Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fFmjPSR54i59mgvyF8_iSgXhk_o.roa
File: fFmjPSR54i59mgvyF8_iSgXhk_o.roa (raw, json)
Hash identifier: xNF3XC1zemsc7+lasNeQkwJ4wxPF72N/bGgPIuy6i0o=
Subject key identifier: 7C:59:A3:3D:24:79:E2:2E:7D:9A:0B:F2:17:CF:E2:4A:05:E1:93:FA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183E40775E35672844E87E38A6E756F9CFB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fFmjPSR54i59mgvyF8_iSgXhk_o.roa
Signing time: Mon 17 Oct 2022 03:40:37 +0000
ROA not before: Mon 17 Oct 2022 03:40:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202256
IP address blocks: 2a0e:b107:1120::/44 maxlen: 48
2a0e:97c6:4000::/34 maxlen: 48
2a10:cc42:1b00::/40 maxlen: 48
2a10:cc42:1000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e4:07:75:e3:56:72:84:4e:87:e3:8a:6e:75:6f:9c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 17 03:40:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c59a33d2479e22e7d9a0bf217cfe24a05e193fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b6:bf:68:9d:a7:33:da:4e:ac:59:fe:48:01:
57:50:2f:aa:bb:54:f1:16:f0:70:d0:be:5e:40:37:
6e:a2:ec:73:a1:79:64:83:5c:25:bb:a1:48:9a:c3:
a6:9e:7a:ae:6b:16:1a:b2:77:fd:df:84:fc:1a:ac:
a6:2e:af:a6:0a:74:b3:c2:5f:8e:40:2c:55:2a:70:
f8:43:33:78:d9:e5:cf:6d:4f:0d:99:4f:c5:2e:2d:
f9:2d:04:42:b1:04:bf:52:a6:ac:64:f1:73:a1:d4:
92:c6:98:46:fc:9d:07:00:3e:74:14:87:37:46:49:
09:78:65:51:96:89:a0:c9:04:22:e0:5f:c1:10:b8:
a3:d5:d9:e1:b5:b3:37:f0:92:e5:38:2a:2a:e5:73:
94:5d:60:aa:b5:51:6d:a9:0d:1a:2c:bb:dd:15:d5:
78:60:85:35:6c:bf:db:59:40:88:32:db:40:81:ac:
c2:b1:61:58:9e:42:0e:f1:77:64:63:b6:d8:60:46:
40:97:f4:f2:7e:ac:b1:ee:a8:c3:0a:08:4c:15:e8:
79:85:21:7a:ff:f4:ed:d0:9a:df:84:0d:ff:5c:89:
f6:7a:2f:ae:68:5d:58:6d:97:be:00:3a:2d:b3:5e:
d5:b5:d1:9f:fb:f6:6d:e0:01:53:01:97:42:de:29:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:59:A3:3D:24:79:E2:2E:7D:9A:0B:F2:17:CF:E2:4A:05:E1:93:FA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fFmjPSR54i59mgvyF8_iSgXhk_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c6:4000::/34
2a0e:b107:1120::/44
2a10:cc42:1000::/36
Signature Algorithm: sha256WithRSAEncryption
45:46:5d:96:38:5b:1d:ff:78:d0:3a:b6:4e:d5:60:aa:36:0b:
db:5a:2e:2d:16:51:79:45:1c:e8:df:bd:ec:26:a9:e3:51:44:
90:54:9e:55:62:ec:13:0e:de:19:d3:31:66:15:79:bb:b7:22:
cf:71:ef:7b:f1:93:b2:88:70:32:b6:2d:d6:cf:31:ca:5f:83:
f1:c6:62:00:2e:da:03:2c:ed:bf:c2:8f:6b:7c:f2:88:bd:13:
6a:9a:43:03:e2:67:da:60:67:20:40:72:d0:61:66:30:f6:b2:
90:bb:e5:10:5a:5b:29:58:f9:03:14:5c:d8:20:f0:c7:b5:f9:
37:d7:c7:02:18:04:e6:a5:61:4c:c2:fa:7c:95:54:ee:c1:27:
d8:74:4f:01:89:63:97:90:81:16:1d:11:db:44:7c:54:4f:1a:
45:a6:7e:73:13:63:10:03:b6:cd:f5:ef:16:0c:ea:c0:5b:a0:
2d:29:0d:11:95:22:9b:c8:d5:dd:31:21:fe:6d:5b:d9:f0:97:
5c:cd:89:ba:d2:fd:78:35:5b:92:29:f9:2f:23:68:3f:c2:a1:
9d:88:91:20:53:01:a6:fc:8d:37:f5:dd:72:cc:22:60:3e:67:
77:3f:1b:eb:7d:97:6c:14:65:dd:83:09:e2:79:aa:4a:94:4a:
01:ec:ca:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:09 2024 by rpki-client on console-ams.rpki-client.org