7c:99:c4:f1:54:d1:40:b6:8d:96:
87:99:2f:99:35:b5:ba:76:59:f3:57:55:22:32:40:c2:8f:e4:
40:b0:eb:a2:71:24:83:a7:72:cc:be:7f:88:03:3c:ba:c0:28:
40:f1:78:b3:66:83:fd:bf:c9:56:a3:ca:15:ab:80:db:04:74:
3f:5d:08:2d:86:e9:d7:bf:3e:f3:85:f2:c0:1c:7f:2f:ec:9c:
d5:88:5e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:00 2023 by rpki-client on console-ams.rpki-client.org