Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/cGKqk0tUF2gGH_ugavyzZK5PzyM.roa
File: cGKqk0tUF2gGH_ugavyzZK5PzyM.roa (raw, json)
Hash identifier: G636KKyWc0710vfFDVKFlffodo6PsrTQ0jwAS7QsxdY=
Subject key identifier: 70:62:AA:93:4B:54:17:68:06:1F:FB:A0:6A:FC:B3:64:AE:4F:CF:23
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018302F83BE1FCA1D15B496BF5054B8BE532
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/cGKqk0tUF2gGH_ugavyzZK5PzyM.roa
Signing time: Sat 03 Sep 2022 10:49:26 +0000
ROA not before: Sat 03 Sep 2022 10:49:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47692
IP address blocks: 2a06:c3c0:5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:02:f8:3b:e1:fc:a1:d1:5b:49:6b:f5:05:4b:8b:e5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Sep 3 10:49:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7062aa934b541768061ffba06afcb364ae4fcf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:b0:74:3e:77:51:3b:97:37:7e:8c:03:20:
7f:93:81:c5:fe:af:ef:29:08:ff:c0:29:2a:f9:17:
74:6f:12:80:e0:fd:ef:35:d5:b3:d2:f2:e7:de:33:
ba:2b:39:d2:34:8a:32:f5:b0:e4:24:81:e5:17:65:
aa:c1:69:49:24:6a:e2:b2:4e:cc:9e:54:4b:5c:98:
b8:69:5e:21:75:87:ca:1a:f1:60:93:4b:34:3b:75:
b6:8b:0a:29:2a:46:b2:35:b8:1d:cf:4c:86:11:44:
eb:18:b9:d2:11:40:75:ac:94:9a:96:ae:3f:ad:e7:
36:4a:3e:76:88:79:53:24:77:47:af:dd:8d:66:5f:
02:10:17:54:1d:9b:38:aa:59:69:f2:39:c5:96:a3:
1d:96:db:c3:42:c5:a1:a4:26:9b:8b:47:59:01:e3:
83:e9:09:32:42:ce:68:f9:8a:6f:b7:ac:bc:a7:42:
a3:a9:db:eb:30:93:61:46:82:f8:d3:c1:85:82:33:
fb:37:f6:3d:f5:15:ac:b8:55:58:f4:6d:c6:93:47:
5b:dd:07:1c:c1:2b:ec:ac:79:37:c7:b3:ad:d6:8e:
c6:4e:cc:b0:48:98:09:ad:e8:1c:88:f1:3a:49:91:
21:bf:05:7f:b9:51:64:41:25:da:ec:d2:45:03:48:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:62:AA:93:4B:54:17:68:06:1F:FB:A0:6A:FC:B3:64:AE:4F:CF:23
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/cGKqk0tUF2gGH_ugavyzZK5PzyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:c3c0:5::/48
Signature Algorithm: sha256WithRSAEncryption
3e:4e:2c:61:84:1e:79:08:f5:73:13:fa:e3:ae:7f:15:81:46:
5c:45:d2:27:16:e4:75:2e:2b:72:d4:58:74:9c:04:a5:6f:3a:
3f:d3:77:34:12:3d:a5:32:d3:66:e0:56:3d:50:5a:71:ed:6b:
85:e2:04:d5:c3:55:19:81:84:94:ab:e0:01:46:92:7d:04:8c:
cb:88:da:09:49:7f:0d:27:b6:54:83:27:ae:da:c8:56:39:88:
aa:7d:30:9b:71:cd:5b:e6:e0:54:df:ec:08:cf:bc:0d:1d:cf:
ea:23:ee:49:90:95:38:68:99:ed:03:f7:a2:10:6d:11:dd:99:
fd:da:b9:f2:9f:75:27:ff:aa:09:a5:6a:bc:42:49:45:9c:cb:
b2:5e:2e:5f:93:21:ac:e4:2a:d6:4b:62:00:1d:04:df:fd:d7:
1f:b3:49:22:02:5b:fe:d8:1a:88:97:3a:20:65:6c:93:57:1f:
49:72:d7:9a:d6:95:38:35:18:bf:1f:d9:e0:df:3e:4c:19:ca:
1e:f1:95:ad:5f:e8:22:70:02:fc:93:f0:65:a1:9b:72:b1:eb:
df:de:7b:f0:43:ef:6e:d9:a2:ec:2b:ae:6f:0d:26:9d:e5:be:
c0:ce:73:7a:35:c4:b7:e1:0e:e9:42:a5:33:96:d8:9c:1c:82:
b1:e8:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org