Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bPfGJxemn6LeKC3oTIa6CbySrXY.roa
File: bPfGJxemn6LeKC3oTIa6CbySrXY.roa (raw, json)
Hash identifier: UIbM4K+qtmX65rq8MNkyF+hc6efPw6m9MuruLAHd0+s=
Subject key identifier: 6C:F7:C6:27:17:A6:9F:A2:DE:28:2D:E8:4C:86:BA:09:BC:92:AD:76
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 1422ABF3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bPfGJxemn6LeKC3oTIa6CbySrXY.roa
Signing time: Sun 01 May 2022 10:19:58 +0000
ROA not before: Sun 01 May 2022 10:19:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210320
IP address blocks: 2a0e:b107:18c2::/48 maxlen: 48
2a0e:b107:18c1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337816563 (0x1422abf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 1 10:19:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cf7c62717a69fa2de282de84c86ba09bc92ad76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:c8:57:cb:f4:32:f0:30:e8:51:e5:a8:62:
c3:9e:dc:26:40:72:e3:b0:b3:ce:b5:8f:fd:2e:09:
9a:f5:c3:7d:58:a1:f4:d2:f9:5f:85:08:02:1d:3f:
49:4c:0c:94:33:94:82:cc:50:7b:ce:f5:0b:62:f3:
30:cf:f0:1c:f2:d6:cc:f5:71:07:44:71:4a:98:ec:
5b:a8:46:a3:8f:0f:16:4c:a6:25:d0:26:af:67:ff:
fa:d1:d2:63:66:90:73:13:e7:28:cb:4f:bf:85:22:
39:78:2e:b7:ed:03:8c:1c:a9:a9:8d:6f:c6:83:32:
7a:cf:8c:05:63:3c:8a:12:2f:06:72:a4:2c:6f:b7:
5d:d2:bb:72:98:35:c9:24:8e:72:88:c9:e5:c5:cb:
0d:76:e6:2e:1b:8a:5e:5a:49:46:ff:c4:57:1c:0f:
5f:1a:0d:41:18:dd:a2:a4:22:e5:d6:72:1d:83:a9:
5b:0d:15:35:d5:19:30:e9:94:02:00:f0:f1:b2:b0:
0a:72:91:4b:c6:7d:8e:53:c0:ac:4c:0f:44:ba:b0:
42:74:55:a8:97:ba:8e:dc:8d:44:87:90:75:9f:70:
1b:89:9f:ef:aa:87:bc:64:5a:dc:9f:51:33:c7:96:
ee:a8:03:77:05:3e:d3:2d:e3:60:fe:38:04:6b:52:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F7:C6:27:17:A6:9F:A2:DE:28:2D:E8:4C:86:BA:09:BC:92:AD:76
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bPfGJxemn6LeKC3oTIa6CbySrXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:18c1::-2a0e:b107:18c2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ad:95:5a:43:d4:0e:50:16:18:dc:8f:aa:45:65:6c:7e:13:df:
ef:b1:60:45:4a:2a:0d:f9:74:95:2b:4f:41:58:6f:ff:71:d4:
9c:12:03:ae:42:29:19:d1:93:89:e5:67:8a:48:c0:15:26:23:
8c:3c:cd:71:26:15:e4:57:c8:8b:d8:10:07:04:6a:76:39:67:
2b:06:03:51:34:6f:b5:ba:a1:15:c8:6f:ef:52:20:63:28:1b:
f1:36:d6:33:ea:42:23:8a:e8:9a:0d:07:58:2b:3b:30:dc:6d:
c8:10:b7:c8:af:1f:4c:dd:6f:47:0d:10:1d:af:ba:d7:ac:53:
ea:45:00:f9:b9:5e:02:10:6b:45:d3:ad:c7:ac:57:5f:8c:4f:
d1:5a:68:90:b9:52:1f:c6:ac:38:e5:4a:5d:90:b6:16:ee:81:
01:b4:18:89:7a:3d:c3:e2:eb:5b:56:55:12:d6:a8:c1:2c:b5:
a0:02:ed:6c:c9:91:86:59:af:a8:8f:2e:17:f5:f8:79:38:3d:
55:59:3a:17:9e:6d:f4:99:a9:ba:08:f0:b8:0d:be:7f:a1:bc:
28:22:0f:8e:a4:30:3b:4b:19:2d:e1:6f:96:f9:ed:a7:47:0d:
f4:b1:65:ef:ab:32:21:a0:99:b8:d9:1e:b1:28:e6:50:2f:23:
b3:75:6e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:34 2024 by rpki-client on console-fra.rpki-client.org