Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rGqsZvlaPBLupdPQfln_gjnMh4o.roa
File: rGqsZvlaPBLupdPQfln_gjnMh4o.roa (raw, json)
Hash identifier: Zw8D4NifcTuzvHKcrPwKv/ijmzy2IiPXfHkROSxqFIQ=
Subject key identifier: AC:6A:AC:66:F9:5A:3C:12:EE:A5:D3:D0:7E:59:FF:82:39:CC:87:8A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 1531CC4C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rGqsZvlaPBLupdPQfln_gjnMh4o.roa
Signing time: Sat 18 Jun 2022 09:05:10 +0000
ROA not before: Sat 18 Jun 2022 09:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 2a0e:97c0:b33::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355585100 (0x1531cc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 18 09:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac6aac66f95a3c12eea5d3d07e59ff8239cc878a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f5:cd:f9:f2:25:01:f1:f9:08:8c:9e:54:55:
8f:1c:96:9b:1d:f6:c2:a7:1f:78:3a:66:37:68:00:
94:fb:1b:58:ca:2d:18:6f:8e:46:aa:af:55:68:80:
ac:10:8f:f0:c7:a6:dc:e6:90:65:95:80:42:a7:6a:
e4:43:05:77:cc:44:69:ed:7a:9a:c3:b6:47:9d:ee:
c9:f9:a9:bd:84:21:32:4d:bc:ae:39:f4:ca:5c:b6:
e1:a9:28:78:74:ee:9c:70:a0:01:ef:2a:f3:87:08:
39:f9:ee:44:61:7e:a5:f6:70:fa:91:d7:3d:3c:c0:
b9:28:a3:33:24:6b:49:3c:fa:72:5b:4f:c9:2b:01:
45:8d:ce:c4:6e:b2:e6:47:27:7a:e1:11:30:c6:18:
b9:0f:64:91:bb:77:7b:12:4d:5d:ba:0b:72:a1:0a:
59:af:14:97:bb:ae:4e:d1:4f:57:cf:88:13:cc:c9:
67:17:0c:fa:c9:d8:63:f1:0a:3c:cb:d4:b1:d0:c9:
7d:5e:59:27:10:b7:76:3e:2c:13:f8:04:7f:5b:a9:
6a:22:d0:ac:19:1c:f4:0e:0b:c3:8e:15:19:46:78:
99:8c:55:d3:53:71:35:2f:de:15:2a:c4:59:ae:bc:
88:9f:6a:44:05:a3:73:e3:0d:96:c3:77:2c:5f:ff:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6A:AC:66:F9:5A:3C:12:EE:A5:D3:D0:7E:59:FF:82:39:CC:87:8A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rGqsZvlaPBLupdPQfln_gjnMh4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b33::/48
Signature Algorithm: sha256WithRSAEncryption
65:13:43:b0:07:eb:a3:9e:56:87:5f:59:0f:e2:c8:58:3b:9a:
4c:72:33:15:07:43:2d:75:41:0b:b2:88:85:88:3c:e7:f9:ab:
49:02:3f:00:f8:3d:a9:bb:58:70:71:81:58:4e:0b:7a:9c:fc:
65:d1:ad:3e:b1:42:1e:14:71:01:59:4f:9d:99:b2:27:12:7f:
a6:22:fe:38:97:3a:2a:02:e4:37:3d:f9:63:01:46:78:e0:d5:
27:bc:83:7b:21:3b:1c:4b:b9:f0:b5:ff:27:7a:01:22:74:22:
3d:91:41:93:d5:62:3d:1f:0a:b3:b0:3f:cc:4f:90:58:fb:57:
ae:ef:d4:07:41:d1:43:8f:51:d4:87:db:a3:db:f6:df:f3:fa:
60:6b:d6:9e:6c:a4:d4:08:3a:83:93:8c:51:85:79:bf:6a:27:
61:e3:e4:62:7d:b5:73:3d:40:0a:c6:20:7a:60:5d:90:8c:c0:
a6:dc:de:05:54:5e:ff:e9:d2:1a:fa:24:39:20:81:41:27:f1:
a0:70:8c:28:91:2a:ed:bb:01:86:46:b6:65:1a:74:45:46:8e:
c0:56:90:ed:ee:a7:5e:74:26:ba:a0:8a:73:95:62:20:0c:94:
2e:92:ad:a5:2a:63:86:dd:06:db:63:2b:86:5d:e5:1a:ca:53:
89:32:0b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:38 2024 by rpki-client on console-fra.rpki-client.org