Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/noavmj7vlbS7uzKV8ykwq2xH8qA.roa
File: noavmj7vlbS7uzKV8ykwq2xH8qA.roa (raw, json)
Hash identifier: Pr19ERLFLM45WEm3uq7gG4GrtlZJKyk+68o95phb1w0=
Subject key identifier: 9E:86:AF:9A:3E:EF:95:B4:BB:BB:32:95:F3:29:30:AB:6C:47:F2:A0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 11A73EF3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/noavmj7vlbS7uzKV8ykwq2xH8qA.roa
Signing time: Sun 30 Jan 2022 21:06:57 +0000
ROA not before: Sun 30 Jan 2022 21:06:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208753
IP address blocks: 2a0e:b107:380::/48 maxlen: 48
2a0e:b107:382::/48 maxlen: 48
2a0e:b107:383::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296173299 (0x11a73ef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 30 21:06:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e86af9a3eef95b4bbbb3295f32930ab6c47f2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:f3:ee:80:6a:1c:92:e9:9b:fd:2b:f1:6f:
05:2e:a6:99:c6:38:0d:ba:58:91:ce:98:c4:c8:f5:
f4:f6:ef:93:9c:29:56:aa:68:fb:8c:8b:aa:a0:6c:
4f:e2:93:ca:63:83:cc:3c:5e:ac:ca:c3:a1:ab:8d:
58:f4:e5:a6:b8:95:e4:98:c3:dd:68:19:43:a5:c0:
d6:32:05:98:d6:72:c1:d8:c0:a0:36:4e:c9:3e:56:
d5:dc:b9:80:a6:6a:22:c4:63:9c:12:0a:f0:3c:36:
3a:82:25:31:0d:60:c0:49:ad:4c:c7:32:02:e0:d4:
11:20:76:8e:3f:4a:67:95:f8:9c:c1:7d:4d:af:49:
37:1d:e1:01:b9:37:d1:04:e3:79:d8:08:bf:5a:1e:
0e:47:83:c3:ea:f0:5f:6c:d6:a4:ec:98:58:96:a6:
51:0d:81:3d:43:63:f6:64:27:80:b3:4b:df:87:da:
1b:65:ee:ae:b8:26:d5:87:ae:b6:8b:9c:60:68:ff:
c1:5f:c2:64:4f:80:a9:9d:1d:d4:10:13:9b:49:93:
81:ac:3b:84:e2:ea:78:79:66:09:58:3d:83:6d:be:
38:08:54:df:b8:fc:e4:84:67:c4:83:a5:1f:03:20:
85:a7:be:d0:2c:b7:71:ff:c6:4a:d5:03:86:20:c7:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:86:AF:9A:3E:EF:95:B4:BB:BB:32:95:F3:29:30:AB:6C:47:F2:A0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/noavmj7vlbS7uzKV8ykwq2xH8qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:380::/48
2a0e:b107:382::/47
Signature Algorithm: sha256WithRSAEncryption
1c:bf:50:60:22:f2:fc:e9:25:3b:0b:78:c5:12:a4:b4:a8:06:
0d:08:5a:96:24:0f:cc:d9:15:e3:a7:74:66:28:a0:03:34:13:
05:89:26:4f:52:ca:b9:5d:e3:ca:62:9b:0f:92:73:0e:c3:fa:
d6:c7:65:96:e1:79:4f:7c:5c:d9:6d:57:38:36:a2:73:91:2a:
87:9d:2a:08:a7:6b:0a:83:56:1a:d6:f9:9d:7b:62:c9:b2:8e:
16:e4:55:4f:39:d2:30:b4:4e:61:47:ba:ac:77:c4:55:76:a6:
fe:98:b9:99:57:9f:4c:09:1f:45:4b:eb:13:ba:47:2c:95:6f:
c7:d4:9e:4c:f9:65:54:cd:54:d0:29:19:d0:ed:35:92:be:e4:
fc:e9:52:8b:9a:fd:6e:b7:23:03:62:5b:56:8f:16:3e:ce:49:
60:78:10:65:d9:15:b1:79:ad:e2:17:6b:11:27:08:27:2e:f3:
2f:25:a0:6b:46:cf:79:46:47:dc:57:ec:d0:ac:74:f1:c7:e2:
c7:a0:c0:45:be:8a:15:e1:ae:2a:3c:b5:e6:4d:2a:92:76:47:
75:47:87:5f:aa:a8:3a:c7:75:0c:64:1d:db:0c:50:2c:cf:fa:
43:92:d2:d5:33:13:76:34:82:d5:9d:f6:93:e6:f6:5e:02:03:
87:6b:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:37 2024 by rpki-client on console-fra.rpki-client.org