Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fln51TennmmZDyyKzOAc7s-LfvI.roa
File: fln51TennmmZDyyKzOAc7s-LfvI.roa (raw, json)
Hash identifier: Bk+bQYz8K3WvKdQiuKzgDeqVmLeFnqMQlGTqOJ8B+RY=
Subject key identifier: 7E:59:F9:D5:37:A7:9E:69:99:0F:2C:8A:CC:E0:1C:EE:CF:8B:7E:F2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018509289A0C894B0C13C2401F3981A2E6F2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fln51TennmmZDyyKzOAc7s-LfvI.roa
Signing time: Tue 13 Dec 2022 01:45:33 +0000
ROA not before: Tue 13 Dec 2022 01:45:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200872
IP address blocks: 2a0e:97c0:5f0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:09:28:9a:0c:89:4b:0c:13:c2:40:1f:39:81:a2:e6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 13 01:45:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e59f9d537a79e69990f2c8acce01ceecf8b7ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:3c:85:1a:63:58:75:54:2b:9f:84:aa:4d:
4c:09:60:13:df:8d:ca:34:82:d8:27:79:53:43:8e:
7f:db:ab:d7:2c:c9:dd:e5:30:aa:19:04:d5:a3:96:
c1:85:b5:39:60:98:b2:dc:85:5f:28:7d:52:04:41:
13:eb:eb:0d:a7:7b:b8:bd:48:da:59:f2:11:7e:31:
cb:0d:bc:eb:6e:4b:8d:4e:9f:53:b8:b7:fb:38:e4:
c9:84:c8:96:84:19:36:10:7b:64:ef:fb:8b:4b:80:
e7:8a:e9:af:f8:02:35:d0:42:6b:4f:dc:23:0d:07:
92:e5:84:0a:31:7a:25:20:46:12:7f:e6:c6:bd:ee:
c0:67:10:c7:d1:67:9f:f9:61:d3:c1:02:d8:62:48:
a2:85:ca:14:ce:3e:4b:b7:dc:22:8a:74:f9:85:8f:
81:8b:f6:7d:4e:ab:db:44:30:0a:a9:4e:d2:86:23:
ed:0d:92:0c:a8:94:97:da:a1:36:06:ec:22:9c:be:
f4:25:1d:84:40:08:75:37:ec:6e:60:4c:6e:c9:b5:
00:04:af:60:a8:09:af:e5:22:c2:c9:d2:75:86:75:
ba:4e:fb:db:b8:1b:e2:68:61:04:0c:df:a6:cf:cf:
7f:b6:18:fb:3d:db:91:70:1a:08:97:f3:86:bd:fe:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:59:F9:D5:37:A7:9E:69:99:0F:2C:8A:CC:E0:1C:EE:CF:8B:7E:F2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fln51TennmmZDyyKzOAc7s-LfvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:5f0::/48
Signature Algorithm: sha256WithRSAEncryption
02:54:c4:cd:4d:60:7d:38:83:b1:51:58:dd:5c:c8:84:05:9f:
ae:ea:f3:58:8c:05:78:80:04:e2:db:c0:30:1b:dc:6b:c7:e9:
55:aa:de:b2:d4:ad:61:70:2e:78:0b:dc:6c:7d:45:3e:62:0a:
c6:0f:55:02:4a:91:c1:1a:ba:69:f4:09:b5:6f:74:d0:a4:26:
ef:ae:38:67:ce:8c:cf:35:78:27:98:a8:bb:31:91:b4:2b:ba:
86:cc:37:d8:07:c5:6a:c5:64:39:80:2a:7c:45:70:44:ee:c0:
89:50:a7:c7:02:f3:c6:3f:cf:26:13:b7:40:3a:67:cf:18:a6:
2c:d5:ba:cc:91:ff:0c:34:d4:cb:43:9a:45:bc:cd:06:dc:4b:
c6:e8:84:b4:1f:6b:eb:50:2c:67:aa:04:8c:6f:a5:6f:46:1a:
5a:df:68:c3:1d:c6:d3:fd:89:be:7a:f5:85:bb:48:31:ae:31:
b4:84:1d:35:8a:7c:c6:7d:7f:a9:ff:93:b7:ea:e4:84:54:a2:
78:e0:d8:ad:1d:35:7f:0f:68:36:87:60:a3:bb:9a:b6:f6:c8:
4b:46:d4:c0:79:69:6d:a8:50:9e:bb:49:12:72:56:fc:28:fb:
70:3a:30:bd:29:66:6c:a0:51:ee:3a:e6:31:03:5a:79:28:a3:
a0:cb:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org