Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/iDcqX5EWTtX9EGID9Bn2WPHgfJo.roa
File: iDcqX5EWTtX9EGID9Bn2WPHgfJo.roa (raw, json)
Hash identifier: yka84rpc1TRJJ+FKJdDhgYo9UG2HUmXJBTfw2wH0tRs=
Subject key identifier: 88:37:2A:5F:91:16:4E:D5:FD:10:62:03:F4:19:F6:58:F1:E0:7C:9A
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 018456AAC855A72CBF1FD9FE9AF6F27B2AB0
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/iDcqX5EWTtX9EGID9Bn2WPHgfJo.roa
Signing time: Tue 08 Nov 2022 09:55:43 +0000
ROA not before: Tue 08 Nov 2022 09:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39020
IP address blocks: 2a0f:8c00::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:aa:c8:55:a7:2c:bf:1f:d9:fe:9a:f6:f2:7b:2a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Nov 8 09:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88372a5f91164ed5fd106203f419f658f1e07c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:8c:1d:7a:00:c3:10:18:63:70:39:69:82:
d3:45:c9:b0:70:76:6c:a2:42:e8:dc:2a:ee:da:1b:
5b:e6:3d:8c:15:d3:8d:f2:62:1d:8e:b0:b3:6d:10:
3b:27:54:d0:e1:b0:6f:92:2f:e8:28:31:5c:90:da:
39:60:c4:42:7f:75:fe:12:bc:16:e7:05:84:8a:00:
c4:a8:a9:5a:7b:f0:db:9b:b4:58:9d:a8:c6:b4:a2:
06:e0:72:0e:8a:20:05:df:68:6e:d9:89:0c:3b:d7:
77:6a:41:08:89:81:65:bb:58:5e:4b:a4:8a:25:2a:
3b:73:06:b2:5e:06:db:f0:25:7a:3f:40:5e:5e:ff:
8c:cd:70:a4:24:c3:3a:1a:96:cf:60:7b:71:45:86:
74:01:5c:3b:7e:c2:49:de:fd:18:13:43:0d:39:97:
ef:6c:ca:34:19:39:77:77:c9:4f:90:35:03:4b:c3:
b4:46:00:c7:89:93:79:26:1e:2a:ac:55:7b:87:62:
70:d8:12:da:1f:97:bd:b4:9f:d7:74:b0:69:9e:6e:
58:a6:ef:52:6d:7e:f1:21:54:fb:a9:cc:c4:03:d1:
bb:63:2f:64:6c:4c:ce:c5:22:22:e5:f0:b1:71:b0:
af:7d:73:b7:04:d6:85:a6:3b:17:4b:b6:a9:6f:05:
67:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:37:2A:5F:91:16:4E:D5:FD:10:62:03:F4:19:F6:58:F1:E0:7C:9A
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/iDcqX5EWTtX9EGID9Bn2WPHgfJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:8c00::/33
Signature Algorithm: sha256WithRSAEncryption
14:fb:f1:9d:b1:63:65:1c:40:c0:05:bd:ae:b2:96:50:21:0b:
9e:9a:58:4c:59:93:c4:b5:39:20:c7:27:4a:6f:f2:72:e5:c6:
18:d5:79:5f:e5:e6:3a:4c:aa:0d:65:11:c6:b9:2c:e0:ce:47:
ff:71:72:17:b2:3f:24:82:e6:e7:15:b1:bf:03:7a:e8:c4:b2:
c1:a8:0b:f2:c0:47:69:ce:31:1a:32:52:02:c6:93:a6:0b:71:
6a:a8:90:27:42:e0:ba:52:62:9d:e8:a3:d3:9d:a0:d1:de:7a:
c9:a4:63:18:b2:08:cc:44:51:0b:9c:ae:c1:86:bd:47:63:4e:
83:82:09:ac:13:e1:8f:0a:b8:80:98:bb:d6:b0:37:27:62:e1:
f0:07:44:33:a4:ad:19:c2:5a:8c:38:3c:07:12:ff:a7:e8:b3:
40:1d:df:2e:2b:28:ef:bc:84:36:2c:1c:e1:be:47:7d:cf:0b:
8b:da:c0:d2:0e:9d:10:45:30:f5:da:e3:31:d1:a5:dd:a9:54:
cb:86:ed:0a:87:d0:94:b4:d8:15:1f:6f:ab:20:2c:b7:1f:db:
21:f5:13:19:b5:d0:2a:6c:90:08:49:c3:e5:6b:6f:ce:af:a9:
19:f9:6f:86:dd:7f:c2:6e:67:72:87:35:ee:41:d4:77:4f:91:
25:f8:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:12 2024 by rpki-client on console-fra.rpki-client.org