Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/5GDdCfcEWJIWVXlTBSrdG9Gny6Y.roa
File: 5GDdCfcEWJIWVXlTBSrdG9Gny6Y.roa (raw, json)
Hash identifier: uLdyB366KuAhTKNxo7BCcdwWGoz+o29/2Nd6m5sOc4Y=
Subject key identifier: E4:60:DD:09:F7:04:58:92:16:55:79:53:05:2A:DD:1B:D1:A7:CB:A6
Certificate issuer: /CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Certificate serial: 0183A3682925081BDDB5716771AF8D4D8615
Authority key identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/5GDdCfcEWJIWVXlTBSrdG9Gny6Y.roa
Signing time: Tue 04 Oct 2022 14:30:55 +0000
ROA not before: Tue 04 Oct 2022 14:30:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210490
IP address blocks: 2a11:4e07:f001::/48 maxlen: 48
2a11:4e07:f000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:68:29:25:08:1b:dd:b5:71:67:71:af:8d:4d:86:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361
Validity
Not Before: Oct 4 14:30:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e460dd09f704589216557953052add1bd1a7cba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:01:db:19:01:24:ca:3c:ae:fd:92:dc:95:
f8:b9:a8:39:a8:60:0e:13:02:b8:a8:e4:ee:be:d2:
90:c2:6f:59:fd:09:96:09:dd:5d:ee:b5:f0:3f:6a:
17:8b:18:f2:3c:2a:01:34:aa:46:48:ac:87:18:93:
19:fb:0f:cb:ab:10:c6:31:59:87:2d:e8:32:9c:ae:
72:af:30:42:bf:a6:4a:96:3e:79:69:c9:a8:92:22:
9a:ac:e4:15:49:91:fc:1f:97:b5:93:c4:dc:d3:cb:
4c:c2:19:1a:72:6d:22:8b:b6:a2:38:94:42:a9:3b:
f4:39:f2:b3:9b:97:b0:15:19:e6:6b:3a:43:cd:39:
58:a9:8f:4c:9b:b2:bd:05:66:62:43:ea:b5:cb:d3:
7e:17:9f:53:33:07:99:3e:91:37:5c:98:71:4a:bf:
68:1a:20:f3:b4:fd:1a:45:00:7e:6b:68:08:45:11:
a8:71:b9:ee:c5:e9:07:ae:ba:86:64:e8:b2:aa:c1:
5d:a1:98:c6:be:8e:94:f6:19:f7:fd:07:dc:87:7b:
0e:06:8a:c7:a6:1d:e2:22:67:1e:b8:12:01:ba:8f:
5f:10:dd:58:a0:71:ad:e7:6a:41:82:4d:5e:94:1b:
ce:fe:23:e2:14:cd:3f:c5:84:79:5d:06:56:e6:63:
ac:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:60:DD:09:F7:04:58:92:16:55:79:53:05:2A:DD:1B:D1:A7:CB:A6
X509v3 Authority Key Identifier:
keyid:8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/5GDdCfcEWJIWVXlTBSrdG9Gny6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4e07:f000::/47
Signature Algorithm: sha256WithRSAEncryption
25:2d:2f:a6:2f:ae:cd:a1:2a:2d:6e:42:5b:ed:86:5a:39:04:
44:fd:02:f0:90:50:ce:8f:31:51:96:de:a9:c7:a6:a9:0f:ab:
51:f6:ad:c2:20:90:6f:d9:c6:3e:f5:43:42:f7:eb:14:f2:dc:
e9:3b:b1:f1:0b:1f:0e:b6:fb:e7:35:fc:d7:0d:a8:e2:77:5a:
02:26:f5:0b:e8:87:69:76:e6:39:c8:4f:fd:cb:0f:51:48:e0:
77:e5:8e:66:91:b4:05:00:a0:d1:22:c1:7d:c2:f2:8a:97:ae:
10:0d:b7:b3:b2:21:41:3b:ad:df:14:23:4c:57:24:94:c9:cf:
3c:b9:b4:e3:f7:44:45:c3:76:be:94:d7:ec:da:57:83:ad:c8:
fa:f2:d7:c6:d9:26:3d:e9:0c:44:e9:a0:df:c8:9d:43:f5:c8:
43:42:92:2f:4a:16:fd:bd:30:0e:74:7f:99:2c:0e:c7:6d:3a:
5f:3f:d4:3f:2c:c0:82:24:68:39:36:2b:60:37:9f:fd:b7:aa:
7b:09:d3:42:2c:5e:9c:35:63:af:d7:ab:f9:c7:fa:e7:a0:3b:
b3:c6:a5:af:ab:f9:4e:fc:4a:28:99:07:c8:a5:5b:c5:86:d7:
cd:dd:24:4f:40:53:73:98:8d:4d:ad:86:7d:73:9a:42:da:44:
ba:f4:77:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:19 2024 by rpki-client on console-fra.rpki-client.org