Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d6JC73-fj6F80S_lgqZY7w9acE0.roa
File: d6JC73-fj6F80S_lgqZY7w9acE0.roa (raw, json)
Hash identifier: zSCnV1RGxlIPeYPfApCcBUTGDnX9Wz8lNkzGcgJh9zo=
Subject key identifier: 77:A2:42:EF:7F:9F:8F:A1:7C:D1:2F:E5:82:A6:58:EF:0F:5A:70:4D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01831C5E973F67EC859772AEA11CE2CE5E9C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d6JC73-fj6F80S_lgqZY7w9acE0.roa
Signing time: Thu 08 Sep 2022 09:11:44 +0000
ROA not before: Thu 08 Sep 2022 09:11:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209225
IP address blocks: 2a10:cc40:102::/48 maxlen: 48
2a10:cc40:100::/44 maxlen: 48
2a10:cc40:100::/48 maxlen: 48
2a10:2f00:17e::/48 maxlen: 48
2a10:cc40:101::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:5e:97:3f:67:ec:85:97:72:ae:a1:1c:e2:ce:5e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 8 09:11:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77a242ef7f9f8fa17cd12fe582a658ef0f5a704d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:d9:1f:b2:6e:d0:8c:bc:38:9c:39:4a:36:
a6:56:03:1e:cd:7c:11:51:23:ba:5a:44:6b:46:c6:
11:e8:b4:87:bd:eb:17:89:a6:fa:d3:06:56:a1:67:
c9:a4:90:3f:ba:b5:2f:31:13:c3:f6:a9:f6:dd:71:
55:16:a1:34:28:16:4e:be:6a:f0:e9:1f:54:9c:83:
be:44:79:91:c9:50:64:13:ce:16:9d:23:b1:61:f2:
ed:23:4e:82:69:d4:3b:8a:39:fb:7b:d1:1e:ea:1c:
7b:da:46:33:7b:30:50:73:e4:6d:31:76:08:6b:78:
1d:cb:10:02:a7:4a:ee:b1:3f:20:63:dc:f8:a0:7f:
59:a4:a1:f8:46:1e:00:a6:ea:1e:6c:e1:42:ed:ae:
55:ac:3b:ef:0a:6c:67:99:bb:07:da:27:56:05:b5:
ca:56:e2:12:b5:49:d8:eb:84:fc:50:1d:e5:4d:96:
43:e8:c9:18:2b:c8:3a:b3:17:07:04:03:90:52:9a:
25:23:b2:3a:6b:56:05:47:62:2b:f1:b1:c1:ca:f5:
ba:f7:b3:94:d6:a8:f5:a2:8b:fd:96:c0:9c:29:a8:
3a:81:8a:a2:81:23:8b:cb:41:56:c9:22:29:92:e3:
c3:b2:94:eb:bf:dc:31:86:83:e9:8a:c5:6e:ca:cd:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A2:42:EF:7F:9F:8F:A1:7C:D1:2F:E5:82:A6:58:EF:0F:5A:70:4D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d6JC73-fj6F80S_lgqZY7w9acE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:2f00:17e::/48
2a10:cc40:100::/44
Signature Algorithm: sha256WithRSAEncryption
16:16:25:b5:fe:11:7d:d5:c9:ef:d7:51:cd:9f:76:7b:cf:97:
2d:0e:0b:ae:79:27:77:4a:3a:1c:81:45:f0:73:03:49:69:fe:
cf:c7:b5:62:f4:1a:7c:51:fb:29:76:aa:65:5f:2b:21:e8:e1:
b2:97:2b:62:16:2a:20:52:3f:fe:b1:d5:c0:fd:c4:3c:b5:ab:
52:3b:50:19:d6:03:4c:4d:e5:09:1d:4f:1b:df:b6:a2:c9:15:
7a:7d:5b:0b:ae:01:68:a1:42:87:47:c2:f5:d1:02:ac:be:d8:
26:03:b2:7c:bd:2a:0e:f7:39:74:69:93:a4:9e:ab:f1:99:cd:
d0:e7:ff:b2:df:b6:a3:e0:a0:4c:81:ba:e9:f3:b4:e8:17:2a:
40:5b:e6:90:95:0a:b0:28:e8:c5:05:1b:e4:c5:e6:6c:63:da:
e3:00:4c:82:8a:2e:25:1c:88:27:ee:10:80:c1:18:f3:65:e6:
38:be:ac:35:6b:0b:f6:d5:0d:fd:af:84:aa:19:3e:d9:1d:6f:
bb:60:69:ec:67:30:8e:a5:d5:d9:cc:7d:0f:23:74:62:f7:eb:
14:f3:38:90:e9:6f:b8:fe:4f:78:ba:10:af:c3:e3:a8:10:02:
ab:2b:35:1e:db:15:43:ec:e8:5b:4b:ef:aa:6d:df:ff:61:64:
8c:1a:4e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org