Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nDedzIhe2BjON48-NACmQXSLCxY.roa
File: nDedzIhe2BjON48-NACmQXSLCxY.roa (raw, json)
Hash identifier: FOJqwq7Ma7ppatfgGqjZwnTdWDjxsVt0XditpiqIzik=
Subject key identifier: 9C:37:9D:CC:88:5E:D8:18:CE:37:8F:3E:34:00:A6:41:74:8B:0B:16
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01831E5620FAD527F4A6FCFF5924867D95A8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nDedzIhe2BjON48-NACmQXSLCxY.roa
Signing time: Thu 08 Sep 2022 18:21:44 +0000
ROA not before: Thu 08 Sep 2022 18:21:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203790
IP address blocks: 2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
2a10:cc41:110::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1e:56:20:fa:d5:27:f4:a6:fc:ff:59:24:86:7d:95:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 8 18:21:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c379dcc885ed818ce378f3e3400a641748b0b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:78:ad:1c:4a:3e:a3:c0:c7:d3:33:b6:0c:
c5:e9:27:88:38:da:67:e4:04:cb:10:58:5e:1b:61:
3e:ce:61:8b:15:aa:4b:56:dc:87:ab:7f:1d:2e:5d:
bb:57:8f:fe:64:ef:05:b1:14:e1:32:40:d1:eb:9e:
fb:fd:5e:8f:e7:a1:38:68:b4:e3:42:5f:29:6c:6e:
9a:0c:b7:e1:ee:a2:3e:ef:e0:7f:5c:95:a2:e3:36:
e7:34:7c:ad:1a:6d:e5:a5:be:09:00:96:ba:a9:77:
f7:5c:80:80:89:53:2a:57:c8:c7:73:af:f2:4e:e8:
c5:b2:9d:ba:0c:f2:86:46:50:7c:0f:f4:11:15:65:
86:eb:20:c0:c9:17:19:83:86:ff:5e:fe:4c:fb:5c:
db:b1:ef:60:1b:da:30:64:01:54:a9:06:5f:f5:2f:
cd:d3:72:43:d0:7d:90:f8:c4:5a:a4:9a:2e:19:b0:
11:e0:e5:9b:cf:89:99:33:ec:24:cc:1d:a0:c3:03:
0a:e6:99:94:dc:4f:05:48:5c:40:3d:b1:f0:c0:bb:
0e:ab:33:f8:0c:24:a9:a3:57:00:29:5b:a5:31:cf:
81:25:a3:b9:03:36:87:b1:e1:66:32:9b:a0:18:3a:
eb:56:a0:1d:7a:74:fc:bd:81:61:e7:d1:14:32:86:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:37:9D:CC:88:5E:D8:18:CE:37:8F:3E:34:00:A6:41:74:8B:0B:16
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nDedzIhe2BjON48-NACmQXSLCxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:460::/44
2a0e:b107:12a0::/44
2a10:cc40:1d0::/44
2a10:cc41:110::/44
Signature Algorithm: sha256WithRSAEncryption
bc:36:df:56:19:91:23:30:6e:fe:2e:e7:3f:c7:0a:2b:0a:c4:
22:03:36:62:a0:8a:44:a5:6a:83:79:45:d3:f9:69:de:bb:4a:
92:22:98:f4:15:67:4d:18:f6:1d:a7:42:dc:8c:0b:71:e9:42:
c2:f4:3a:01:b0:1e:52:b3:b0:a0:40:ef:6e:0a:2a:5c:cb:c0:
ee:8d:3f:97:cc:07:20:46:20:ab:f6:a1:a1:9e:d5:eb:1c:54:
aa:87:02:a2:41:ae:d3:f4:5f:51:76:62:92:98:e2:58:81:48:
ea:b1:3f:2f:61:3c:ea:77:a4:b1:b1:e6:3b:89:6a:74:fe:5c:
d0:6d:c0:1d:99:1a:0a:a6:4a:de:75:0d:b9:10:2d:bb:bb:83:
2b:f0:9e:6c:1c:1e:32:5b:12:c0:09:c0:c2:fe:55:f1:c1:94:
95:64:0f:70:80:b8:6e:db:9a:de:4e:22:7b:fb:fe:3d:77:e1:
c7:f5:90:8c:6d:54:69:97:fb:08:4e:74:4b:4e:47:64:f1:f3:
5f:70:e0:d4:05:79:8c:e6:fb:11:d2:28:c3:f0:43:13:22:98:
51:29:76:e5:d5:1b:02:bc:17:22:c7:5b:30:7a:fb:73:fd:52:
e4:9d:52:c3:86:d0:69:27:c6:a3:e7:ab:68:21:4d:45:80:aa:
a7:dc:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:37 2024 by rpki-client on console-fra.rpki-client.org