Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g0OsyTaifTMXyi-iuXbTZjtA1jI.roa
File: g0OsyTaifTMXyi-iuXbTZjtA1jI.roa (raw, json)
Hash identifier: FCwFybIrDmnj4Mb9If/6QQfRazdlxJFH0Rbutu2Qh+0=
Subject key identifier: 83:43:AC:C9:36:A2:7D:33:17:CA:2F:A2:B9:76:D3:66:3B:40:D6:32
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183E8DC958832A9BCADEE853C43131B0492
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g0OsyTaifTMXyi-iuXbTZjtA1jI.roa
Signing time: Tue 18 Oct 2022 02:11:53 +0000
ROA not before: Tue 18 Oct 2022 02:11:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202256
IP address blocks: 2a0e:b107:1120::/44 maxlen: 48
2a0e:97c6:4400::/40 maxlen: 48
2a0e:97c6:4000::/34 maxlen: 48
2a0e:97c6:4200::/40 maxlen: 48
2a10:cc42:1b00::/40 maxlen: 48
2a10:cc42:1000::/40 maxlen: 48
2a10:cc42:1000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e8:dc:95:88:32:a9:bc:ad:ee:85:3c:43:13:1b:04:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 18 02:11:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8343acc936a27d3317ca2fa2b976d3663b40d632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:3b:86:41:7f:e6:f4:2a:44:74:2b:dd:57:
1e:3d:06:f3:cc:55:05:9e:3c:c8:a9:8d:2b:00:82:
fb:c3:6e:77:e7:b7:47:03:58:d4:4e:6b:86:1a:68:
de:75:2d:77:dc:dd:63:ba:74:b4:1b:38:81:51:9c:
dc:e2:97:1f:bb:bb:16:66:28:19:20:f8:b4:14:83:
87:bb:d6:9b:67:8b:0c:41:f1:9c:2c:1d:ff:39:c5:
2e:17:39:c2:53:c0:e9:8e:0b:66:d2:40:14:37:af:
1f:b8:cb:d4:6a:3a:24:31:7c:d3:ec:68:b8:d3:3b:
41:f4:62:2c:ba:b4:61:13:f8:85:26:3d:59:a3:3c:
c2:05:ba:2a:85:36:dc:52:72:a1:3e:79:0c:fb:28:
8d:ec:11:c1:69:32:0b:e3:54:cd:85:ea:c6:33:28:
8e:4c:45:b9:f1:61:28:5b:03:c8:d5:d6:8e:de:46:
b6:58:aa:fa:92:8a:49:41:eb:76:c6:3b:e8:cf:8b:
af:4e:e0:fd:a9:db:e9:f1:9b:f1:4e:b0:57:ce:92:
8f:a1:14:33:51:c3:86:2b:da:d6:fb:ce:09:b2:0e:
2e:1d:aa:90:1f:14:0a:a0:7e:b0:10:18:9b:17:d5:
2d:13:38:ce:14:ab:fa:ed:1a:cc:1b:89:d2:1f:ba:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:43:AC:C9:36:A2:7D:33:17:CA:2F:A2:B9:76:D3:66:3B:40:D6:32
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g0OsyTaifTMXyi-iuXbTZjtA1jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c6:4000::/34
2a0e:b107:1120::/44
2a10:cc42:1000::/36
Signature Algorithm: sha256WithRSAEncryption
a9:77:03:5c:8c:29:41:24:19:f4:2a:55:3c:d3:a0:74:d5:57:
fe:a9:5f:62:d7:ef:2b:fc:99:56:ae:38:1b:5b:f0:d7:a0:27:
ec:25:ee:0f:51:8f:43:25:de:4b:6d:3b:c0:30:75:c3:e5:7e:
d8:2c:31:1c:40:ab:72:1b:c2:eb:f5:28:66:5a:5b:61:47:d8:
4f:21:44:89:e8:a7:98:13:db:d7:4a:14:11:11:44:59:89:1e:
52:d4:00:a1:5c:66:47:2c:11:70:c3:79:80:3c:29:b1:b3:d3:
c6:64:87:5d:9b:2c:af:49:21:71:9a:c4:a6:1c:ed:20:43:75:
36:fa:3b:49:0d:f6:e2:33:45:42:4e:f8:88:93:95:6b:55:c6:
4e:08:b8:39:59:94:24:76:6c:ff:45:c5:80:02:0b:75:99:ed:
d3:87:0a:7d:54:e9:eb:8a:cb:0a:84:5c:e4:cd:f7:01:d2:8d:
0a:72:1f:c0:fd:ca:29:37:8a:e3:0f:4e:10:bd:37:52:11:ad:
cf:84:5d:cf:cc:05:eb:7c:39:05:a2:fa:a3:be:5d:a4:75:7b:
23:63:ad:a7:0c:13:a4:08:58:a4:fe:f1:67:3c:80:58:3a:a7:
fa:12:30:de:83:f9:79:2a:2d:f4:6d:c9:1d:49:3b:02:5c:c0:
58:6f:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:02 2023 by rpki-client on console-ams.rpki-client.org