Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xfsvWXUQQn1G2e3sB7Fuw5YYuhA.roa
File: xfsvWXUQQn1G2e3sB7Fuw5YYuhA.roa (raw, json)
Hash identifier: 5IMJIhbdbTpgFxPqLyuxAlbnKw+3oW20G7lMnc8yslQ=
Subject key identifier: C5:FB:2F:59:75:10:42:7D:46:D9:ED:EC:07:B1:6E:C3:96:18:BA:10
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 14BE02C6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xfsvWXUQQn1G2e3sB7Fuw5YYuhA.roa
Signing time: Fri 20 May 2022 10:51:03 +0000
ROA not before: Fri 20 May 2022 10:51:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57797
IP address blocks: 2a0e:97c0:690::/44 maxlen: 48
2a0e:97c0:690::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347996870 (0x14be02c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 20 10:51:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5fb2f597510427d46d9edec07b16ec39618ba10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:31:db:64:32:ab:a7:5b:88:c7:b3:d4:85:
09:e0:b5:1a:54:5c:a4:c6:62:ea:2d:cd:ec:1b:53:
90:d3:ec:d4:40:ec:02:92:29:4a:5a:6f:da:74:ec:
d6:e7:71:76:1f:90:cb:fe:b7:3e:55:3c:0f:81:4a:
6b:41:54:d0:97:0f:a8:51:ae:31:e6:fa:d3:7e:bf:
a0:e3:35:2a:b8:41:bc:93:23:13:b3:3a:54:37:5d:
fc:d6:fe:60:4c:1e:92:8d:25:42:75:e0:d9:93:8f:
c4:ec:bf:ce:fd:86:48:68:52:7a:d2:20:d1:92:bb:
40:23:9c:af:d4:80:30:00:36:e0:bc:1c:84:1d:8e:
95:13:12:0b:4b:1b:49:ac:37:78:dc:70:8f:b4:e9:
57:5e:24:b1:35:60:66:1d:5a:0e:d5:ee:d8:91:00:
9b:3a:9f:b8:4c:72:61:73:83:bc:72:9e:c6:3f:3a:
84:22:3e:00:1b:25:ba:5a:5f:6f:5c:d5:2c:87:ae:
25:a2:7b:62:4e:ad:a4:ad:be:07:3c:89:c0:5a:6e:
84:64:69:68:ae:b3:af:9f:e0:00:aa:cc:43:f2:8c:
89:db:14:73:5b:2b:68:07:c0:85:40:8d:57:53:4a:
33:5a:06:6a:f2:8d:33:cd:00:19:b3:b5:f6:e9:92:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FB:2F:59:75:10:42:7D:46:D9:ED:EC:07:B1:6E:C3:96:18:BA:10
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xfsvWXUQQn1G2e3sB7Fuw5YYuhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:690::/44
Signature Algorithm: sha256WithRSAEncryption
9d:fb:1e:c9:5f:a3:83:41:49:a4:2d:56:6d:e3:dc:80:4e:5f:
d1:5b:43:e6:2c:5e:6e:eb:6a:c5:ed:80:12:3a:4f:09:dc:1f:
57:44:cd:e5:e8:fb:69:5f:3a:fd:5b:51:32:ad:e8:d4:c0:cc:
40:4e:db:a0:c9:72:ee:3b:3e:3d:d7:a2:e0:da:fc:5c:c9:51:
2b:54:ad:d9:b0:e1:a0:82:65:b0:7a:68:11:6c:1c:9d:1b:7e:
9d:a3:c1:2f:6b:18:27:35:e1:e2:08:98:e1:08:1d:b0:f8:4a:
7f:da:13:d7:02:c7:e0:0d:55:73:b1:e1:de:57:5d:c4:04:f3:
d6:c3:82:c0:73:ec:2b:87:b6:b9:a6:20:41:df:38:21:2b:3c:
57:99:7f:93:99:9b:00:ea:54:37:3d:d6:4b:20:36:cd:68:2a:
82:43:39:04:90:39:ed:61:97:8d:99:89:c5:aa:e1:05:0a:da:
0f:fb:f1:8f:9b:80:ad:eb:f9:75:7e:b5:48:39:24:01:93:44:
0e:a7:b4:d3:ab:7f:a0:2c:dd:31:d4:9b:6d:2c:0b:9d:58:a3:
52:ff:e9:c7:56:cf:22:a8:62:36:e3:18:86:92:58:fb:2d:fd:
db:cf:87:e2:1c:04:f0:8e:1c:7a:9c:63:af:5a:10:3b:01:58:
da:8d:4f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:40 2024 by rpki-client on console-fra.rpki-client.org