Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/iML0pgTigflWToltuJRMEbFgmJ4.roa
File: iML0pgTigflWToltuJRMEbFgmJ4.roa (raw, json)
Hash identifier: WMCX12uc2HLOHJrpMJ8PC/tvKpV2tV7vTGIjXs00wq0=
Subject key identifier: 88:C2:F4:A6:04:E2:81:F9:56:4E:89:6D:B8:94:4C:11:B1:60:98:9E
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 088AC61A
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/iML0pgTigflWToltuJRMEbFgmJ4.roa
Signing time: Tue 01 Feb 2022 07:18:03 +0000
ROA not before: Tue 01 Feb 2022 07:18:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42093
IP address blocks: 2a06:c3c0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143312410 (0x88ac61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Feb 1 07:18:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88c2f4a604e281f9564e896db8944c11b160989e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:d5:c9:66:a9:84:9b:3b:af:93:21:cf:a2:
93:6f:16:ba:51:e6:7b:b1:53:75:d0:3d:0f:b2:f7:
b3:8b:b5:58:38:11:57:2a:fc:6d:00:e1:30:87:ba:
df:10:70:72:51:7f:9f:63:a2:5e:18:82:3b:d7:83:
93:9f:e5:68:66:89:3e:85:46:9e:24:9e:e5:ce:a5:
56:b9:8c:a0:fa:72:5b:c7:e6:63:86:d2:b8:4a:e5:
e7:3e:20:ba:d3:d4:b1:1c:9e:ac:ab:ee:6f:ff:55:
02:b1:38:8e:f4:36:25:60:e4:ea:a3:4f:0f:1e:1f:
eb:1f:d2:4e:81:93:fd:04:15:46:43:7d:b4:2d:29:
fb:d6:35:17:27:49:ac:84:7d:1b:6d:10:71:ee:a5:
b9:52:49:88:83:41:4f:b6:90:d5:ae:3a:07:00:cd:
56:8f:26:6e:b5:98:bd:59:75:e0:84:9e:cf:b8:74:
a0:31:1c:3b:82:22:87:8c:4e:52:f8:2a:31:a7:60:
e6:15:77:0d:9d:4d:cb:24:e7:74:94:b2:8f:1d:42:
09:35:8a:5e:3c:3d:44:40:19:93:8e:67:d2:4a:31:
ee:8c:c2:b7:5d:4e:50:c4:55:4c:b9:50:c8:9f:f8:
44:51:c4:c6:f3:7b:eb:db:51:34:60:10:58:0f:68:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C2:F4:A6:04:E2:81:F9:56:4E:89:6D:B8:94:4C:11:B1:60:98:9E
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/iML0pgTigflWToltuJRMEbFgmJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:c3c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
60:4f:65:8a:71:e9:ae:6c:05:a2:80:ad:8a:b9:16:40:01:0b:
e4:59:ef:91:bf:a0:f4:0d:82:53:64:7e:c6:04:48:51:91:08:
9b:16:71:6e:57:b7:b9:7c:59:c9:aa:79:0c:9e:e7:52:8f:b3:
c0:16:44:e2:e6:8d:54:50:74:31:96:7c:96:80:fd:61:ec:0c:
2a:33:d0:06:6e:21:f0:f0:e5:6f:c8:3f:15:34:83:ea:c1:cd:
1a:ab:cd:ea:7e:bc:10:19:26:a4:ec:62:fd:8e:27:5e:18:46:
5a:1c:9f:09:9a:41:0f:07:63:d4:5a:8a:dd:6d:33:1d:ec:35:
52:d0:70:a2:bc:55:23:49:67:d0:c2:f9:8a:2a:e1:a5:78:5a:
f3:dd:34:56:db:f9:a9:1b:d9:49:b7:d2:64:97:ae:ce:63:15:
77:51:6b:9a:b2:39:05:09:f5:43:bb:f9:a7:68:fa:6f:ba:4d:
ec:50:11:2b:5d:24:25:40:40:3c:7d:32:8a:ff:7d:a5:23:dd:
45:a5:81:da:57:63:73:3b:88:7a:a4:a4:a7:b7:ca:9a:c2:b4:
1c:6d:3f:38:cb:68:94:4a:0f:a2:18:08:17:8e:d6:79:43:61:
64:c8:1d:ff:ce:06:f5:08:13:7d:24:1e:40:ec:e1:6d:24:0e:
d9:52:75:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org