Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/w6EnNXG037uRp-Y0SsnsHLJKjyQ.roa
File: w6EnNXG037uRp-Y0SsnsHLJKjyQ.roa (raw, json)
Hash identifier: t9RoYVTYVQCA/GGpfCxmt5eUi1kjQ5JYG8J8VdmxUiU=
Subject key identifier: C3:A1:27:35:71:B4:DF:BB:91:A7:E6:34:4A:C9:EC:1C:B2:4A:8F:24
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 05DDBE38
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/w6EnNXG037uRp-Y0SsnsHLJKjyQ.roa
Signing time: Sat 01 Jan 2022 11:02:57 +0000
ROA not before: Sat 01 Jan 2022 11:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31108
IP address blocks: 88.221.82.0/24 maxlen: 24
2a02:26f0:1c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98418232 (0x5ddbe38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 11:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3a1273571b4dfbb91a7e6344ac9ec1cb24a8f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:63:2c:d4:50:ee:93:85:cd:74:51:f4:aa:
b8:42:c5:29:40:06:22:42:cb:d7:22:81:f2:6f:43:
5b:6b:61:e3:bd:cd:c4:fc:a5:5c:85:ce:e6:12:75:
b5:f8:d0:1a:71:d2:ec:3b:f8:91:7d:5e:ae:fc:15:
1e:ae:e6:cf:9b:23:ed:31:24:d8:48:b0:2b:1f:a3:
49:8f:55:64:36:e8:33:f6:81:90:cb:6c:36:b3:59:
2c:8f:59:b9:00:24:2f:a9:7b:b9:d3:77:58:55:51:
3a:99:31:9c:4a:7e:18:c4:74:32:88:d9:08:fd:ba:
f0:38:4e:b7:c5:be:74:7a:bd:2e:0b:e1:9b:b9:6a:
2a:af:cc:cc:a4:5b:c4:23:a2:84:ca:5f:c5:6e:a7:
61:42:33:98:d9:26:72:34:07:fb:96:01:7d:5b:0b:
b8:72:08:25:dc:8a:11:f7:3a:19:a5:e6:c9:86:c1:
4a:e5:42:76:2b:00:f8:f0:31:ea:20:8b:12:ff:91:
38:71:b8:65:9d:7b:96:fc:81:ea:ce:e7:f0:a5:1f:
17:91:de:e5:35:d8:74:7f:3f:50:e4:56:0f:21:b1:
19:b5:cb:6b:37:04:df:4c:4b:a8:cd:bf:35:61:ea:
7b:bd:ec:eb:4a:08:52:10:1e:a4:c6:45:19:6e:db:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A1:27:35:71:B4:DF:BB:91:A7:E6:34:4A:C9:EC:1C:B2:4A:8F:24
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/w6EnNXG037uRp-Y0SsnsHLJKjyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.221.82.0/24
IPv6:
2a02:26f0:1c::/48
Signature Algorithm: sha256WithRSAEncryption
39:a7:61:8a:77:1d:11:e5:8d:9a:32:2e:20:49:37:03:f0:cf:
25:77:0b:96:70:27:3d:7f:87:85:8b:40:83:c8:8e:e3:4e:d3:
0c:5c:39:e7:85:9a:87:24:a3:6f:fa:b2:85:3b:3b:34:9d:24:
db:87:31:98:82:64:f9:90:f5:73:7b:cc:b1:46:c2:26:10:30:
03:10:24:57:69:1c:0a:0c:da:96:72:3c:7d:62:e1:80:b1:99:
8e:07:46:9e:13:0c:04:c8:4b:fe:ca:ce:c4:0d:16:b0:02:d7:
15:67:32:41:79:52:86:3d:85:95:6a:c7:06:5b:10:14:43:30:
bf:08:89:ac:dc:5e:3b:b2:19:38:0e:e8:c1:dd:47:ad:3a:f7:
51:c2:d6:3b:cb:80:a5:87:32:49:cd:f2:b8:34:97:71:ec:8b:
04:c3:46:ce:41:f9:02:3b:3e:b3:2b:6b:51:3d:42:36:f9:a0:
2d:b8:30:34:8e:31:a8:a9:1b:50:9c:91:1e:67:5e:82:41:48:
bf:de:d5:65:66:43:ac:aa:77:dd:ea:8d:9c:88:4c:5e:62:75:
a6:98:a5:d4:61:12:3d:ee:62:a5:9a:43:e9:60:50:a7:4e:78:
15:b0:4a:ac:6f:00:d3:c7:16:72:0c:6c:07:67:e0:a1:69:2d:
6a:04:68:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:13 2024 by rpki-client on console-ams.rpki-client.org