Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/brRmLHiyPFJ1SjOtiECnKc_x19Y.roa
File: brRmLHiyPFJ1SjOtiECnKc_x19Y.roa (raw, json)
Hash identifier: 5SOUFE8DdvzNW6t3tvy04UraSPAyEiJcffa5IikIinM=
Subject key identifier: 6E:B4:66:2C:78:B2:3C:52:75:4A:33:AD:88:40:A7:29:CF:F1:D7:D6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 11A11EBD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/brRmLHiyPFJ1SjOtiECnKc_x19Y.roa
Signing time: Sat 29 Jan 2022 17:37:05 +0000
ROA not before: Sat 29 Jan 2022 17:37:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59922
IP address blocks: 2a10:cc44:112::/48 maxlen: 48
2a10:cc44:110::/48 maxlen: 48
2a0e:b107:13de::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295771837 (0x11a11ebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 29 17:37:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6eb4662c78b23c52754a33ad8840a729cff1d7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:c9:a1:dc:16:2e:ec:fe:0e:17:11:be:06:
30:c8:fa:89:20:4b:a3:44:d5:fd:da:c1:18:cf:bf:
ae:2a:0d:a5:f8:ff:9f:d5:01:c4:4b:05:f5:71:8c:
67:a0:46:2d:a9:24:12:89:72:e5:48:2d:04:6d:af:
5d:53:fa:50:e9:e5:39:e2:50:1c:e4:f1:51:d4:43:
64:05:69:67:b2:08:f9:fb:be:8f:e3:86:fe:d7:df:
33:4d:c8:05:a2:c3:c7:92:b2:6d:1d:66:bf:1d:6b:
e5:a1:d9:ee:d2:47:10:04:29:75:e6:e5:01:92:0e:
1f:2d:eb:50:53:50:b0:0b:75:16:66:10:5b:3e:f2:
cf:98:b7:9f:41:c1:0c:82:8d:d9:18:f7:ea:5a:e6:
3d:30:8f:f8:ca:74:70:3a:e8:fd:4d:59:f5:62:98:
af:f1:28:46:b5:4d:f4:45:a2:ab:9f:b9:15:d3:0d:
b6:03:d1:c2:68:76:67:f3:d8:8c:89:25:30:e8:d5:
5d:a5:04:80:e4:1f:14:dd:3b:d4:b1:b4:52:f4:99:
64:90:a5:00:ab:8b:52:b5:d7:cc:f3:24:6a:3d:98:
53:47:18:4f:58:33:41:57:e0:00:60:f5:54:eb:03:
2d:6d:d0:12:1c:c9:2a:7e:94:0f:8d:0e:3b:8d:79:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B4:66:2C:78:B2:3C:52:75:4A:33:AD:88:40:A7:29:CF:F1:D7:D6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/brRmLHiyPFJ1SjOtiECnKc_x19Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:13de::/48
2a10:cc44:110::/48
2a10:cc44:112::/48
Signature Algorithm: sha256WithRSAEncryption
7e:88:cb:4b:ff:eb:0c:65:53:a4:e2:2a:05:77:d1:ec:89:11:
42:fe:bd:b4:03:38:2f:1b:bf:a2:48:0c:ee:3f:77:42:c4:99:
e7:4f:5c:5c:53:2e:7e:ee:9c:6b:8e:fe:3a:6b:70:c5:7b:22:
02:0b:b5:5c:12:1e:c2:bf:ba:03:d3:1b:52:65:8f:37:1d:4d:
b8:1c:b1:a5:b5:7c:3b:b1:a7:c7:c1:e1:3d:f1:3d:c6:46:b0:
f0:e3:a6:c4:6c:5e:86:9e:7b:56:9f:b1:95:8d:aa:3e:67:74:
95:dc:da:84:bb:87:33:2a:80:f1:8c:5e:94:a5:cd:7a:b5:c7:
6b:74:13:b1:57:f1:7e:ec:8f:ea:bc:2d:b3:cb:4e:75:fa:49:
f2:38:9d:75:bf:5d:0f:b8:5e:8a:2d:8a:a8:d8:40:99:2b:3c:
23:d4:8a:59:ba:a1:fe:42:ff:47:b6:e2:3a:e7:74:11:e4:83:
75:90:7b:18:cd:83:36:bb:5b:1d:d1:d8:e0:d2:a0:67:1a:b9:
4a:49:26:83:d1:ee:ea:72:2c:ae:2c:2c:45:e1:bd:e4:8f:81:
a6:6f:96:9b:9d:f9:42:81:32:ec:6d:a8:90:25:cd:81:ff:f1:
15:1e:47:aa:da:d6:23:c6:60:50:c2:3b:2f:e5:28:da:d8:45:
2e:5b:d3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:01 2023 by rpki-client on console-ams.rpki-client.org