Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zfHeT6T42atR60TEszA3lzHSLq4.roa
File: zfHeT6T42atR60TEszA3lzHSLq4.roa (raw, json)
Hash identifier: AHjQKPXPC1kTsjzw9HPeAzXdhLCeSUT47aGClrULMB8=
Subject key identifier: CD:F1:DE:4F:A4:F8:D9:AB:51:EB:44:C4:B3:30:37:97:31:D2:2E:AE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 12CF8019
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zfHeT6T42atR60TEszA3lzHSLq4.roa
Signing time: Wed 09 Mar 2022 19:50:50 +0000
ROA not before: Wed 09 Mar 2022 19:50:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207716
IP address blocks: 2a0e:97c0:7b0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315588633 (0x12cf8019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 9 19:50:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdf1de4fa4f8d9ab51eb44c4b330379731d22eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:17:28:99:b7:2f:78:b9:8c:53:44:9a:ca:
af:1d:61:0a:31:4d:d5:b5:d4:52:8f:a9:ed:5f:69:
81:cc:29:ad:cf:c9:38:b6:b2:18:24:8e:ec:d2:b9:
29:be:05:5b:8b:a0:3c:b2:29:c6:76:75:e8:2e:37:
0d:9e:ce:2f:64:07:bc:d8:9c:d1:b3:63:fc:2f:91:
00:17:77:2e:02:ec:d2:b5:f2:94:dd:63:a3:04:04:
cf:24:e9:9a:b5:2b:f5:0f:aa:56:9a:1a:fc:c7:8a:
8b:fb:f8:8c:c4:b5:62:6b:ee:99:ff:db:76:9f:7d:
7e:2b:c4:01:dd:73:de:a7:18:af:c9:93:c9:b5:91:
81:8a:a9:92:72:c3:47:3d:5d:fa:c8:6e:34:4a:82:
98:4a:51:5b:0f:d7:e5:bf:57:73:01:39:93:08:f6:
2c:84:7e:71:4d:e6:89:79:68:d3:1e:9b:6c:d0:b7:
60:4d:0e:0f:bb:72:38:a1:a4:50:e3:98:4a:c0:af:
35:3a:29:6f:ca:12:f3:f7:96:f1:9e:b7:89:25:98:
0c:0c:4c:2a:76:46:bf:62:11:6a:1e:22:4e:a6:1f:
2c:16:15:dd:82:53:15:5c:56:99:2d:fb:50:83:86:
7d:f8:06:f9:ec:ef:71:b0:3d:a8:ea:42:93:5b:8c:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F1:DE:4F:A4:F8:D9:AB:51:EB:44:C4:B3:30:37:97:31:D2:2E:AE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zfHeT6T42atR60TEszA3lzHSLq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:7b0::/44
Signature Algorithm: sha256WithRSAEncryption
6d:8c:51:a6:bd:bd:e7:4b:3a:ac:be:24:cf:3e:54:ff:54:73:
82:9f:85:f7:85:e4:ce:e1:ae:57:54:3e:2e:93:9e:28:00:b8:
8b:1a:8d:f4:55:88:40:b7:b0:4a:6f:bc:33:f4:0f:44:08:b7:
e3:b6:14:63:0d:bc:94:6c:a8:7d:a1:18:d8:78:43:d5:1f:45:
9a:7f:ad:53:48:c4:0e:24:03:e5:b2:ba:22:06:6e:4b:85:eb:
c1:66:eb:13:25:75:45:3a:9b:1a:5e:0a:9e:da:17:f1:4b:95:
17:91:8d:8d:e6:59:9f:f6:df:bf:28:e8:4e:23:45:34:fd:94:
48:4c:14:48:3e:3f:54:ab:43:1f:d0:90:a6:5b:e9:2f:79:dc:
80:36:13:f1:6d:15:f1:39:5d:fe:84:7c:42:6c:f2:5a:ac:7b:
df:86:61:64:38:74:3d:a2:3a:db:0b:49:47:07:38:98:e9:bd:
3d:f0:62:f4:81:de:c4:f4:c0:75:0a:ed:8b:91:fa:3b:c5:3c:
3f:95:b3:a4:72:1c:b4:97:d6:4d:21:49:ee:d3:dc:37:b4:92:
0a:0c:cd:a2:60:36:7a:ad:56:68:76:43:28:26:c2:bd:aa:81:
16:2d:05:95:e4:42:f5:2a:ed:e7:90:39:fd:02:04:66:56:52:
f4:5e:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:41 2024 by rpki-client on console-fra.rpki-client.org