Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x5A7PuEGPmi5Nr7W27rnGz1zNSc.roa
File: x5A7PuEGPmi5Nr7W27rnGz1zNSc.roa (raw, json)
Hash identifier: WhzP5m3ge7t/cnh95Q65YEcRWhX9R2L4B2vuKinOIjs=
Subject key identifier: C7:90:3B:3E:E1:06:3E:68:B9:36:BE:D6:DB:BA:E7:1B:3D:73:35:27
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0182C7930249FB4DCB9C23BC0AF6865FC998
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x5A7PuEGPmi5Nr7W27rnGz1zNSc.roa
Signing time: Mon 22 Aug 2022 22:01:16 +0000
ROA not before: Mon 22 Aug 2022 22:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204160
IP address blocks: 2a0e:97c0:b70::/44 maxlen: 48
2a0e:97c1:100::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c7:93:02:49:fb:4d:cb:9c:23:bc:0a:f6:86:5f:c9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 22 22:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7903b3ee1063e68b936bed6dbbae71b3d733527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:5c:1b:9d:54:49:91:8d:4d:ec:6a:22:14:
48:93:ca:60:ea:03:8b:dd:1a:3e:5a:6b:66:86:c8:
8c:b2:5d:5c:64:28:e7:b3:f3:9f:57:94:cd:4e:6f:
2a:7e:fa:42:25:b3:f0:68:eb:89:2f:81:fc:66:db:
00:e1:fe:47:80:53:1e:e5:11:8f:eb:0d:86:23:6f:
f1:6a:78:3a:9b:a9:c6:a6:8e:55:a9:4f:03:91:7f:
bb:04:a3:72:78:d8:e0:c3:06:97:3c:16:82:50:bc:
ba:06:c8:da:71:8d:98:f4:be:0c:c6:a5:e9:e3:73:
18:59:11:64:3e:22:f7:ce:da:4b:74:04:47:53:e1:
00:26:37:49:0d:88:f5:11:61:e1:b4:5c:cc:4f:80:
1b:e9:6e:d5:38:65:2b:57:0e:bc:c3:a5:50:10:93:
47:fa:3a:16:dc:e7:f6:54:f4:2e:43:30:82:dd:4d:
af:02:41:f4:27:39:30:f9:88:b5:38:52:25:42:7e:
2f:22:98:17:1e:f6:4d:cf:4e:2d:34:39:8e:6b:41:
45:fc:5c:73:c0:76:60:a6:ea:d9:ce:04:f1:87:1c:
92:45:06:cf:a0:4c:2d:04:4b:c8:65:30:99:08:95:
25:c3:d4:d5:3e:84:c8:17:df:55:02:a4:94:49:e3:
8c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:3B:3E:E1:06:3E:68:B9:36:BE:D6:DB:BA:E7:1B:3D:73:35:27
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x5A7PuEGPmi5Nr7W27rnGz1zNSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:b70::/44
2a0e:97c1:100::/44
Signature Algorithm: sha256WithRSAEncryption
82:7d:bd:ca:be:1e:f1:08:84:b6:3c:0c:fe:1c:c5:5d:c3:0a:
fd:44:35:1b:b1:ef:2b:20:7f:cc:d7:9f:2d:39:53:75:ce:63:
8e:7d:a3:a5:14:f6:4b:16:2a:09:3c:35:3c:bd:ce:b2:bf:78:
bf:27:c9:0b:69:31:1f:58:da:06:d5:cf:5b:94:1b:79:bf:10:
9c:68:7a:9e:20:41:f6:c1:5f:be:2c:c8:4d:ec:9f:f8:78:e5:
c3:bb:f8:d3:37:f5:8c:fb:76:9f:07:c5:7a:a0:e8:de:1a:25:
fd:3b:07:d4:9e:a0:58:6e:7b:09:c4:cf:f9:04:8a:c1:09:fb:
44:1f:c1:e3:2d:6f:ef:08:d3:a3:8b:34:79:ed:2b:7d:68:89:
0f:9d:ed:6f:2e:10:fd:57:14:70:fd:36:26:41:af:6c:bc:22:
05:f0:c0:ba:e8:72:c4:dd:a4:a8:22:78:84:ca:d5:2b:9b:8c:
47:7c:9d:a8:3e:28:02:e9:2c:9f:ff:c0:eb:74:c6:f3:50:5a:
ad:2f:18:8f:f1:ca:7a:7b:36:9c:53:c8:14:1a:6b:42:08:a5:
2a:2f:b6:06:b7:9b:29:e7:1a:23:c4:43:3e:9d:e2:b7:d1:97:
a5:1f:06:b3:ee:b4:6e:df:de:69:b8:a5:86:ef:22:02:78:ed:
fe:93:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:40 2024 by rpki-client on console-fra.rpki-client.org