Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/euhP2Drch41WNZ4vWpBpwT4nHek.roa
File: euhP2Drch41WNZ4vWpBpwT4nHek.roa (raw, json)
Hash identifier: xZwaizmxmzw825MUtQEK78b5FAmkneuIl3Rpx7sTWK8=
Subject key identifier: 7A:E8:4F:D8:3A:DC:87:8D:56:35:9E:2F:5A:90:69:C1:3E:27:1D:E9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183CFE162763E65B63189D4F91DD6E31573
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/euhP2Drch41WNZ4vWpBpwT4nHek.roa
Signing time: Thu 13 Oct 2022 05:46:37 +0000
ROA not before: Thu 13 Oct 2022 05:46:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53356
IP address blocks: 2a10:cc42:1000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cf:e1:62:76:3e:65:b6:31:89:d4:f9:1d:d6:e3:15:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 13 05:46:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ae84fd83adc878d56359e2f5a9069c13e271de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:8f:bb:27:b8:69:bd:41:e1:9d:ee:2d:d4:
8f:fb:5f:ad:74:38:a0:84:08:fc:9f:60:72:a8:f8:
b7:d5:84:74:09:3d:7b:eb:6e:5f:37:b3:25:89:6d:
62:76:c7:26:c5:11:a0:83:1f:aa:bd:2c:35:37:49:
3b:eb:35:30:22:47:5c:97:ca:40:28:d6:7a:6b:24:
a2:01:f0:af:e3:7b:56:e3:d1:5e:01:39:24:43:21:
76:7f:8d:a1:32:e2:ab:c7:d6:06:3b:d4:2c:0c:81:
25:76:c6:40:a8:cd:bb:e2:9d:36:3d:5a:bc:d9:70:
e8:60:8d:22:49:0b:49:31:9f:ab:62:23:ed:c5:e1:
ae:84:81:bc:70:a1:01:b2:f4:bc:44:fa:16:a2:62:
97:39:e3:cd:ee:3c:93:b5:a7:07:da:ad:80:71:b1:
ba:8d:7c:63:24:31:3d:69:4a:26:f0:f5:7f:3a:1b:
14:74:de:2c:b6:40:2d:38:8b:fb:f3:d3:0d:4d:71:
44:69:5f:df:88:4a:33:98:42:e2:3a:e9:46:5c:02:
dd:33:58:5e:5d:28:1f:a9:b3:a1:10:c1:67:17:0d:
d6:c7:7d:b6:fc:ac:64:57:ea:55:99:f9:87:f3:c7:
ea:a5:66:c9:75:4b:ef:e3:98:7b:3d:74:4c:f5:5d:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E8:4F:D8:3A:DC:87:8D:56:35:9E:2F:5A:90:69:C1:3E:27:1D:E9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/euhP2Drch41WNZ4vWpBpwT4nHek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc42:1000::/36
Signature Algorithm: sha256WithRSAEncryption
75:4a:bd:5b:fc:43:fb:13:01:26:26:25:63:d6:87:6e:f3:8d:
e8:14:1e:c4:5b:30:a9:52:14:1c:c3:e9:8a:61:4f:3d:ca:f5:
41:a1:75:e4:bc:6c:a3:16:b1:b4:66:16:f4:03:ad:e8:d9:62:
3f:c3:5a:3f:69:cc:75:88:5e:dc:7e:25:a2:b7:18:7b:04:db:
67:b8:2b:81:b8:10:df:91:2a:25:b4:1d:43:d8:f9:9c:a9:92:
c6:f5:e5:13:a6:08:8f:7a:5b:8a:f7:3d:00:9a:d7:2f:aa:d1:
48:77:d0:3a:3d:8c:38:b5:9e:dd:30:92:0b:0a:3f:12:d0:bb:
0c:0a:67:cc:6c:0d:c0:3d:8e:36:3e:16:ca:3b:28:c3:7f:16:
a5:a9:42:80:2f:5e:db:4f:e7:73:43:dc:68:c5:64:50:48:ed:
b2:0e:33:d6:6a:63:18:39:88:11:bb:3d:c4:13:f7:5e:ea:1b:
f6:a4:33:c4:8f:82:cc:b1:4b:fc:51:74:68:53:82:0f:23:8e:
bf:72:6d:ef:eb:7b:cf:b4:96:78:23:be:28:1b:d3:ea:8a:14:
42:10:ad:43:63:89:ba:fb:25:87:bc:e1:27:97:a9:e3:aa:fc:
3f:4a:2c:87:8f:1e:43:b2:62:9f:da:36:90:ea:06:c1:fd:e3:
55:ca:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org