Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fuVF18XGB5agfu79tNzwsrr0wPQ.roa
File: fuVF18XGB5agfu79tNzwsrr0wPQ.roa (raw, json)
Hash identifier: gpRY0NVK2Y7zSqOZv+v4QTwi3EoeBmd5FJJX0e6Y6xk=
Subject key identifier: 7E:E5:45:D7:C5:C6:07:96:A0:7E:EE:FD:B4:DC:F0:B2:BA:F4:C0:F4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0182CB8FD1A5480257649AC45DE19AA1CC39
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fuVF18XGB5agfu79tNzwsrr0wPQ.roa
Signing time: Tue 23 Aug 2022 16:36:16 +0000
ROA not before: Tue 23 Aug 2022 16:36:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210956
IP address blocks: 2a0e:b107:158f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cb:8f:d1:a5:48:02:57:64:9a:c4:5d:e1:9a:a1:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 23 16:36:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ee545d7c5c60796a07eeefdb4dcf0b2baf4c0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ab:59:f2:f5:fd:db:eb:00:51:13:68:e6:9d:
47:26:0c:1a:92:e2:02:ca:14:12:df:76:93:f6:22:
6d:26:e0:b1:4f:e8:ac:f7:83:52:36:9f:1f:77:95:
c8:64:b0:d3:9c:a0:df:b9:e5:dc:44:0b:e2:29:f5:
8a:ce:f4:9d:90:91:36:57:d8:ac:6d:2c:b4:99:f0:
06:61:b3:f9:22:48:b6:be:05:05:44:60:0c:00:41:
ca:30:cb:38:21:17:bf:73:ba:04:eb:a5:0d:43:3e:
97:04:02:9e:76:3f:58:7b:58:9c:a4:6b:e2:32:34:
6d:fd:50:ed:a1:9f:32:7d:64:a7:d8:4c:60:e2:ac:
fb:c7:42:a1:ce:fa:49:3e:a3:80:15:cd:de:bb:e8:
ec:7e:d6:26:4b:ce:c1:c5:43:76:97:da:6a:08:4b:
98:52:b6:06:bf:9e:34:65:d0:53:48:10:d6:6a:13:
f6:5d:80:e1:89:fd:fe:9d:81:4c:d5:43:14:e0:77:
a4:50:fc:8d:32:08:d7:9d:e5:aa:af:ac:9e:b5:9b:
69:9b:95:fc:ee:b4:2f:ba:1b:4d:4c:65:f0:da:b4:
86:40:29:af:cc:7a:7b:c8:a8:33:0f:45:fd:4c:79:
44:b2:5b:d9:12:84:fe:e2:80:1e:2f:aa:94:80:d2:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E5:45:D7:C5:C6:07:96:A0:7E:EE:FD:B4:DC:F0:B2:BA:F4:C0:F4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fuVF18XGB5agfu79tNzwsrr0wPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:158f::/48
Signature Algorithm: sha256WithRSAEncryption
04:b5:34:5c:61:5d:12:6e:f3:b9:30:c6:cb:5c:f8:ae:8e:f4:
b2:4e:84:3a:8f:a7:e6:0d:98:99:49:a6:a0:29:d1:f2:bd:4d:
9b:71:05:28:c3:bc:6c:e5:1b:58:c6:19:b5:b4:33:8a:24:ac:
ae:05:22:17:47:ff:35:27:3d:f6:33:70:0c:63:a0:c4:b7:2a:
45:89:65:94:5c:64:b6:41:25:22:d3:17:1d:97:a3:cf:55:05:
a7:c1:39:dc:6b:31:5e:3c:a5:cc:54:16:f1:d7:b4:bf:ce:ad:
47:cf:15:72:bf:ca:ea:fc:dc:99:f4:b6:d3:4c:2b:85:fd:46:
3e:56:e6:1a:b5:ea:1e:b1:19:91:15:d6:72:a9:1f:12:ed:e0:
b9:fe:b6:0a:73:30:40:80:b5:ed:76:95:65:9b:26:6f:88:dd:
ae:19:79:6a:fb:87:35:65:16:7e:46:15:f1:2a:4f:85:74:8a:
4f:56:03:d1:21:e7:fd:73:0b:ff:2f:ff:0a:8c:c9:f3:50:44:
62:29:f7:c9:95:bd:56:ec:83:ff:55:ff:a7:8d:11:ed:ad:f1:
ea:db:cb:66:fb:47:ef:87:4b:50:f6:ec:b0:ec:aa:f7:4a:b6:
51:f3:46:9a:1d:99:80:d6:33:9e:25:d5:8a:1e:dc:07:c6:64:
77:1a:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:09 2024 by rpki-client on console-ams.rpki-client.org