Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mSYUfqKMeCP6gfUvjhP633BkF7M.roa
File: mSYUfqKMeCP6gfUvjhP633BkF7M.roa (raw, json)
Hash identifier: TqJn00j3yC6Z0Y9vmTP9U4dkPdXgh5BNxF7xHrWhjMk=
Subject key identifier: 99:26:14:7E:A2:8C:78:23:FA:81:F5:2F:8E:13:FA:DF:70:64:17:B3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 119DB76A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mSYUfqKMeCP6gfUvjhP633BkF7M.roa
Signing time: Fri 28 Jan 2022 23:00:34 +0000
ROA not before: Fri 28 Jan 2022 23:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207726
IP address blocks: 2a0e:b107:1060::/48 maxlen: 48
2a0e:b107:ce0::/44 maxlen: 48
2a0e:b107:560::/44 maxlen: 48
2a0e:b107:1050::/44 maxlen: 48
2a0e:b107:cf0::/44 maxlen: 48
2a0e:b107:1060::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295548778 (0x119db76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 28 23:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9926147ea28c7823fa81f52f8e13fadf706417b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a2:5d:60:0f:eb:63:f3:3c:cf:97:d7:60:21:
87:ef:d1:48:8b:59:74:2d:b7:d1:e8:2d:49:83:ce:
a0:c4:9c:60:f9:fa:a8:b5:83:d4:7b:fd:23:c1:d7:
1e:23:c1:c9:72:41:6b:68:40:61:0d:61:2e:25:6b:
79:31:c7:d3:b7:c7:d8:a7:75:a7:de:73:b5:d3:d7:
e6:dc:77:84:9f:9f:1f:0f:94:66:f6:dd:63:8d:23:
ed:44:47:c9:cd:32:43:d9:5e:f3:a9:41:a6:23:25:
01:4c:4d:65:f7:26:8d:5c:4d:2d:68:5b:8b:f7:e0:
9c:08:df:96:a3:61:55:41:1f:c1:3d:f1:b2:3e:5f:
d4:6b:6b:07:ec:70:79:e5:c9:a1:c4:65:52:a4:e2:
6c:e5:8f:4d:60:87:b5:b9:01:a4:46:48:93:9b:6d:
df:37:68:b4:c8:69:0b:aa:f1:54:30:ae:fe:e5:cf:
ef:57:20:7c:e8:df:55:02:d9:3a:65:3e:c0:2e:7d:
98:fa:73:49:a1:22:d9:9a:2c:dc:b8:6a:fd:5e:5f:
e9:e9:85:e8:41:45:00:45:df:19:6d:c2:af:e8:d8:
b9:9c:13:a7:1d:db:75:ef:6a:37:77:0e:f9:34:a3:
59:d6:c2:38:74:e0:de:c0:cb:da:f0:32:5b:30:dc:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:26:14:7E:A2:8C:78:23:FA:81:F5:2F:8E:13:FA:DF:70:64:17:B3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mSYUfqKMeCP6gfUvjhP633BkF7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:560::/44
2a0e:b107:ce0::/43
2a0e:b107:1050::-2a0e:b107:106f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
96:1c:3c:0a:06:d9:fa:70:e2:28:b5:8c:82:58:bf:0f:8c:a7:
76:3f:1a:29:d0:15:3c:9b:67:21:54:76:28:c6:f3:7b:0a:d0:
51:23:6a:07:7d:79:f9:8f:56:3a:2e:d2:20:20:07:94:d9:e9:
74:48:47:d6:06:40:e8:24:70:9f:ad:50:73:28:65:fd:85:d1:
53:e3:45:55:9b:25:47:c2:01:2c:cf:9f:0e:ea:f7:7d:b0:00:
f6:5e:3e:51:95:02:b9:41:62:be:f9:de:09:64:de:ce:ed:4e:
93:fb:77:c8:09:8b:6d:ef:8c:22:dc:bf:ea:20:b7:82:30:4d:
dc:b7:47:5d:df:de:bc:4c:3a:f0:c8:cc:7c:1b:20:1a:93:44:
0d:da:14:f0:fa:fb:a7:5a:87:62:71:f6:1e:23:fb:cf:86:7b:
a8:f3:41:16:36:e8:88:4a:17:c3:2c:3e:9a:c8:af:8e:fb:ac:
ea:ff:a0:32:73:88:e2:49:a1:14:2d:29:70:70:4a:33:2e:05:
bf:3d:71:e4:98:17:d7:81:cd:dc:91:b4:a0:7a:d9:5d:33:49:
b7:07:76:1e:03:d9:d2:07:80:49:38:fb:e3:d0:6e:6a:33:97:
0b:fa:81:40:1e:92:9c:ed:27:f5:d0:59:f6:7f:e5:54:ba:de:
9b:6f:8b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-fra.rpki-client.org