Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/vNGHMpD10WvjPQfy5DWVsUPajn0.roa
File: vNGHMpD10WvjPQfy5DWVsUPajn0.roa (raw, json)
Hash identifier: KOVnlNxRy1TBofc/YejDKuEfKLuiXrBWyO97i7yOnUU=
Subject key identifier: BC:D1:87:32:90:F5:D1:6B:E3:3D:07:F2:E4:35:95:B1:43:DA:8E:7D
Certificate issuer: /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial: 018202DD44921012DA24C72C9190016E6841
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/vNGHMpD10WvjPQfy5DWVsUPajn0.roa
Signing time: Fri 15 Jul 2022 17:17:11 +0000
ROA not before: Fri 15 Jul 2022 17:17:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204901
IP address blocks: 2a10:a642:aa00::/40 maxlen: 48
2a10:a642:aa00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:02:dd:44:92:10:12:da:24:c7:2c:91:90:01:6e:68:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Validity
Not Before: Jul 15 17:17:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcd1873290f5d16be33d07f2e43595b143da8e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:69:17:83:9a:fe:b5:03:94:12:ee:92:23:
3b:48:3c:a5:4e:ec:73:51:d8:bb:5a:93:1b:06:52:
b9:98:1a:eb:94:2a:2e:74:d9:32:c4:11:9e:f3:85:
96:21:1c:e4:46:b1:1d:01:3e:8f:8d:e6:fe:ec:ea:
8a:ba:f9:82:e0:b0:81:ce:b3:2e:fd:6b:57:f3:29:
e0:6d:06:6c:ff:1a:9b:bb:40:fb:74:84:f2:cc:7f:
7e:d4:42:8b:c0:08:c7:08:9d:74:28:e2:eb:2c:99:
84:c1:d4:ee:fe:2d:98:95:d5:b7:a9:99:fb:2f:08:
dd:9a:fa:56:03:cc:99:3d:73:21:12:8f:f9:72:09:
97:7e:bb:34:7f:6d:d0:73:0f:a5:0e:1a:b1:8d:5c:
4d:f8:e6:17:ff:f9:e2:0a:e6:35:8b:d4:7e:2d:29:
7d:34:c5:82:86:5e:52:4f:04:2f:c5:98:36:5f:bb:
44:2d:b6:92:eb:cc:2e:f9:db:aa:25:3d:d0:59:e8:
7b:c0:dc:84:a7:4d:24:9c:b4:21:a2:8f:cb:95:e3:
c1:e7:ae:45:7b:28:2e:9e:f5:e2:88:f0:0d:33:9d:
00:95:95:55:a4:2a:07:18:4a:39:5d:24:69:b9:97:
a5:b8:84:ba:60:a7:f3:c8:30:73:6d:61:51:f0:6c:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D1:87:32:90:F5:D1:6B:E3:3D:07:F2:E4:35:95:B1:43:DA:8E:7D
X509v3 Authority Key Identifier:
keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/vNGHMpD10WvjPQfy5DWVsUPajn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:a642:aa00::/40
Signature Algorithm: sha256WithRSAEncryption
2b:98:3e:b6:ac:a7:0e:a9:c7:6e:1e:00:4a:96:72:65:71:28:
c2:14:fa:c6:d4:fb:89:da:b7:f3:b5:e7:fb:14:f7:cc:74:52:
aa:7c:88:3b:6c:f9:17:97:50:e7:7a:4f:4e:cc:6a:12:e9:df:
bd:06:14:ff:54:27:22:04:57:ab:31:e0:0e:f4:b3:99:ff:d3:
2d:7f:d1:6f:e3:5a:13:12:1e:dc:5b:be:11:64:bc:f8:f4:4c:
1a:36:8a:bb:e9:47:c0:e2:a3:0c:4e:b2:c5:bb:42:4b:86:d9:
bf:fe:b3:fd:8d:5f:83:68:5c:9c:33:15:54:14:35:63:1d:5a:
18:c5:db:d4:7c:b8:13:d2:39:a0:9a:86:fc:4c:c3:e9:38:5c:
28:39:69:96:7d:4d:6c:3a:58:e0:6f:86:87:9f:77:1d:51:f6:
3b:ea:57:e8:35:37:48:ed:54:29:0f:04:1d:ba:ef:09:9b:cd:
78:7f:bb:ef:38:03:49:4c:5d:c1:02:d4:09:8a:a7:30:9e:3c:
18:6b:45:89:44:ef:6c:a9:f4:33:d9:00:92:f8:7b:e9:b2:b3:
63:f0:2a:44:cc:71:83:e4:15:ee:41:70:d3:13:be:e4:1f:9c:
5b:ff:fb:1e:d4:a0:1e:1d:df:5e:66:03:76:bb:5f:45:eb:a5:
7c:69:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:25 2024 by rpki-client on console-fra.rpki-client.org