Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vkCQKp6ALKrEMh1yJhwyLrWMUEo.roa
File: vkCQKp6ALKrEMh1yJhwyLrWMUEo.roa (raw, json)
Hash identifier: 7SdY3nJCXI1/F5EnksRtU3edLpZL2LlzxT73QyGtCXc=
Subject key identifier: BE:40:90:2A:9E:80:2C:AA:C4:32:1D:72:26:1C:32:2E:B5:8C:50:4A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 107E3AE7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vkCQKp6ALKrEMh1yJhwyLrWMUEo.roa
Signing time: Sat 01 Jan 2022 09:04:48 +0000
ROA not before: Sat 01 Jan 2022 09:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58336
IP address blocks: 2a0e:97c0:550::/44 maxlen: 48
2a0e:b107:16b0::/44 maxlen: 48
2a10:cc42:120::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276708071 (0x107e3ae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be40902a9e802caac4321d72261c322eb58c504a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:18:3c:1b:38:d8:f6:a8:38:ac:e3:d2:c3:
88:40:e8:03:d7:d5:15:f4:4c:1a:fc:53:a8:fe:ec:
33:86:04:a7:81:d4:d0:8b:89:04:02:bf:2e:07:93:
dd:56:42:1b:d9:ea:be:e4:1e:d5:c6:af:fd:3a:ae:
85:8d:84:5d:66:7f:47:1c:e1:10:bc:f8:28:52:72:
19:be:31:ec:d3:ca:07:7f:a5:60:bc:49:2d:cd:2a:
86:e8:0a:e0:2a:7d:5f:c3:1a:6c:8c:1b:4e:6f:34:
be:33:b9:ee:4b:c9:ad:62:7b:33:cc:a0:f0:3c:77:
bf:96:97:22:eb:92:c9:a5:5f:48:44:3d:44:9b:ce:
d2:5e:e6:c3:07:23:20:4d:26:8d:83:31:08:17:df:
92:c1:1d:2a:57:4d:2d:fc:2b:3c:06:41:80:20:f9:
f6:4a:80:64:91:3c:85:e0:6b:b2:54:c1:96:27:af:
d2:1d:65:2a:68:1d:4d:23:fa:cb:d3:51:6a:69:72:
db:da:a0:ba:17:b7:3f:6e:8c:7b:19:87:41:dc:ba:
74:10:e2:64:be:96:73:c1:5c:6f:04:bc:98:14:b1:
cd:eb:fa:65:ce:89:81:3a:2c:45:b8:ac:09:33:81:
c3:41:c8:45:f0:78:f7:a4:f7:e0:92:1d:6b:a3:02:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:40:90:2A:9E:80:2C:AA:C4:32:1D:72:26:1C:32:2E:B5:8C:50:4A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vkCQKp6ALKrEMh1yJhwyLrWMUEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:550::/44
2a0e:b107:16b0::/44
2a10:cc42:120::/44
Signature Algorithm: sha256WithRSAEncryption
1f:62:5f:9f:c9:ac:65:da:43:bb:f8:9d:cd:48:1d:09:fd:01:
33:0a:89:47:1f:6e:62:93:8c:07:72:b5:7c:75:02:8c:96:c1:
21:e6:29:79:6d:ea:86:01:d7:42:14:24:44:19:66:cc:e4:fb:
f9:c3:03:53:b9:28:c7:68:2e:0a:5e:7d:b0:e0:69:e2:39:ca:
a1:cc:6a:4c:f2:f2:68:a3:62:00:03:1f:95:71:40:20:77:45:
3d:c1:f4:ac:e4:ed:c0:25:27:04:1f:ab:59:05:66:35:cb:e8:
a5:07:3e:13:51:7e:bb:f2:ea:3a:d1:bb:a4:e6:c7:54:76:e1:
58:9c:4f:35:42:bf:42:18:cd:81:70:7c:94:29:a7:8c:ef:d4:
77:f1:0b:e8:24:ad:01:07:33:fb:f9:82:03:5b:df:5a:c0:ae:
ad:d1:17:21:f0:19:d0:49:63:05:ac:11:a6:46:f2:73:6c:55:
0c:56:9f:64:c8:81:8e:a6:66:72:7d:62:06:76:33:58:0b:0f:
58:9b:51:c6:f9:e2:13:80:97:53:34:d0:ef:47:3e:df:ea:eb:
61:27:6a:90:ed:b6:b6:93:04:5b:c5:07:36:63:c1:0c:71:e5:
73:a5:99:f8:4a:39:80:21:97:11:d7:6c:a3:bd:43:bd:8c:a7:
9e:d6:3e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:34 2024 by rpki-client on console-ams.rpki-client.org