Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/etyucFjBMeC4zzCLBctSo-xzGdo.roa
File: etyucFjBMeC4zzCLBctSo-xzGdo.roa (raw, json)
Hash identifier: IajtrUHuxtxQ4XeKH/BjZTzOQ+fObF1YNk6HwKCamsg=
Subject key identifier: 7A:DC:AE:70:58:C1:31:E0:B8:CF:30:8B:05:CB:52:A3:EC:73:19:DA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0184EB7FA3B853FAB8AF10F95DBAC9D140DB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/etyucFjBMeC4zzCLBctSo-xzGdo.roa
Signing time: Wed 07 Dec 2022 07:32:01 +0000
ROA not before: Wed 07 Dec 2022 07:32:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202256
IP address blocks: 2a0e:97c6:4000::/34 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:7f:a3:b8:53:fa:b8:af:10:f9:5d:ba:c9:d1:40:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 7 07:32:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7adcae7058c131e0b8cf308b05cb52a3ec7319da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:d8:73:85:b9:0a:a8:d1:69:38:83:5a:d9:
ee:3c:59:65:db:14:94:5d:9e:d5:72:79:cc:41:a4:
6f:42:7b:ae:04:6a:97:71:4c:a4:46:13:b0:64:c4:
dd:3c:6d:79:9a:5a:9f:5b:59:03:58:9d:75:a5:ab:
62:5a:b3:2c:4c:7f:9d:9d:bd:f6:19:1e:b9:9d:01:
f6:1d:bc:1a:f3:cb:a9:16:1a:dc:cf:2e:82:28:3d:
7c:ae:0b:c0:15:a1:ae:eb:3b:38:bd:cd:bd:0a:fa:
19:db:c8:52:02:db:27:58:d7:d0:84:db:d9:d2:30:
4f:63:cf:ee:cd:4e:d1:a7:f5:8d:84:c9:48:11:d9:
9a:c3:53:df:ca:94:b4:35:79:9e:a6:8e:77:14:89:
fe:20:b2:93:c0:bb:f6:d5:54:e1:d6:bc:a1:64:e2:
a4:ce:4e:2a:a7:2f:5f:61:cc:b0:23:a3:2a:c1:c8:
a2:30:90:26:81:ec:af:d4:6b:99:8a:1f:89:6c:ae:
be:84:49:cf:14:82:92:99:0f:0c:d1:50:a9:eb:1d:
cc:b5:bc:cb:0f:35:50:d8:9e:e5:bc:a0:ae:a8:33:
0d:7a:0f:6c:99:c1:ed:b1:6c:38:16:76:d0:c1:e6:
a9:25:c7:e5:16:bc:13:4a:23:01:12:9f:a6:62:bf:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DC:AE:70:58:C1:31:E0:B8:CF:30:8B:05:CB:52:A3:EC:73:19:DA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/etyucFjBMeC4zzCLBctSo-xzGdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c6:4000::/34
Signature Algorithm: sha256WithRSAEncryption
93:b6:70:85:74:13:30:17:b6:82:58:f0:b5:ad:b6:60:94:c7:
67:5e:31:91:6a:cd:ec:db:d9:7b:7e:9c:1e:95:20:ed:11:27:
96:23:80:bb:bc:6b:13:87:32:79:ee:a1:41:a9:29:f3:43:8b:
8e:26:61:b3:15:52:7a:28:87:d5:d9:04:21:e9:35:67:e5:84:
f8:f0:52:ba:74:60:1c:bb:b5:7a:78:00:13:d2:9f:67:eb:ef:
a7:5a:91:15:ec:a9:00:7a:f7:f5:7c:1f:66:b0:99:84:f0:2d:
f1:20:4b:6f:e9:4e:6d:cc:8c:f1:a2:72:17:83:8c:b4:ea:9f:
64:20:69:95:63:73:5a:68:e3:73:e6:c1:c0:31:cf:47:b3:27:
18:ea:79:0c:4f:cd:23:ca:82:b1:e5:c5:a9:98:ed:fc:4b:3f:
07:65:a7:7f:35:2b:db:48:a7:a1:14:70:f4:07:52:a2:f8:91:
77:f2:8d:38:35:b7:83:6f:3a:3c:e8:f7:a5:1e:3b:53:37:c9:
4b:32:cf:ff:3e:e5:ef:f9:2e:41:bd:75:5a:68:a7:da:9c:c3:
a2:6f:0b:6e:06:76:c2:c5:d0:12:fb:fa:92:78:7d:86:ae:ab:
51:c8:53:f1:e5:a3:f4:75:d4:81:b4:ff:6f:49:54:3b:3f:d6:
1a:33:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-fra.rpki-client.org