Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iPiKwCEOA_zrXWP3sqxVIt7aP-M.roa
File: iPiKwCEOA_zrXWP3sqxVIt7aP-M.roa (raw, json)
Hash identifier: DgdJ7L6Wbe5ag8J0myNilcViWVuge+981g16bUlw8Mw=
Subject key identifier: 88:F8:8A:C0:21:0E:03:FC:EB:5D:63:F7:B2:AC:55:22:DE:DA:3F:E3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 10BE588E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iPiKwCEOA_zrXWP3sqxVIt7aP-M.roa
Signing time: Sat 01 Jan 2022 09:05:25 +0000
ROA not before: Sat 01 Jan 2022 09:05:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211044
IP address blocks: 2a0e:97c0:490::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280909966 (0x10be588e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 09:05:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88f88ac0210e03fceb5d63f7b2ac5522deda3fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:1b:54:32:26:3a:02:45:1e:6b:2f:15:6f:
11:7a:d1:4e:ad:3a:b8:56:a1:d4:25:4b:aa:2c:60:
b5:09:fb:6d:00:96:05:ed:23:d3:a5:f9:ad:8e:14:
8e:68:04:a3:0f:6b:e3:17:be:3d:73:58:e6:f5:10:
c2:c9:6c:30:bb:00:c5:59:23:bb:b6:d4:e3:10:c6:
af:58:22:18:2a:8e:7d:8d:ea:cf:6f:39:5d:54:cf:
6b:e0:0e:05:e6:32:37:10:5a:42:ed:5c:66:d8:38:
d9:19:1e:08:80:e9:d0:c0:e9:83:95:3f:48:40:1c:
58:08:04:eb:e4:77:d2:49:ae:77:e9:66:e2:8d:0e:
cb:8d:ab:73:61:fa:13:a2:30:de:5a:08:44:c3:6a:
98:01:5b:44:9f:40:e6:fe:55:fe:55:89:69:f3:cb:
d3:6d:9e:b0:4e:a5:a1:b4:c9:12:49:1d:72:80:83:
92:e0:a3:34:8f:b2:ed:2d:18:4b:aa:7b:63:56:a8:
62:79:fe:4d:3c:84:78:b0:a5:eb:72:8c:1a:fc:22:
a6:33:ea:83:1b:8c:3e:bf:4d:3b:83:40:4d:34:ab:
5a:eb:c2:9d:6c:7d:28:3f:21:ec:a2:fa:cc:a8:ea:
6f:fd:3d:6a:7d:6f:16:91:92:19:e7:2d:60:d4:70:
22:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F8:8A:C0:21:0E:03:FC:EB:5D:63:F7:B2:AC:55:22:DE:DA:3F:E3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iPiKwCEOA_zrXWP3sqxVIt7aP-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:490::/44
Signature Algorithm: sha256WithRSAEncryption
8a:fd:c7:39:6b:30:07:cf:cf:13:3e:e5:62:12:21:e5:f7:ed:
42:65:54:61:17:c6:33:04:2a:39:21:dc:0a:82:04:fe:c8:e1:
f2:16:aa:8b:bb:5b:81:07:ab:54:a0:9e:70:60:c8:75:58:62:
68:65:90:b6:62:35:81:ad:50:e5:0a:f7:0d:1a:12:3a:5c:4b:
95:58:f1:f5:ee:f6:52:8d:a8:f0:aa:32:0c:d4:96:99:93:cd:
6a:5f:aa:29:1a:a3:d6:ee:f2:aa:6f:30:d0:63:97:ec:cb:9b:
62:30:7d:0b:86:e1:80:49:fa:10:60:a3:56:c9:3e:46:0b:cb:
04:28:05:87:8b:32:79:28:24:9e:cd:65:b7:31:4b:61:c5:88:
1a:46:2a:9a:2f:18:ca:f3:83:b9:6c:03:c2:1e:8b:e0:12:1e:
93:db:15:31:38:63:ff:89:a1:80:ab:fb:d3:e0:9e:31:a4:81:
ce:ef:00:d8:16:04:7b:59:d6:d8:bc:5d:23:83:d0:5b:5a:f5:
9b:c4:9e:d9:9e:0c:28:ad:f6:24:4e:69:d4:b3:22:9e:7c:b1:
23:bd:36:54:8f:38:2c:41:7c:0f:4c:4e:54:26:94:2d:3c:2b:
e4:c5:d3:96:25:f5:99:e5:86:12:ba:dc:66:f5:11:cc:34:4a:
20:73:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:36 2024 by rpki-client on console-fra.rpki-client.org