Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aLwWgsYU5EXbrz61zzPdvCj1Yv4.roa
File: aLwWgsYU5EXbrz61zzPdvCj1Yv4.roa (raw, json)
Hash identifier: 6TTj3VtpAlDzXjAvvEX0U+F6LJSE1tM5ssBPVY3kI5w=
Subject key identifier: 68:BC:16:82:C6:14:E4:45:DB:AF:3E:B5:CF:33:DD:BC:28:F5:62:FE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 13FE56C9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aLwWgsYU5EXbrz61zzPdvCj1Yv4.roa
Signing time: Sun 24 Apr 2022 19:53:33 +0000
ROA not before: Sun 24 Apr 2022 19:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212895
IP address blocks: 2a0e:b102:100::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335435465 (0x13fe56c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 24 19:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68bc1682c614e445dbaf3eb5cf33ddbc28f562fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:cb:38:64:85:a6:59:d3:6e:b8:d6:57:56:
4d:18:9e:f9:16:ac:ac:4f:6e:a4:74:68:b0:76:3b:
b3:93:d9:20:4e:6a:ff:65:61:b4:64:89:56:5e:01:
05:e0:05:c1:18:dc:9e:79:be:00:7d:61:06:1e:c0:
3e:c8:18:9b:1e:43:3a:fa:90:5f:5d:d1:9d:33:01:
30:29:60:2e:75:82:9a:9a:df:96:ec:2f:d4:ab:e1:
d1:36:0b:ba:c8:33:71:45:f0:66:e3:b7:e6:34:15:
8d:99:d9:40:53:7c:95:46:18:ea:c9:f4:ac:aa:f8:
a3:cd:47:07:ec:76:9f:ee:27:0a:b0:2b:69:82:b1:
40:30:9b:21:9f:a2:7a:18:2a:5b:8a:95:2a:ff:23:
85:ce:64:e0:07:ec:ea:74:10:46:30:70:12:bc:4b:
24:90:4d:c6:e5:dc:88:42:05:db:8e:0b:79:76:ff:
5e:78:04:f4:b0:02:fd:40:33:7b:94:91:8c:63:0b:
ea:1b:87:c0:84:a2:30:b3:34:e9:b0:e9:6c:b5:01:
8f:62:33:aa:29:80:af:bb:c9:e3:39:24:b3:f3:a9:
40:c6:d3:25:10:88:4d:9b:26:68:7b:ed:30:f9:de:
d4:83:60:dc:09:d9:44:83:22:80:7a:0b:07:4c:19:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BC:16:82:C6:14:E4:45:DB:AF:3E:B5:CF:33:DD:BC:28:F5:62:FE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aLwWgsYU5EXbrz61zzPdvCj1Yv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b102:100::/44
Signature Algorithm: sha256WithRSAEncryption
25:80:29:f7:c3:ca:21:8a:d5:8d:6d:cd:3b:b0:5d:6a:4e:64:
c1:5f:d4:a3:81:5c:73:f0:95:11:36:55:c5:40:8a:fe:15:8a:
b8:7e:ed:02:07:e3:6e:93:08:81:8e:d0:56:7f:4a:9c:3f:b0:
26:2b:11:9a:b4:44:3f:97:eb:6a:83:29:04:28:47:db:e2:39:
c8:6e:d1:2d:1a:ff:be:96:a0:d9:10:76:01:b6:b3:80:dd:b0:
ce:4e:f3:6b:01:6a:b7:22:7b:c2:d1:9b:05:82:42:79:ca:b2:
5c:43:bc:e6:22:01:e3:c6:42:30:47:ff:68:66:b4:53:5b:26:
ff:af:ee:d6:b8:51:90:b9:52:59:7c:36:18:87:92:ed:cb:1c:
cd:d8:7b:48:c0:f1:85:cf:8c:19:9f:c6:87:b2:ac:cf:ec:d2:
7f:6a:8d:16:d9:ce:f2:0d:c7:f7:6c:66:ee:50:86:4d:31:19:
5b:a3:14:15:58:37:1e:f1:45:42:2b:74:c9:36:4d:5e:ac:dd:
8c:8f:5e:bc:15:35:63:84:fd:be:a1:8b:86:bc:f1:c8:e3:a4:
e2:d8:f1:15:09:ca:a0:08:28:d2:8c:bb:16:b6:70:44:44:b0:
20:c1:47:09:85:41:4e:65:2a:4f:21:1c:e0:3d:3a:07:c1:1d:
f6:9f:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:07 2024 by rpki-client on console-ams.rpki-client.org