Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eNhNZwCx_x-HY8fZrpl3Xrns0g0.roa
File: eNhNZwCx_x-HY8fZrpl3Xrns0g0.roa (raw, json)
Hash identifier: MMaUyh9bLlu0C4YHXhGKoPYgLrvlHQ2rzNq45u2Dgjs=
Subject key identifier: 78:D8:4D:67:00:B1:FF:1F:87:63:C7:D9:AE:99:77:5E:B9:EC:D2:0D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01830D0A35FF9A7A1FEA4A36C421C3C437B1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eNhNZwCx_x-HY8fZrpl3Xrns0g0.roa
Signing time: Mon 05 Sep 2022 09:45:16 +0000
ROA not before: Mon 05 Sep 2022 09:45:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211688
IP address blocks: 2a0e:97c0:240::/44 maxlen: 48
2a0e:97c1:110::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:0a:35:ff:9a:7a:1f:ea:4a:36:c4:21:c3:c4:37:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 5 09:45:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78d84d6700b1ff1f8763c7d9ae99775eb9ecd20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:d1:ea:4e:2e:f4:07:73:ef:bb:b5:c0:0e:
8f:d7:f3:6a:20:80:6f:2c:80:1f:f5:7d:7d:2e:fb:
e8:4d:58:68:a5:73:2a:a8:00:07:d3:7a:77:1a:50:
10:1a:ec:9a:58:83:f0:59:84:34:cb:02:02:01:87:
5c:29:aa:ba:51:d4:67:23:5d:29:4c:03:c5:d8:a7:
25:ed:6c:87:6c:3b:ca:8d:4d:33:8a:c3:68:e6:63:
eb:4b:f0:17:c5:c4:98:2b:de:a5:42:16:5c:a4:6a:
62:3f:3d:2f:35:29:b8:6b:19:4d:d3:fb:4e:a4:cb:
fb:e4:92:46:d8:8b:6c:32:52:16:b5:bd:5f:df:29:
15:10:a7:95:b8:c5:38:c2:3c:7f:61:21:f5:a8:51:
e5:f0:bd:22:5a:70:16:e9:7d:d8:c7:ae:4b:9f:9c:
f1:d1:6b:af:b4:96:97:ca:0d:45:d9:dc:6a:fd:41:
85:75:f4:fa:05:cd:d9:8f:ee:ca:d2:ed:8b:05:0f:
18:68:8e:a3:dc:63:e0:c7:75:20:4f:59:26:4b:7f:
0c:ea:98:77:0f:b2:de:eb:df:7c:cf:d0:46:be:a8:
29:48:cc:31:1b:00:9f:46:53:44:c7:f2:9e:5f:6a:
0f:a7:f0:b8:6b:a9:4a:5f:10:92:af:53:7c:20:79:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D8:4D:67:00:B1:FF:1F:87:63:C7:D9:AE:99:77:5E:B9:EC:D2:0D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eNhNZwCx_x-HY8fZrpl3Xrns0g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:240::/44
2a0e:97c1:110::/44
Signature Algorithm: sha256WithRSAEncryption
04:7f:22:07:ba:1c:ac:da:9e:c5:2a:1f:92:a0:03:ef:a8:bb:
7c:ce:a1:71:e2:cb:ab:d8:4d:db:0b:f5:1e:ed:f6:d9:7e:f1:
7f:f8:59:85:33:3f:e8:6c:8c:69:39:5d:92:5f:38:04:aa:8e:
ea:40:53:84:f3:33:58:2a:70:82:83:68:ac:44:35:5c:2f:c8:
e5:56:3f:dd:e5:c0:32:51:8e:e7:72:83:5a:30:c8:3b:3a:a4:
b1:9f:72:40:ff:23:40:57:47:87:de:69:5a:79:db:49:ac:14:
ea:ba:73:72:98:d0:38:cb:02:5a:3c:8e:56:76:47:f4:fb:c6:
c2:0f:c4:44:cb:a0:3c:e7:c0:dc:9c:ae:4a:80:a4:1e:5e:b0:
bf:e9:80:0f:33:3e:c1:5f:fe:fb:35:e8:c5:1e:91:83:0d:ed:
47:50:ed:31:6c:6a:b6:a8:54:df:e3:1f:a5:70:70:c4:7b:28:
e6:61:d8:8c:da:8f:44:52:71:92:41:9f:ef:cd:0d:ca:d9:3b:
74:4a:06:0c:8e:a6:6f:c6:f0:65:d6:b4:81:aa:8a:be:d1:a5:
0c:9f:d0:db:cd:7e:79:65:83:3b:dd:92:10:76:8c:6d:70:45:
90:b9:4e:69:5b:97:06:c8:07:d2:bd:6c:16:51:87:d6:17:0d:
82:d6:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:08 2024 by rpki-client on console-ams.rpki-client.org