Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/edDPAUFYBtEF9UMtSSqh8B-4I2Y.roa
File: edDPAUFYBtEF9UMtSSqh8B-4I2Y.roa (raw, json)
Hash identifier: 62ZK/+9+rGY1u4wAESuOoNynQJVbpdvDISob0UeEb18=
Subject key identifier: 79:D0:CF:01:41:58:06:D1:05:F5:43:2D:49:2A:A1:F0:1F:B8:23:66
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 13AC2718
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/edDPAUFYBtEF9UMtSSqh8B-4I2Y.roa
Signing time: Tue 12 Apr 2022 13:05:24 +0000
ROA not before: Tue 12 Apr 2022 13:05:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206569
IP address blocks: 2a0e:b107:19b0::/48 maxlen: 48
2a0e:b107:19b1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330049304 (0x13ac2718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 12 13:05:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79d0cf01415806d105f5432d492aa1f01fb82366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:f7:e2:e1:db:a2:d8:4e:56:c6:f4:49:ce:
20:45:31:f4:d5:d8:25:e7:e1:cc:5a:f8:89:04:37:
16:9b:53:3b:bd:c1:85:e3:f3:a1:b4:3e:63:6d:ed:
ad:71:e7:6a:8e:5f:76:f6:28:d0:39:82:8f:a3:94:
a6:67:32:b7:78:41:00:b9:f9:4e:91:fe:2d:b7:53:
a6:e5:aa:ae:a5:05:7f:24:f6:cd:eb:5b:20:49:66:
77:53:6d:b1:49:6c:4c:81:82:c2:1f:76:65:81:15:
e0:c0:0b:d9:4f:de:97:57:fa:6d:ce:72:c8:a5:a7:
88:61:fa:61:4e:65:c8:8a:f6:2b:c1:49:9c:fb:4c:
48:ff:fa:cb:67:93:33:bf:2c:d1:3a:2b:eb:94:e6:
9f:1c:bb:59:16:49:ca:67:4f:43:50:f9:a7:34:3f:
e3:c6:55:9b:b9:74:8b:39:41:be:58:2e:3a:2a:18:
7a:0b:e9:b9:aa:ed:95:8f:15:f3:60:5a:9e:b4:9e:
f8:bf:1e:93:fc:5c:95:94:06:0a:b1:04:cb:19:1a:
ca:b2:e0:96:90:f8:5c:5e:15:9a:dc:a6:39:85:2c:
a8:d5:23:11:1e:8a:52:24:f7:de:52:95:8a:ff:1e:
cb:92:18:cc:55:df:f0:75:68:19:c9:02:bd:1c:ee:
7a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D0:CF:01:41:58:06:D1:05:F5:43:2D:49:2A:A1:F0:1F:B8:23:66
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/edDPAUFYBtEF9UMtSSqh8B-4I2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19b0::/47
Signature Algorithm: sha256WithRSAEncryption
5c:49:bd:13:41:03:a5:d9:13:7a:f2:a9:d8:bc:72:32:1b:48:
e3:04:1b:66:ef:93:a0:c7:a8:05:12:21:ee:a8:63:80:2b:a8:
ef:3b:9a:bb:35:2d:89:d6:e4:ef:d5:18:44:55:d4:25:a5:09:
79:ab:ab:56:e4:3b:22:ae:2e:4d:31:94:b2:b9:f4:d3:7c:03:
31:02:c4:ca:fc:b6:6c:fb:91:63:11:3b:24:88:ce:17:8b:2e:
24:f0:5b:8e:13:63:40:40:4b:24:a3:d4:b1:be:2f:54:ab:07:
a2:85:e4:4a:cc:e5:bd:c6:3a:f9:25:97:5c:17:a7:6a:94:79:
32:58:53:8d:a7:29:d0:43:d0:04:86:83:0a:db:0b:0d:5a:c2:
a0:bc:3f:78:5f:f8:d4:7c:0f:d8:ed:4c:c1:d4:b3:aa:a9:62:
71:9d:ee:7a:8a:4c:be:f7:7c:3d:99:08:ce:d2:de:3d:b5:c2:
de:62:ef:e2:36:dd:25:d6:53:9a:95:b8:5a:ee:8d:07:78:46:
3b:5c:ff:2c:8e:d2:25:d3:be:3a:c4:63:db:e9:aa:e3:90:32:
a5:db:f2:11:95:a4:bb:8f:9d:56:b4:ca:2e:f2:e2:1c:78:a4:
bd:4e:f9:bd:50:7d:be:56:c3:b5:a8:eb:40:b0:11:98:39:65:
20:e4:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org