Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KI1moYGiz0jyrUwhIcC4BkokBJA.roa
File: KI1moYGiz0jyrUwhIcC4BkokBJA.roa (raw, json)
Hash identifier: X4JHgbfe6gmGBFu0EAUKQnNZgNmHOBwpT4JkhT9kS1Q=
Subject key identifier: 28:8D:66:A1:81:A2:CF:48:F2:AD:4C:21:21:C0:B8:06:4A:24:04:90
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0181E769DE9BFB48C4E1FAC497C17A4C4F42
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KI1moYGiz0jyrUwhIcC4BkokBJA.roa
Signing time: Sun 10 Jul 2022 09:21:24 +0000
ROA not before: Sun 10 Jul 2022 09:21:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204676
IP address blocks: 2a10:cc40:1a0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e7:69:de:9b:fb:48:c4:e1:fa:c4:97:c1:7a:4c:4f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 10 09:21:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=288d66a181a2cf48f2ad4c2121c0b8064a240490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:a5:14:81:9c:81:a0:c2:38:ad:92:ae:bf:
5f:c4:66:56:bd:13:e2:b8:65:17:db:3c:50:9d:b8:
49:77:26:35:f8:26:5e:02:2e:51:2c:18:48:8b:10:
66:67:fc:07:8a:21:26:7c:7d:73:b4:0c:8c:f6:fc:
d0:08:3f:24:17:ae:a5:fc:87:17:fd:8b:d5:cb:de:
e5:6d:fe:6f:f9:9d:ae:cc:8a:1c:b2:0c:c1:5c:19:
8b:ef:de:81:34:79:fd:a6:2d:2e:ec:09:ca:39:ae:
64:5d:e9:20:f9:02:9c:bd:f5:1b:18:08:f3:29:54:
78:88:fb:a4:0f:f1:a3:ae:a0:1f:23:be:64:c2:72:
51:78:b1:51:ef:5e:64:d2:6a:a8:c4:09:e5:2f:ec:
d6:97:9d:d0:fe:35:33:e4:d3:76:e0:e3:cc:71:00:
58:67:6f:22:ac:18:26:a4:cc:ce:7d:9e:6e:86:07:
5d:b8:f9:60:99:4e:a1:15:fd:9a:f2:46:2c:c2:66:
f4:a5:74:47:c2:f9:ca:51:ae:aa:1f:f9:92:25:5a:
9e:8c:ce:59:97:de:e7:f0:24:47:97:90:fd:80:ba:
b1:32:b7:f0:91:05:c6:8c:6d:67:76:4e:8c:00:26:
fe:0b:4a:82:ff:b5:20:ba:2f:7d:a0:2c:96:17:ea:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8D:66:A1:81:A2:CF:48:F2:AD:4C:21:21:C0:B8:06:4A:24:04:90
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KI1moYGiz0jyrUwhIcC4BkokBJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:cc40:1a0::/44
Signature Algorithm: sha256WithRSAEncryption
04:b5:1b:39:7f:33:38:4b:53:7d:9f:2c:e9:5b:ef:7b:cf:28:
0f:94:28:ea:c7:d0:fd:a9:49:45:3e:fc:9b:bb:01:ff:ee:0f:
bf:ae:fc:97:5d:7c:af:3a:9c:2a:b6:b3:68:5f:da:e1:a3:20:
72:b1:43:f3:b1:0d:62:81:11:a3:0f:88:c7:d1:c9:e5:ec:1f:
73:25:f9:2a:a6:da:28:29:1b:57:1b:d3:df:a9:39:31:1c:9c:
01:b4:10:35:9c:69:1a:ae:f0:f2:28:29:6c:e3:d4:73:be:5a:
78:25:80:c1:be:41:92:b5:04:34:1d:49:53:a6:2b:d9:3f:3e:
9e:2e:56:50:84:05:24:9e:16:58:9a:57:0b:d5:0c:eb:03:8e:
bd:4f:20:3a:fe:94:75:14:0b:fd:1a:e8:97:5f:7f:92:d1:70:
76:3f:67:07:7f:d7:cc:f7:d8:20:f6:4c:50:60:be:10:fc:3b:
d1:3a:a2:a3:30:1b:8a:14:0c:2e:6f:6f:2c:3a:54:14:39:d0:
24:8d:e1:3b:62:03:b0:c9:56:48:bf:0a:72:a8:ac:79:56:b4:
f6:24:c6:3d:c4:0e:eb:ed:95:3f:de:08:86:af:c9:37:20:30:
63:f3:1e:3a:ef:9e:e1:77:02:05:49:dc:0b:ac:32:d4:34:65:
d3:43:fe:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:00 2024 by rpki-client on console-ams.rpki-client.org