Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZU5P9N3KFJOgAuzDc40he8_QuvU.roa
File: ZU5P9N3KFJOgAuzDc40he8_QuvU.roa (raw, json)
Hash identifier: xu9i3FoSB7CDVWffVuKaMUYrU89VocCOaxFl1o2ThQU=
Subject key identifier: 65:4E:4F:F4:DD:CA:14:93:A0:02:EC:C3:73:8D:21:7B:CF:D0:BA:F5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01840844BC4B2C698C84F298A48B4695D574
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZU5P9N3KFJOgAuzDc40he8_QuvU.roa
Signing time: Mon 24 Oct 2022 04:33:53 +0000
ROA not before: Mon 24 Oct 2022 04:33:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209391
IP address blocks: 2a0e:b107:1c90::/48 maxlen: 48
2a10:cc40:1c2::/48 maxlen: 48
2a10:cc40:1c0::/48 maxlen: 48
2a10:cc40:1c1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:08:44:bc:4b:2c:69:8c:84:f2:98:a4:8b:46:95:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 24 04:33:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=654e4ff4ddca1493a002ecc3738d217bcfd0baf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:eb:c2:16:55:7a:07:28:ed:dc:f6:42:b4:
af:5a:89:a2:7b:fd:a8:91:05:63:d6:f9:55:85:ff:
06:be:40:71:33:e8:1b:da:7d:d2:8e:c3:ef:e4:90:
5b:52:3a:a9:68:50:69:63:21:1f:3c:77:8d:ca:24:
42:81:97:7b:7d:15:02:98:17:84:66:79:2c:13:48:
db:c4:2f:a7:bd:25:19:ff:6a:32:09:e5:86:bf:db:
cf:e9:07:a5:0e:bc:49:4e:37:16:69:52:6e:76:cd:
dd:79:b8:4e:0d:4b:45:ae:55:e5:40:d6:29:13:0c:
81:6d:9c:03:43:58:42:46:3c:df:9f:00:36:a4:b3:
e4:93:e0:1d:e6:09:90:4e:42:a5:53:e3:4f:c0:21:
31:a1:fd:0b:ee:5e:04:67:9e:52:ad:12:8f:ab:0f:
6c:7b:9d:a3:95:bd:b3:66:56:3d:b5:d7:67:9c:f1:
5a:b0:41:34:f2:55:cf:a4:ef:6f:b0:5d:31:b6:9b:
74:c8:de:1b:72:0e:1b:3f:35:1e:30:55:2a:a8:f0:
90:4b:94:52:ac:87:d8:ba:8a:ce:b0:c2:00:0a:1b:
d9:7e:2e:c5:1b:82:74:cb:ad:1d:42:3f:c2:37:50:
73:c3:24:44:9e:1c:3f:9f:12:cb:34:bd:a6:12:c6:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4E:4F:F4:DD:CA:14:93:A0:02:EC:C3:73:8D:21:7B:CF:D0:BA:F5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZU5P9N3KFJOgAuzDc40he8_QuvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c90::/48
2a10:cc40:1c0::-2a10:cc40:1c2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5b:17:d3:ef:3c:0b:8a:8e:e4:d6:03:5e:87:c0:ef:68:b8:7c:
eb:e8:50:7c:ba:cb:04:93:5e:32:1e:27:a7:0b:61:76:f3:36:
9b:07:67:ec:6f:5c:1d:fd:6b:f1:21:80:f2:28:dd:14:63:cb:
11:8f:08:97:99:72:30:ae:65:96:ed:22:7d:53:68:76:e8:4c:
eb:d5:a1:84:5f:a0:dd:00:d9:8e:ac:dd:ef:4d:e9:63:16:6f:
81:eb:ef:72:08:df:27:2b:58:7a:2b:c7:d5:97:27:c9:95:72:
96:aa:2b:d6:01:ad:ed:3e:d0:65:5d:5a:ce:d3:d9:4b:aa:22:
9f:26:cd:11:74:ef:40:01:d7:11:d8:fd:fc:06:fa:e4:70:f2:
24:85:b2:a3:2b:ba:30:7c:18:cc:32:da:2c:51:1b:19:e7:74:
10:92:35:09:b2:a1:87:57:e0:c9:5c:f0:63:17:68:eb:b9:74:
d1:0f:49:d8:5f:fa:57:70:ef:44:b6:27:a6:81:11:2a:2c:d4:
90:8f:a9:b2:bb:eb:97:0f:85:ad:00:98:49:7d:5b:e6:c0:96:
b4:2e:96:5b:22:60:3a:8f:eb:93:49:97:c8:8e:d4:4a:f0:d3:
d3:ec:01:cd:bc:9c:ac:37:e7:5e:7b:85:27:2e:fe:dd:cc:68:
58:93:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:33 2024 by rpki-client on console-fra.rpki-client.org