Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_vh0968z0mVOj-La84_I8WMJfPo.roa
File: _vh0968z0mVOj-La84_I8WMJfPo.roa (raw, json)
Hash identifier: fARSUr/0TkYbsVFUcgs9KygVX8iVdzqRzj82NvINz/k=
Subject key identifier: FE:F8:74:F7:AF:33:D2:65:4E:8F:E2:DA:F3:8F:C8:F1:63:09:7C:FA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0184906969473FAB28DC38924AD0CA08D2F5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_vh0968z0mVOj-La84_I8WMJfPo.roa
Signing time: Sat 19 Nov 2022 15:02:17 +0000
ROA not before: Sat 19 Nov 2022 15:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209391
IP address blocks: 2a0e:b107:1c90::/48 maxlen: 48
2a10:cc40:1cf::/48 maxlen: 48
2a0e:b107:1c95::/48 maxlen: 48
2a10:cc40:1ca::/48 maxlen: 48
2a0e:b107:1c9a::/48 maxlen: 48
2a10:cc40:1c5::/48 maxlen: 48
2a0e:b107:1c9f::/48 maxlen: 48
2a10:cc40:1c0::/48 maxlen: 48
2a10:cc40:1c3::/48 maxlen: 48
2a0e:b107:1c93::/48 maxlen: 48
2a0e:b107:1c98::/48 maxlen: 48
2a10:cc40:1c7::/48 maxlen: 48
2a0e:b107:1c9d::/48 maxlen: 48
2a10:cc40:1c2::/48 maxlen: 48
2a0e:b107:1c91::/48 maxlen: 48
2a0e:b107:1c96::/48 maxlen: 48
2a0e:b107:1c9b::/48 maxlen: 48
2a10:cc40:1cc::/48 maxlen: 48
2a0e:b107:1c94::/48 maxlen: 48
2a0e:b107:1c99::/48 maxlen: 48
2a10:cc40:1ce::/48 maxlen: 48
2a0e:b107:1c9e::/48 maxlen: 48
2a10:cc40:1c9::/48 maxlen: 48
2a10:cc40:1c4::/48 maxlen: 48
2a0e:b107:1c92::/48 maxlen: 48
2a10:cc40:1cd::/48 maxlen: 48
2a0e:b107:1c97::/48 maxlen: 48
2a10:cc40:1c8::/48 maxlen: 48
2a0e:b107:1c9c::/48 maxlen: 48
2a10:cc40:1cb::/48 maxlen: 48
2a10:cc40:1c6::/48 maxlen: 48
2a10:cc40:1c1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:90:69:69:47:3f:ab:28:dc:38:92:4a:d0:ca:08:d2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 19 15:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fef874f7af33d2654e8fe2daf38fc8f163097cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:f7:7e:9e:f9:c2:c7:96:b7:13:36:ce:96:
5b:55:4f:10:c7:d2:f1:69:0c:3f:a2:b1:1d:24:ec:
d0:42:39:e0:34:bd:d0:e8:24:a5:2a:42:01:b6:2e:
62:89:a3:e9:14:f8:28:e2:e1:c6:ce:4f:b5:af:06:
d1:4c:83:83:f0:a8:54:f9:d3:f3:63:29:94:9c:9c:
3f:a7:82:fc:6a:69:46:1e:b8:3e:18:71:40:ef:40:
95:f8:de:39:d3:51:a4:bf:73:4d:15:29:7f:46:da:
f2:32:35:ce:ee:f8:c4:36:41:0c:c2:f7:41:72:65:
27:f7:6f:0e:39:50:f2:00:dd:33:c6:f2:d9:67:54:
3d:c5:49:81:7f:41:57:36:2d:d3:27:7e:cc:0a:4c:
9b:12:77:b9:d1:38:4b:d9:84:65:07:84:d7:f6:e6:
12:f5:90:c1:fc:1b:04:43:94:b5:aa:5a:e5:44:b8:
d4:6b:aa:65:83:c4:e9:eb:59:c9:bd:28:90:20:21:
70:f5:32:c7:4a:af:23:19:fe:5a:f9:5e:ec:64:90:
f1:9b:44:b8:eb:8d:f4:41:42:88:67:a9:cd:a1:20:
1f:a8:a5:f0:0c:9d:24:78:e1:0a:0b:1c:3e:d8:50:
f7:2a:cf:d9:8f:a5:0e:dc:16:9d:17:29:11:e6:51:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F8:74:F7:AF:33:D2:65:4E:8F:E2:DA:F3:8F:C8:F1:63:09:7C:FA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_vh0968z0mVOj-La84_I8WMJfPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c90::/44
2a10:cc40:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
c6:65:88:75:d6:7f:26:99:7e:f4:42:8f:06:49:82:4e:10:99:
80:4c:ed:e6:db:4a:1d:da:cb:fc:92:1d:b9:69:87:b8:20:61:
c2:67:a1:e5:ec:6c:4f:a1:ed:cf:f8:a4:96:9c:8d:c7:fe:bd:
3a:d2:cc:2b:4a:63:df:c2:7f:5c:55:94:26:bb:21:6d:1c:e7:
98:03:29:8e:c3:29:9c:7d:15:31:82:cf:4d:bf:39:f4:c6:ec:
0a:f4:76:35:0e:91:02:53:61:99:4c:95:ff:09:a4:4f:25:e5:
af:2a:f4:8a:c0:a0:b6:4f:c4:c4:dc:b1:65:96:4e:23:4e:c1:
c2:8d:40:e4:3b:e0:aa:25:b8:b3:cd:86:e6:27:52:80:9e:69:
2a:eb:b9:5d:5d:74:ad:11:10:17:c7:e3:58:46:e7:b3:a6:7e:
39:fa:d4:b6:fa:26:84:67:6e:d8:31:35:88:5c:57:14:42:f5:
ce:b4:92:6e:07:fa:85:bd:85:44:b7:8c:9d:cc:ef:6d:d0:86:
fa:ab:41:8c:92:0e:6a:cb:09:6e:8e:ce:2b:dc:83:48:96:98:
a0:2d:81:9f:59:84:c9:95:ea:5e:e4:95:a5:aa:bf:b1:38:1e:
c7:a5:38:aa:4d:5f:99:08:f2:46:a4:2d:59:61:ce:8a:f3:16:
5b:3f:81:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-fra.rpki-client.org