Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x82ekQyioWKrcEVvBGAWbdvwo5w.roa
File: x82ekQyioWKrcEVvBGAWbdvwo5w.roa (raw, json)
Hash identifier: igo7otC0Zr5JfiMdfAdx7ILgKbYVOmDRH+NbuTIrU78=
Subject key identifier: C7:CD:9E:91:0C:A2:A1:62:AB:70:45:6F:04:60:16:6D:DB:F0:A3:9C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01847C2D28EBCE91AA8343BB035516CCF4A4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x82ekQyioWKrcEVvBGAWbdvwo5w.roa
Signing time: Tue 15 Nov 2022 16:44:05 +0000
ROA not before: Tue 15 Nov 2022 16:44:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201412
IP address blocks: 2a0e:97c0:c70::/44 maxlen: 48
2a0e:b107:1cf0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7c:2d:28:eb:ce:91:aa:83:43:bb:03:55:16:cc:f4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 15 16:44:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7cd9e910ca2a162ab70456f0460166ddbf0a39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:72:79:ab:3d:78:6c:94:f9:b5:76:8f:c0:
8e:fe:77:bb:4d:51:7c:16:42:05:a4:99:e4:67:64:
c1:41:81:97:a2:ab:8f:1d:e3:ff:cc:d7:ee:20:4c:
0c:f8:d1:08:59:65:84:52:3c:1f:a0:ef:7a:63:fd:
f0:e5:a0:e8:74:01:d1:ef:ca:0f:5f:b7:ed:6d:1b:
cc:b3:ec:f2:7c:80:1f:17:bf:15:f6:8e:6d:1e:53:
3e:c8:69:08:11:e9:16:f6:28:ca:3c:45:1c:d9:3f:
81:f3:2a:83:bf:76:53:d1:a1:91:25:33:b5:a0:9a:
2c:50:22:cf:3a:8d:5a:10:32:c7:72:46:ae:db:f1:
fb:49:42:8e:81:e8:8e:7f:ab:08:1f:7f:ac:72:cc:
f2:58:48:c7:ec:4b:13:24:38:48:05:68:af:11:95:
aa:19:fd:26:54:24:f0:b5:97:57:ce:17:44:7b:9d:
e7:c9:f0:c7:27:d2:26:f0:79:fc:c6:f5:fc:00:a7:
00:7b:d0:0d:d6:6b:d7:ee:3c:15:e5:bc:e1:f0:73:
9d:c1:31:38:54:23:59:f7:22:99:ee:29:da:55:ec:
20:66:7c:e4:ed:eb:26:e1:27:52:93:58:a7:24:cc:
d7:38:a1:79:3a:b7:c0:45:38:0e:a9:36:9c:42:12:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CD:9E:91:0C:A2:A1:62:AB:70:45:6F:04:60:16:6D:DB:F0:A3:9C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x82ekQyioWKrcEVvBGAWbdvwo5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c70::/44
2a0e:b107:1cf0::/44
Signature Algorithm: sha256WithRSAEncryption
7f:fa:68:95:51:4a:c1:2c:3e:0e:bd:1e:7f:2a:2e:da:ea:59:
d9:c0:e8:b7:a7:d6:02:a2:b9:da:f9:b1:16:94:6a:3e:6f:ce:
f5:5f:46:91:fb:ae:a5:98:d5:77:b0:06:aa:1a:70:72:01:2e:
e4:99:66:d5:b2:6c:59:d6:9a:68:aa:e1:d6:ba:98:4a:f8:fd:
95:64:a3:f5:50:5b:ae:99:1b:e3:a9:4f:3f:32:78:75:77:50:
c7:a3:a7:e9:d0:ba:3f:39:ca:60:55:18:d2:11:46:81:35:e4:
d6:25:46:1c:57:74:67:fc:a3:23:4f:bf:94:ef:3e:18:b2:19:
92:2b:b1:59:2c:74:24:9e:0d:ab:37:15:3a:ed:05:39:d4:86:
2b:a8:e0:57:ab:f3:99:00:16:98:7d:5a:5c:a2:58:9d:24:87:
0a:f3:1e:7f:aa:5a:91:4b:ed:0e:11:31:c6:e8:a4:b3:db:46:
a8:03:4b:75:4a:70:95:ed:ae:ae:57:be:7b:63:73:aa:7a:a2:
58:ca:b4:25:68:ba:22:92:22:8a:7b:2d:9f:c7:63:30:6e:5a:
fb:5f:34:16:81:17:e5:d7:58:3f:25:61:52:0b:43:50:75:89:
bf:75:07:2c:8b:8e:43:93:d0:da:c7:b4:eb:bf:b9:61:ac:2e:
60:00:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:40 2024 by rpki-client on console-fra.rpki-client.org