Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ebPQ7DbD6q72CSazlzs7nvBe8ag.roa
File: ebPQ7DbD6q72CSazlzs7nvBe8ag.roa (raw, json)
Hash identifier: jX9gERvxhUilF4XtRDCs1AJgzTRi3GCHUe50h1Q1Vxg=
Subject key identifier: 79:B3:D0:EC:36:C3:EA:AE:F6:09:26:B3:97:3B:3B:9E:F0:5E:F1:A8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018410C1E270BD0015FD449355A9E7869EB0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ebPQ7DbD6q72CSazlzs7nvBe8ag.roa
Signing time: Tue 25 Oct 2022 20:07:32 +0000
ROA not before: Tue 25 Oct 2022 20:07:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60998
IP address blocks: 2a0e:b107:6e9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:c1:e2:70:bd:00:15:fd:44:93:55:a9:e7:86:9e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 25 20:07:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79b3d0ec36c3eaaef60926b3973b3b9ef05ef1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:bd:47:9f:03:50:a0:2f:44:7e:ad:76:65:
d3:29:59:7a:0c:bb:e3:8d:a9:aa:cc:ec:52:7d:0e:
eb:bc:e4:4d:f5:fa:46:f1:03:1d:06:ea:d8:97:09:
ae:61:b7:38:d8:5d:e5:16:24:5f:bb:5c:ce:ed:c5:
e5:7a:f2:bc:12:be:77:8e:75:20:20:8d:91:a9:1c:
e5:7b:af:96:3a:3b:2b:c4:46:df:98:3b:d4:cb:dc:
7a:e7:5c:43:ac:1e:27:ed:91:68:82:ba:24:51:05:
c4:75:60:9c:eb:35:bc:71:f9:84:9e:70:3d:b3:05:
74:22:9f:0a:ff:d0:ed:78:5b:f0:e0:37:b3:ef:1c:
5e:7e:7a:e4:cd:03:ea:c9:d7:3e:fe:c4:4d:6b:e8:
db:3d:0e:51:88:ce:68:ef:6d:10:cf:82:c5:b5:8c:
16:c8:f6:66:af:7b:d7:1c:81:9d:fe:05:d2:6f:3a:
00:8b:65:25:b8:c6:0c:1d:75:14:fd:50:fc:a8:b3:
67:2f:ad:77:94:4f:9a:bb:86:07:e0:00:b2:13:49:
ee:f1:27:6b:1f:c1:d0:3c:89:a9:f8:c4:99:8c:96:
24:30:4a:38:30:c5:42:d0:5f:a4:38:5b:9f:64:a4:
fd:7d:8c:48:18:00:77:75:97:31:4c:1e:aa:e2:4b:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:D0:EC:36:C3:EA:AE:F6:09:26:B3:97:3B:3B:9E:F0:5E:F1:A8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ebPQ7DbD6q72CSazlzs7nvBe8ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:6e9::/48
Signature Algorithm: sha256WithRSAEncryption
01:cb:52:d9:c0:61:ab:b3:93:5f:d0:c5:79:ff:d5:7f:ef:17:
ca:c6:c8:61:b8:0d:de:5b:a1:81:6e:bc:21:95:5d:13:42:f5:
a1:a6:be:88:f3:09:5f:14:46:f3:2a:d6:6e:e0:29:c7:72:2b:
13:07:0f:9d:c8:5f:7b:72:fc:47:45:2c:31:d7:ad:29:eb:3e:
a0:46:1d:8d:bc:65:59:1c:16:9e:e5:c9:0b:a0:87:9e:92:af:
06:d8:04:75:e6:d4:71:6d:bd:7f:1e:4e:12:0c:74:3d:c1:c0:
86:97:ef:e8:09:d3:2e:6d:76:c6:d6:ef:a1:aa:25:63:3f:e6:
65:55:93:af:a6:1b:64:ef:12:4b:ce:96:c0:d8:e1:c8:ef:5f:
d2:90:ea:dd:bb:0b:02:c8:d2:ed:50:0a:6b:54:f1:e7:6e:d1:
bf:23:11:c4:a0:1b:69:82:8a:81:c0:b5:a3:08:ad:ce:a4:15:
9e:67:1d:d8:41:24:22:5f:c4:79:c5:19:00:1c:5e:a9:a1:18:
d9:4b:f4:c5:36:e9:ef:15:0d:5b:04:b2:8b:9e:44:4b:1e:2b:
5c:f9:9e:36:1a:24:51:95:5b:c5:7d:99:f7:25:43:a9:9c:4c:
6f:ee:27:2f:66:94:2e:d3:de:82:cd:fb:04:ca:64:97:e7:d0:
7c:e8:b8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:08 2024 by rpki-client on console-ams.rpki-client.org