Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/70sGzbob7QJnC5zESaNynY_LLkY.roa
File: 70sGzbob7QJnC5zESaNynY_LLkY.roa (raw, json)
Hash identifier: BBppqNSJLl8woH4f7/yIDK4eEFSUQXzPdLwSoxzsPT4=
Subject key identifier: EF:4B:06:CD:BA:1B:ED:02:67:0B:9C:C4:49:A3:72:9D:8F:CB:2E:46
Certificate issuer: /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial: 0183E77C13993F66328FA2AD28DB66BC67D8
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/70sGzbob7QJnC5zESaNynY_LLkY.roa
Signing time: Mon 17 Oct 2022 19:46:51 +0000
ROA not before: Mon 17 Oct 2022 19:46:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:3c0:3::/48 maxlen: 48
2a13:3c0:6::/48 maxlen: 48
2a13:3c0:1::/48 maxlen: 48
2a13:3c0:11::/48 maxlen: 48
2a13:3c0:9::/48 maxlen: 48
2a13:3c0:7::/48 maxlen: 48
2a13:3c0:2::/48 maxlen: 48
2a13:3c0:5::/48 maxlen: 48
2a13:3c0:10::/48 maxlen: 48
2a13:3c0:8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e7:7c:13:99:3f:66:32:8f:a2:ad:28:db:66:bc:67:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
Validity
Not Before: Oct 17 19:46:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef4b06cdba1bed02670b9cc449a3729d8fcb2e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:99:1f:1e:ae:3d:7f:59:e3:b5:21:e1:ac:
f0:48:9c:a3:5c:cd:f5:d5:a0:5e:25:2e:15:0e:df:
45:5f:00:4f:eb:03:34:b2:fc:fc:b0:a9:ea:f9:f6:
06:32:a3:02:21:02:8c:5e:f2:ef:1c:2d:9a:2f:db:
b0:0e:d1:90:65:f8:74:d6:02:b6:7b:a6:a3:1e:df:
95:b4:33:41:d9:46:d1:40:2c:1f:cc:cd:2b:13:c8:
88:35:09:68:ba:c1:85:2f:fc:a1:a4:0b:1c:29:db:
81:a4:a0:0a:f4:5b:91:51:aa:21:91:36:ba:81:ed:
ec:07:0c:58:84:a9:2b:45:8e:42:74:2b:8c:34:4f:
18:2d:98:bd:46:9c:bb:a4:99:f8:c1:d7:c0:01:4c:
05:d2:d5:84:86:ef:c5:5a:ae:ec:c1:88:73:29:35:
a6:01:9f:b0:47:32:65:38:6b:41:6e:f2:23:1f:6a:
dc:b3:1c:3e:25:4f:ea:94:74:9a:10:27:37:5a:d5:
06:68:09:c1:63:79:a7:69:ad:e6:5d:bd:a1:99:21:
72:fc:92:e1:a1:50:3d:1d:4d:3d:62:40:f7:1b:e3:
c3:90:6f:29:39:a5:5a:3e:0a:34:3e:95:9e:df:58:
7b:01:84:bb:b8:4a:75:c4:68:a7:3b:ab:bf:44:bb:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4B:06:CD:BA:1B:ED:02:67:0B:9C:C4:49:A3:72:9D:8F:CB:2E:46
X509v3 Authority Key Identifier:
keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/70sGzbob7QJnC5zESaNynY_LLkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3c0:1::-2a13:3c0:3:ffff:ffff:ffff:ffff:ffff
2a13:3c0:5::-2a13:3c0:9:ffff:ffff:ffff:ffff:ffff
2a13:3c0:10::/47
Signature Algorithm: sha256WithRSAEncryption
60:e0:15:e3:61:84:ff:18:25:18:ce:5f:29:02:d1:55:eb:2e:
32:be:5d:fd:b8:9b:a9:4d:9b:8b:74:3b:e6:3a:2f:49:cb:13:
e1:34:94:9a:9f:8f:b4:b0:29:11:01:fc:bb:36:c3:13:45:00:
ff:0e:f3:10:b3:26:8e:42:ec:45:54:84:9d:3d:13:d9:63:d8:
77:bf:f8:56:c5:be:fd:4f:bf:65:3b:07:ba:bf:22:00:3d:81:
d0:b8:df:87:0b:8b:af:b5:0e:9a:1d:32:c0:73:bb:dc:d9:3d:
d9:e7:c0:7f:80:cd:f8:9b:2b:59:23:28:d3:da:39:45:b1:40:
75:d4:32:28:c6:cd:77:a8:18:12:b3:3f:50:07:cc:b8:39:8c:
97:83:ff:e2:8a:f8:b5:a4:b1:05:8c:50:aa:32:84:a7:b9:17:
97:dd:f8:06:e4:b2:2d:65:78:b8:62:3c:94:c6:26:10:b0:bc:
40:fa:ab:87:6b:07:75:14:42:83:74:06:26:fe:97:38:59:ef:
2c:f7:83:8b:34:62:6c:b5:b7:4c:73:a8:8d:1a:21:0a:4f:6f:
0b:9c:8a:20:ff:9f:96:0c:32:9f:ae:b5:80:dc:9b:8b:78:c4:
44:cc:34:5a:6d:f7:25:c0:9d:a8:da:8a:07:2e:9e:9b:ab:8a:
0b:03:9a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:58 2024 by rpki-client on console-ams.rpki-client.org