Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eMP5iyKbC3DFuKiotN604-n4vAE.roa
File: eMP5iyKbC3DFuKiotN604-n4vAE.roa (raw, json)
Hash identifier: eyeX21oAleA0lXSOzhUnGOPeF8xAHehwm5AJzMrYbCc=
Subject key identifier: 78:C3:F9:8B:22:9B:0B:70:C5:B8:A8:A8:B4:DE:B4:E3:E9:F8:BC:01
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 10E2A248
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eMP5iyKbC3DFuKiotN604-n4vAE.roa
Signing time: Sat 01 Jan 2022 09:05:48 +0000
ROA not before: Sat 01 Jan 2022 09:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212539
IP address blocks: 2a0e:97c0:3f5::/48 maxlen: 48
2a0e:97c0:3f0::/48 maxlen: 48
2a0e:97c0:3f3::/48 maxlen: 48
2a0e:97c0:3f1::/48 maxlen: 48
2a0e:97c0:3f4::/48 maxlen: 48
2a0e:97c0:3f2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283288136 (0x10e2a248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78c3f98b229b0b70c5b8a8a8b4deb4e3e9f8bc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:16:5a:22:3d:2d:7c:82:28:26:89:95:fa:
21:0a:97:3e:4b:67:56:cc:c5:9d:6c:9c:05:8b:10:
50:9a:71:2b:86:dc:f4:a7:07:36:4c:28:ed:9a:7c:
c9:c1:71:f9:52:93:5d:1e:d6:ff:0a:34:1a:8c:9c:
12:86:16:0b:9a:ea:47:ae:04:b4:d7:d7:d4:87:33:
ae:cf:60:56:ae:da:38:c5:9c:d9:7b:ba:93:58:b2:
1b:2f:95:bc:92:9c:e0:69:66:6f:4e:59:3a:bc:9d:
03:e3:38:5b:12:1d:63:70:11:c3:b4:83:17:c0:7d:
48:91:49:a7:df:56:8d:0c:f2:85:fd:12:9d:de:05:
f1:ce:91:33:6e:b9:87:21:0a:f8:1d:56:4f:a9:9c:
92:89:37:73:ca:2c:be:4b:19:d4:65:0c:99:f4:81:
97:1b:7b:d0:75:83:c3:90:7d:75:af:fb:15:1f:d9:
8b:e9:9b:8d:33:f5:ad:40:9c:1b:01:01:6b:0b:92:
2a:c9:b4:1b:77:cc:cb:51:34:de:97:51:2d:3a:56:
bb:ea:85:ee:d3:95:98:49:cf:c5:4b:9c:9c:45:ae:
d4:ea:11:c3:a1:41:a3:4a:75:5c:3b:e8:47:50:f2:
c0:2d:6d:ac:53:2c:fa:fb:52:9c:ef:a2:cc:3d:09:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C3:F9:8B:22:9B:0B:70:C5:B8:A8:A8:B4:DE:B4:E3:E9:F8:BC:01
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eMP5iyKbC3DFuKiotN604-n4vAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3f0::-2a0e:97c0:3f5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a4:d9:35:df:4e:79:2d:ea:ad:94:cd:d6:0d:00:81:4f:16:71:
3a:3e:2d:e4:28:75:61:ac:18:44:58:0a:4b:3b:1d:f2:ad:54:
ad:96:9b:0b:ca:a1:f7:fd:4a:38:46:49:98:d3:79:82:f8:80:
ed:bd:49:c6:98:fe:ab:ef:3a:a6:4c:09:0b:c0:ef:fb:0d:f0:
a9:de:ec:45:0c:e7:87:c0:a3:2e:d8:ac:71:e2:ea:20:bf:e2:
1e:bf:f2:33:16:ea:3d:c4:a1:62:59:5a:d0:e3:8f:87:35:c1:
7f:e5:d2:ec:26:22:e1:a2:9e:21:44:35:5e:47:35:ef:9f:ae:
0c:53:3b:19:e6:02:64:9d:7d:6f:48:32:53:d7:f1:d8:98:f1:
7e:f5:17:bd:06:49:80:32:15:c4:f7:47:04:59:5f:21:14:eb:
8e:f0:4e:d3:bc:8a:9c:ce:cc:51:d6:f3:b6:06:73:af:b2:76:
4c:30:9b:29:49:b4:95:20:dd:45:b0:66:53:32:9d:4a:66:98:
df:59:d6:3e:5a:15:b1:f7:84:24:67:21:b4:2e:67:2d:b0:d3:
04:fd:ec:9b:a8:6d:d6:ef:85:82:de:0d:87:5d:1a:5d:b3:92:
3d:0b:6b:07:ae:74:2d:39:b3:49:93:8d:73:86:2f:d4:bd:86:
ba:70:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:02 2023 by rpki-client on console-ams.rpki-client.org