Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vaND8EejiD7iBjVOLFRL2eVyuhQ.roa
File: vaND8EejiD7iBjVOLFRL2eVyuhQ.roa (raw, json)
Hash identifier: WHAFgsS4jF9Gwl/VOlDsXXP3rfcP1ioOP6hRyEbb71E=
Subject key identifier: BD:A3:43:F0:47:A3:88:3E:E2:06:35:4E:2C:54:4B:D9:E5:72:BA:14
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0182944195ECE157C1F784388815083CD72F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vaND8EejiD7iBjVOLFRL2eVyuhQ.roa
Signing time: Fri 12 Aug 2022 22:51:42 +0000
ROA not before: Fri 12 Aug 2022 22:51:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204307
IP address blocks: 2a0e:b107:ac0::/48 maxlen: 48
2a0e:b107:ac2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:94:41:95:ec:e1:57:c1:f7:84:38:88:15:08:3c:d7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 12 22:51:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bda343f047a3883ee206354e2c544bd9e572ba14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:e8:04:b0:6a:65:50:49:2b:34:d2:db:ac:
89:b9:73:83:12:ab:7b:12:fb:57:00:d3:0b:1a:a1:
c7:01:58:74:1e:c2:74:a1:f8:44:1b:19:dc:ba:4d:
67:7e:60:3d:ca:55:d8:0d:82:69:4b:94:8c:df:43:
2f:19:2f:6e:f8:f7:82:d3:b6:ac:7b:9a:49:de:f2:
4d:4f:62:87:ae:cb:44:35:21:bd:a4:c5:b6:7e:e0:
ef:25:d5:a8:19:df:1e:7f:02:90:78:98:be:51:a5:
96:1e:4c:19:8a:10:7d:2a:e2:40:ae:91:2b:51:4f:
f5:bb:bc:aa:fe:a1:bf:01:89:b5:56:89:a7:1b:69:
19:2a:99:ba:ed:9b:bf:93:04:f2:bf:76:3e:7a:29:
9d:aa:2e:16:b7:78:84:23:18:50:1a:a0:50:0a:c2:
2e:c7:85:27:5a:e6:a8:ea:3c:d8:65:35:12:65:08:
a2:32:b1:31:b4:a8:65:54:44:b6:00:e2:68:73:ed:
43:64:95:62:1b:6e:ed:cd:6b:4f:bd:ed:cc:ba:98:
3d:f1:85:1e:34:55:0f:f2:d4:00:f1:be:4c:16:65:
42:ea:0b:a8:a4:f7:ba:35:b2:5d:4d:bc:1e:a2:e4:
03:aa:48:dd:7f:09:2a:b4:47:e3:c6:99:05:4b:f4:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:43:F0:47:A3:88:3E:E2:06:35:4E:2C:54:4B:D9:E5:72:BA:14
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vaND8EejiD7iBjVOLFRL2eVyuhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ac0::/48
2a0e:b107:ac2::/48
Signature Algorithm: sha256WithRSAEncryption
be:ed:2a:19:64:33:ee:a4:15:e5:11:84:1e:28:a7:2c:71:fa:
07:f2:95:08:af:8b:c0:ab:ca:b3:b4:15:cd:36:c7:9d:ed:42:
13:f9:2f:59:f8:d3:09:f2:e6:fb:e0:73:9f:88:28:8a:8d:f0:
6c:0f:3a:29:33:82:95:01:3f:e4:74:8b:79:56:e0:55:69:96:
03:65:8d:5d:82:0d:c2:d8:a7:96:2c:1a:1f:f5:9b:d1:c7:e6:
0c:ad:49:1f:87:cd:1e:d4:b3:7a:1d:5d:41:06:78:73:fd:20:
c3:af:85:2a:4c:c4:dd:2d:12:98:06:42:c1:90:23:30:1a:ff:
ce:01:e4:4a:fe:41:1c:50:38:03:23:45:53:5e:34:60:1e:a5:
c3:52:7a:c5:e7:06:f4:5d:11:1e:dc:fc:32:6c:dd:5e:ca:fb:
52:54:c1:30:56:e6:e6:3d:5a:54:a5:16:59:d8:3c:e7:38:b6:
c1:65:9e:34:28:8c:f6:98:81:f2:60:36:f8:2f:4b:f1:95:15:
b5:b3:4c:82:eb:d0:08:6f:80:28:f0:07:4f:c9:1b:e3:73:f9:
7d:e3:5a:30:d0:08:00:ea:a4:9d:ab:c4:9a:f8:c2:29:e0:30:
8f:da:87:64:c6:e2:75:59:ad:8d:f2:a7:6b:fb:0c:ab:d0:be:
56:65:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:34 2024 by rpki-client on console-ams.rpki-client.org