Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zGnkOTlFsy5n5okSgYOJ8KxHKJA.roa
File: zGnkOTlFsy5n5okSgYOJ8KxHKJA.roa (raw, json)
Hash identifier: 2ENzC9uAj7Br/DtkpFfszJAg8NfomPs0wxIaT36lziI=
Subject key identifier: CC:69:E4:39:39:45:B3:2E:67:E6:89:12:81:83:89:F0:AC:47:28:90
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 158162BF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zGnkOTlFsy5n5okSgYOJ8KxHKJA.roa
Signing time: Mon 04 Jul 2022 17:26:28 +0000
ROA not before: Mon 04 Jul 2022 17:26:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204750
IP address blocks: 2a0e:97c0:3d5::/48 maxlen: 48
2a0e:97c0:3d0::/44 maxlen: 48
2a0e:97c0:3d0::/48 maxlen: 48
2a0e:97c0:3d3::/48 maxlen: 48
2a0e:97c0:3d6::/48 maxlen: 48
2a0e:97c0:3d1::/48 maxlen: 48
2a0e:97c0:3d9::/48 maxlen: 48
2a0e:97c0:3d4::/48 maxlen: 48
2a0e:97c0:3d2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360800959 (0x158162bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 4 17:26:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc69e4393945b32e67e68912818389f0ac472890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:b5:2c:c3:d1:70:61:06:19:86:4c:7e:68:
6a:58:1d:de:78:e1:7b:ca:5e:37:37:64:8f:15:ef:
a9:6f:6b:04:92:b2:bd:d1:4b:8f:b6:3f:cd:36:29:
fb:6a:90:70:08:73:b6:71:fa:f1:05:21:46:4b:fb:
fd:17:79:83:78:c3:62:77:36:ff:b8:1a:d0:4a:e7:
d6:85:63:a2:23:3d:02:1f:88:a9:26:b7:ae:cd:e0:
b7:60:f0:f5:e3:7c:6e:5b:26:e1:4c:43:d6:fc:52:
f6:3c:7d:6d:27:55:fe:c2:1e:f5:d5:c4:62:c6:ac:
db:3d:f6:5e:f1:d2:d9:0f:63:78:8b:ad:49:33:2c:
12:8b:19:0f:e2:9b:c5:b2:b9:74:f4:06:4a:76:d2:
da:3f:29:65:dd:20:61:aa:f9:19:90:99:5f:2f:f9:
31:dd:5f:c7:62:62:a9:a9:0d:18:a8:fc:46:d6:8c:
de:6d:b8:0e:d4:2c:f1:17:fa:71:70:f1:f9:d4:b2:
24:ad:06:3f:a6:4d:4e:0f:a7:1f:50:a7:a1:55:73:
f1:6e:91:c9:30:a6:0a:34:5f:bc:8b:82:74:ad:7c:
6b:1a:6d:b5:24:c8:7a:81:76:a0:e7:a3:10:a6:05:
7b:1f:92:08:86:4a:c4:28:87:71:ea:cf:61:1b:c2:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:69:E4:39:39:45:B3:2E:67:E6:89:12:81:83:89:F0:AC:47:28:90
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zGnkOTlFsy5n5okSgYOJ8KxHKJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3d0::/44
Signature Algorithm: sha256WithRSAEncryption
c6:93:55:ba:15:16:6d:19:2a:73:1e:d1:36:19:f0:a8:98:59:
7a:45:0a:6a:ae:33:31:2a:ab:67:f2:e1:08:10:0a:d1:bd:02:
2e:45:d6:6f:61:a3:a0:a6:ae:8b:31:39:46:55:0f:cf:f5:8f:
16:aa:7b:b8:21:34:db:ce:23:9c:a9:a7:25:ac:4e:00:02:8c:
a9:c0:51:01:37:c4:e1:8c:fb:0a:d4:f0:25:84:84:f0:b2:28:
a3:c6:df:f7:f4:85:6d:ef:0c:d3:91:17:7c:48:2a:e1:cd:c9:
3a:4f:0d:ae:82:8f:26:57:b5:42:0c:b3:03:0e:45:9f:51:57:
1e:4e:b5:e5:f2:3f:fc:d9:4e:da:80:94:13:3d:c4:8e:69:ff:
ed:70:76:fb:13:ce:6b:e4:b2:0e:2d:13:36:36:b1:59:3e:d1:
0a:45:66:69:24:db:46:85:b6:c4:04:1e:6d:0e:33:ec:03:7a:
ef:8d:f2:55:be:c6:56:76:84:aa:f4:0e:1a:bd:5f:07:91:ac:
f7:82:be:00:99:e2:b2:f3:71:07:c2:7e:18:99:ac:97:b1:27:
01:24:4b:84:74:da:76:45:a4:46:50:4b:78:d6:4c:be:99:72:
dc:12:61:40:52:e3:52:da:f1:df:ea:38:a8:38:50:36:d2:e4:
1e:4d:b0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:05 2023 by rpki-client on console-ams.rpki-client.org