Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YHPuAvygq24nAeaZAcfHGxJIPXs.roa
File: YHPuAvygq24nAeaZAcfHGxJIPXs.roa (raw, json)
Hash identifier: hpF0J8M2x5z0oq2bBq4ziGbMKGGNfLI3jpP9IEKnofE=
Subject key identifier: 60:73:EE:02:FC:A0:AB:6E:27:01:E6:99:01:C7:C7:1B:12:48:3D:7B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 14454FA9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YHPuAvygq24nAeaZAcfHGxJIPXs.roa
Signing time: Mon 02 May 2022 20:50:51 +0000
ROA not before: Mon 02 May 2022 20:50:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210445
IP address blocks: 2a0e:b107:1a60::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340086697 (0x14454fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 2 20:50:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6073ee02fca0ab6e2701e69901c7c71b12483d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:1f:95:db:a8:b4:a7:d7:c9:39:ce:23:a8:
0b:70:d6:2f:51:8a:fa:f3:7a:14:ac:a1:7f:cb:7e:
02:84:8a:94:b8:e0:cf:ea:e4:38:71:8e:df:2a:16:
d6:ca:46:03:46:6c:c8:c7:1d:0f:e4:06:88:d8:27:
be:1f:8d:14:07:f5:fe:ef:ce:bc:0b:1c:59:42:6b:
75:be:dd:63:fe:16:a9:46:ea:fa:06:16:91:1e:21:
25:05:83:34:19:21:9f:2b:55:8c:55:b6:da:6a:01:
fb:4a:42:0e:7c:db:67:4f:5f:22:54:35:5d:6d:9c:
fd:89:84:93:8a:f9:ea:fa:21:bd:33:96:f0:09:5e:
52:ca:88:67:a7:e4:2d:52:17:53:f6:4e:98:c0:57:
47:14:89:c7:1a:65:e2:90:92:78:52:f1:a5:cc:e3:
6a:01:53:d2:1b:eb:93:69:26:16:4e:72:ab:53:ee:
23:b3:a2:c2:5b:7c:24:2f:6f:a0:dd:19:89:17:d8:
1b:fc:27:e3:97:56:d3:4e:cc:9a:5b:bb:1a:b3:eb:
0a:71:1d:91:3d:93:9a:9f:28:29:83:27:b7:60:8d:
1a:a9:c2:69:e1:a1:e6:44:b8:52:e3:f4:25:53:fd:
ee:f2:08:9c:27:d2:88:fb:93:b1:19:2d:63:b4:5e:
2c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:73:EE:02:FC:A0:AB:6E:27:01:E6:99:01:C7:C7:1B:12:48:3D:7B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YHPuAvygq24nAeaZAcfHGxJIPXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1a60::/44
Signature Algorithm: sha256WithRSAEncryption
0e:ff:86:f8:64:89:f8:2e:ce:4f:84:36:59:1d:e5:34:66:f2:
fb:29:26:78:b5:9d:3e:af:0e:3b:2a:15:85:cb:e4:f6:38:f4:
4c:e2:69:f8:06:16:36:1e:70:57:5e:a9:16:c3:aa:ac:0c:26:
b8:7b:9c:e5:7a:54:e5:28:df:00:db:8b:f2:08:a5:95:cd:9f:
d6:b9:84:93:bb:de:39:cc:71:1a:c8:d5:8c:df:84:8c:ff:76:
ac:5e:f7:ee:29:15:a7:30:47:ff:f0:58:d5:79:61:86:2e:2a:
ca:d0:1f:e9:32:6e:9e:be:06:86:b9:53:f6:93:7b:ac:5d:3d:
98:b9:7d:af:f7:28:33:c7:a6:5b:cf:e6:81:d1:58:4b:b5:d8:
72:45:27:04:ef:d0:6d:93:01:27:88:e8:d0:c4:81:65:fc:d4:
2e:91:99:ac:97:95:14:1f:52:3e:8a:ae:66:9a:63:b9:28:9e:
62:45:87:ed:ea:5a:08:94:9d:07:87:b1:7d:94:c6:7f:dd:a2:
4e:44:b2:a0:fd:b7:05:76:07:3f:6b:35:72:ba:61:dc:ad:d8:
8d:0c:95:bc:0f:a8:b2:52:d5:74:55:68:08:c6:2a:ad:7b:e3:
be:bb:00:3a:ea:3a:fe:ca:5a:46:8d:8e:e1:78:5a:f9:8a:2d:
c9:c9:22:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:33 2024 by rpki-client on console-fra.rpki-client.org