Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hCXFN0uAhWqZGZyMb5vcsjtirC8.roa
File: hCXFN0uAhWqZGZyMb5vcsjtirC8.roa (raw, json)
Hash identifier: sCftnxiVU4T44PmdzoxAo3fPhMXmoEoeDG+wZnP2bZ4=
Subject key identifier: 84:25:C5:37:4B:80:85:6A:99:19:9C:8C:6F:9B:DC:B2:3B:62:AC:2F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 10ABA06A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hCXFN0uAhWqZGZyMb5vcsjtirC8.roa
Signing time: Sat 01 Jan 2022 09:05:16 +0000
ROA not before: Sat 01 Jan 2022 09:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210562
IP address blocks: 2a0e:97c0:620::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279683178 (0x10aba06a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8425c5374b80856a99199c8c6f9bdcb23b62ac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:6b:2a:d9:c4:1f:cb:67:77:00:16:e5:d9:
36:c0:9e:00:38:b0:3e:45:2b:73:06:3a:74:2c:3e:
32:0b:26:e1:7b:00:15:d9:e8:17:46:a9:a5:a0:42:
5c:ec:b7:43:36:1a:91:27:5f:55:2b:95:2f:92:8a:
61:8e:58:cd:18:7e:f4:5a:4d:76:f8:44:6d:80:de:
a5:14:b3:c4:e9:05:3b:0e:06:4f:bb:48:7e:e3:7d:
5d:20:b9:c4:4a:35:7c:c8:e0:37:7a:5b:e0:22:fc:
75:f8:58:c7:39:37:ed:e0:12:6c:ce:7c:a2:3c:af:
ae:7d:2f:ae:03:32:ca:46:c4:02:fd:67:7b:a4:ca:
c0:e5:d1:29:2c:c3:d5:43:32:c9:bd:65:35:34:1d:
2b:c7:78:25:a3:7b:6c:fb:79:7c:16:80:93:02:57:
b6:0a:7c:a8:99:bd:2a:c6:1c:25:5b:ba:15:90:71:
47:63:93:6d:2f:61:59:73:95:b4:c1:84:b4:82:93:
3a:39:c7:e7:98:fe:9a:f5:f0:03:19:78:7f:6f:40:
ad:5c:87:ae:e1:cf:6e:f9:0d:61:ce:f4:36:85:5b:
49:7d:50:1c:b1:98:72:38:ed:42:ac:bc:45:da:de:
31:44:3d:2d:61:e9:c9:8b:fd:09:7a:ff:89:2b:05:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:25:C5:37:4B:80:85:6A:99:19:9C:8C:6F:9B:DC:B2:3B:62:AC:2F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hCXFN0uAhWqZGZyMb5vcsjtirC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:620::/44
Signature Algorithm: sha256WithRSAEncryption
52:98:20:66:59:34:cc:e5:83:09:58:3a:81:a9:5d:6a:50:27:
5b:10:bb:5e:77:bf:11:ea:60:6e:c8:1f:11:42:37:3c:30:75:
d6:71:7f:f4:f6:69:82:52:90:ab:da:03:7f:fb:52:9e:22:24:
3f:b5:91:d0:21:54:b2:9e:63:03:f7:04:53:51:1e:3e:71:01:
ce:1d:8a:9f:cd:81:2e:6b:76:6a:9e:85:1a:34:d2:e3:8a:ab:
7e:e5:6e:2a:53:27:bc:92:7e:02:b1:27:08:59:0c:2b:53:44:
75:3e:81:80:eb:7b:f0:78:8e:ac:71:08:aa:5f:aa:f7:cc:34:
c1:e1:9c:a4:96:0d:c4:56:c5:78:28:02:69:48:d3:1a:c1:6b:
ab:12:37:2b:68:19:a0:cd:7f:e7:9f:c0:af:8f:98:11:bb:d3:
89:f4:10:12:b1:e8:3c:bc:02:63:fa:47:f9:30:64:b0:5c:e2:
73:b4:2f:77:13:87:b5:e0:f7:6b:48:a9:08:ac:0e:c5:64:78:
12:13:94:4f:41:e4:39:83:99:53:6c:be:dc:4b:64:35:ba:e8:
94:13:9b:8c:36:03:96:34:c9:1e:d5:b7:e6:5c:7b:53:bf:39:
aa:cd:38:49:e6:d3:ad:d3:8d:01:ea:ce:55:f6:0c:25:e1:12:
1d:f5:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:36 2024 by rpki-client on console-fra.rpki-client.org