Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dei4tLD5Y4ChLjWPQcNBu0Lt_ps.roa
File: dei4tLD5Y4ChLjWPQcNBu0Lt_ps.roa (raw, json)
Hash identifier: Yle10bJfg3x1/ghLqiicqLYCifTI4g3nDStWsM/kj/A=
Subject key identifier: 75:E8:B8:B4:B0:F9:63:80:A1:2E:35:8F:41:C3:41:BB:42:ED:FE:9B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018380C52E0E0C52C1E4B965441C6C811A51
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dei4tLD5Y4ChLjWPQcNBu0Lt_ps.roa
Signing time: Tue 27 Sep 2022 21:05:49 +0000
ROA not before: Tue 27 Sep 2022 21:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212294
IP address blocks: 2a0e:b107:1ba0::/44 maxlen: 48
2a0e:b107:1bb0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:80:c5:2e:0e:0c:52:c1:e4:b9:65:44:1c:6c:81:1a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 27 21:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75e8b8b4b0f96380a12e358f41c341bb42edfe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:08:4e:f0:4a:64:20:40:d9:39:c9:b3:a6:e5:
c4:b4:48:31:b1:0a:81:41:80:8b:88:1b:a6:b2:a9:
0f:08:a1:46:ec:66:e4:c5:8d:67:6e:a3:22:81:90:
d1:61:27:fe:95:2e:01:1b:52:ca:5a:19:40:ef:5e:
82:5f:99:7b:a9:1e:f3:09:0f:cd:78:d6:ce:8d:65:
10:21:8f:9f:3d:37:5a:06:62:46:c3:10:f1:70:7a:
92:25:ea:57:93:a3:19:03:71:a7:0e:f8:40:04:23:
b5:9b:07:49:3a:9c:61:ed:f3:ef:8c:0c:42:cb:bc:
e5:3a:b9:9e:fb:22:d7:77:f2:75:0d:17:82:1a:67:
7b:51:91:48:dd:86:6b:26:78:6f:07:4f:67:dd:a2:
b0:9f:cd:ae:48:7a:9f:97:d7:28:27:cc:a3:8e:4c:
35:36:af:f6:84:68:9c:b1:5d:cd:1a:52:0a:8f:fb:
a0:ac:22:8f:25:4a:59:c0:8d:af:db:26:76:4d:76:
91:8a:10:11:7d:46:28:81:33:0f:9a:79:6a:36:c0:
19:eb:4b:ff:d5:9f:ef:47:21:e0:25:41:72:ed:e2:
59:19:a0:c9:c4:b1:15:65:8d:73:ad:cd:88:2a:c5:
28:cd:ff:56:19:6d:68:18:fc:c8:cb:96:43:d3:e6:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E8:B8:B4:B0:F9:63:80:A1:2E:35:8F:41:C3:41:BB:42:ED:FE:9B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dei4tLD5Y4ChLjWPQcNBu0Lt_ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1ba0::/43
Signature Algorithm: sha256WithRSAEncryption
31:09:5a:ad:44:a6:ae:6e:50:9e:7a:e3:85:47:7c:f2:79:0c:
8f:70:9f:7c:d5:05:b4:66:7c:b9:6a:22:91:96:2c:de:88:5f:
1f:df:63:ee:8e:02:e2:2d:21:37:20:c2:bf:8c:14:c6:c2:1b:
56:0d:1a:01:1b:19:7b:fc:94:04:76:e7:37:bc:04:6b:89:cf:
6c:26:91:ac:f9:90:f5:b0:67:a0:f8:d1:f2:fa:dc:4c:0e:b2:
13:8c:c1:30:0c:2d:0c:ee:b6:ac:bc:02:53:d0:37:2f:1e:33:
15:5a:ac:8b:7c:73:7e:b6:67:15:25:d5:a1:d7:9a:cf:91:5d:
51:3c:a4:d8:4d:2a:be:36:88:81:3c:19:de:4d:2e:bd:fc:8d:
a0:c0:79:c1:0f:ec:c6:ca:b7:b2:df:7f:87:3d:f1:37:05:93:
0d:d1:ae:5b:ee:50:cf:7c:97:eb:50:3a:4c:03:ba:0a:80:f2:
52:2d:53:cc:7d:b6:dd:37:fd:4a:96:09:7f:32:99:b5:2b:7e:
fc:77:35:98:93:c9:1b:77:53:cc:de:10:83:1a:27:0c:96:08:
62:1f:b9:cb:58:b9:2b:42:c6:a2:2b:ff:25:0c:9f:bb:06:0b:
fa:ac:80:ee:93:78:6e:74:b0:bb:74:b1:bb:a2:b3:2c:ad:45:
20:7d:8a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:08 2024 by rpki-client on console-ams.rpki-client.org