Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dVUDe5MV-Neaz15ZXOE0zUqPi6k.roa
File: dVUDe5MV-Neaz15ZXOE0zUqPi6k.roa (raw, json)
Hash identifier: 9JUEreo8nOue66w/ovRXFHMaitEEntty2QSYjF3lx1Y=
Subject key identifier: 75:55:03:7B:93:15:F8:D7:9A:CF:5E:59:5C:E1:34:CD:4A:8F:8B:A9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 12933E06
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dVUDe5MV-Neaz15ZXOE0zUqPi6k.roa
Signing time: Sat 05 Mar 2022 03:37:37 +0000
ROA not before: Sat 05 Mar 2022 03:37:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213383
IP address blocks: 2a0e:b107:800::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311639558 (0x12933e06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 5 03:37:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7555037b9315f8d79acf5e595ce134cd4a8f8ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:e4:aa:83:c7:d1:78:6e:95:54:df:38:d4:
63:94:98:8a:39:f2:ad:20:e6:7a:c3:30:8b:69:c3:
98:fe:66:5c:44:92:0d:24:d7:57:af:8f:97:04:13:
80:b0:5c:49:70:f1:61:fe:4d:9c:11:fd:d1:69:79:
3e:ad:31:08:25:28:d1:52:9d:72:1c:96:b2:70:69:
1b:ba:66:bb:00:d0:3e:02:1a:d2:2e:69:f8:55:51:
44:ce:af:93:58:81:d3:43:fc:89:4f:01:b1:d1:b0:
fe:fa:66:08:ef:46:7f:e8:0b:51:40:a7:a2:e1:17:
7c:c4:39:49:83:89:49:cd:17:c4:fe:dc:58:24:8d:
a6:1d:46:ec:2b:12:62:be:b2:01:f9:a8:ea:d8:e2:
87:ba:0c:67:28:ad:19:62:34:85:c8:9c:e3:50:a2:
19:dd:23:19:64:5e:8f:bd:92:c3:07:ae:8f:b6:0a:
c8:18:44:3f:12:52:c1:6d:dd:d0:f7:1d:a8:bb:30:
1b:ec:d7:bc:be:06:80:a1:fe:2d:b6:d1:83:d1:86:
ed:e2:c1:c6:01:b6:43:b4:ae:9f:9a:5f:c3:73:ec:
e9:ed:c3:ad:3c:f6:af:a5:3f:03:81:71:76:3d:92:
b5:a1:ed:9f:74:97:b3:68:2d:a2:97:82:de:a9:97:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:03:7B:93:15:F8:D7:9A:CF:5E:59:5C:E1:34:CD:4A:8F:8B:A9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dVUDe5MV-Neaz15ZXOE0zUqPi6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:800::/44
Signature Algorithm: sha256WithRSAEncryption
3c:71:d2:4d:a2:59:8a:0c:aa:f7:24:c1:ab:45:b8:65:0d:31:
23:7b:12:c4:11:59:4d:8f:9f:2c:d6:23:80:73:7f:2a:7a:6a:
cc:c3:90:72:3c:e0:10:c4:d6:3b:a1:da:65:ac:c3:48:8b:41:
fa:cd:db:48:96:44:9a:89:f1:bd:c1:ec:7e:87:5b:c4:67:bd:
eb:63:64:00:43:80:94:40:3f:25:f4:08:28:41:6a:4e:c9:63:
78:75:72:ae:34:bb:ef:1a:da:04:c9:2e:25:d0:c7:6b:33:9e:
05:2d:57:e8:1c:d6:32:a2:48:32:fd:16:c7:a0:a2:5f:71:ae:
e3:14:b3:e1:4f:8d:97:66:3a:88:04:b6:b8:ac:be:21:cf:cd:
0e:ab:38:c9:34:64:f0:4d:ee:94:5c:79:61:d1:bb:c7:e6:ab:
f1:24:5a:40:c6:d0:aa:0f:d7:68:fd:4a:1d:45:91:b9:83:38:
b2:6c:4e:25:09:00:ba:f5:41:cc:7e:0f:c6:f2:2e:32:44:a1:
f5:7c:5e:dc:9e:d1:b2:a2:ec:9c:cd:47:82:0a:0b:ce:b7:36:
60:54:1f:7d:bf:7e:70:69:cb:53:fb:ae:12:44:e4:e6:e5:d1:
d1:11:76:ff:b8:9f:6f:1a:02:65:18:bf:ee:1c:14:33:94:5d:
87:58:2e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:08 2024 by rpki-client on console-ams.rpki-client.org