Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/iTko938FDRw8mDOer5NdAaMibQU.roa
File: iTko938FDRw8mDOer5NdAaMibQU.roa (raw, json)
Hash identifier: sYt+OMR4zBYUrlS+FBQVo9qR0EUYr9l6QjRaMR0rNpU=
Subject key identifier: 89:39:28:F7:7F:05:0D:1C:3C:98:33:9E:AF:93:5D:01:A3:22:6D:05
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0971EBB4
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/iTko938FDRw8mDOer5NdAaMibQU.roa
Signing time: Sat 01 Jan 2022 09:04:01 +0000
ROA not before: Sat 01 Jan 2022 09:04:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208993
IP address blocks: 2a0e:aa07:f040::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158460852 (0x971ebb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 09:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=893928f77f050d1c3c98339eaf935d01a3226d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:57:74:a9:d9:d6:8e:89:a4:aa:40:3d:32:
6f:dc:8a:42:18:bf:89:64:5e:a8:dc:b9:c0:5c:bc:
c0:bd:db:51:6b:75:e2:5f:0b:4c:53:1c:53:96:e0:
8e:40:ee:f3:14:a4:a5:70:4f:b4:fb:6a:d7:08:62:
73:27:5c:00:14:0d:c6:9a:66:6c:b0:57:37:ff:0b:
d3:69:f9:01:aa:f8:93:7b:79:3a:f2:30:5d:af:c4:
35:7e:67:6e:c5:67:24:4d:6a:a7:33:01:b2:36:37:
da:c4:85:8c:dc:8f:fb:73:09:33:9c:50:5a:41:34:
6a:ac:f9:dd:c1:a6:45:2b:94:05:ad:9e:05:90:73:
a8:c5:73:ee:80:ff:da:fb:fe:fb:87:ca:d1:a3:19:
9d:88:1c:8b:40:72:32:7d:20:65:88:86:59:8b:14:
ba:6d:2e:bb:7d:48:dd:0f:48:9d:46:9e:46:fe:b2:
ab:e4:20:d9:4b:ba:53:9b:24:09:db:3d:cf:a8:bf:
45:3f:93:7a:d4:7e:96:23:da:e6:7f:a5:51:2f:58:
34:b8:de:1e:35:27:a0:03:10:7e:e1:d3:c0:80:51:
cf:9b:fc:68:56:28:78:53:76:7e:5c:aa:f5:3d:d6:
f4:a0:cd:07:f2:11:f3:63:a6:3a:ad:f5:3b:4a:9e:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:39:28:F7:7F:05:0D:1C:3C:98:33:9E:AF:93:5D:01:A3:22:6D:05
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/iTko938FDRw8mDOer5NdAaMibQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f040::/44
Signature Algorithm: sha256WithRSAEncryption
99:40:c2:0b:87:19:ba:dd:c9:4f:2b:6b:5b:1e:09:55:eb:22:
d1:11:f0:f9:7a:00:b3:6a:9f:fb:2e:2b:7b:bb:72:19:db:55:
c2:7b:4f:c6:94:14:e0:f8:d7:12:c8:c0:a3:a7:97:5b:3c:12:
26:e1:8c:4a:5d:64:b4:ff:8d:e0:c7:96:a4:e6:70:ab:65:f5:
d6:bf:83:b8:5d:00:23:1f:d4:b5:ac:af:95:53:47:66:e2:00:
ce:14:0a:e3:b6:1f:3f:e2:cf:62:aa:4d:68:be:78:7c:07:b5:
30:7d:0b:36:e7:4b:72:97:96:a1:31:0b:b6:9e:64:38:1c:f6:
4f:1b:84:b0:2e:c7:a0:e2:88:b0:b3:77:93:ba:60:35:0a:bc:
b1:d7:13:e6:ab:92:76:0f:44:ce:92:60:b6:79:20:4d:14:00:
af:d8:86:24:56:0a:7e:bb:f8:58:be:0b:7e:a9:d8:82:a1:95:
52:56:c8:a4:23:90:e1:79:27:69:30:f9:66:35:ea:bf:d3:b7:
5b:80:9f:cc:2b:75:e0:90:1f:b6:41:71:bd:aa:e9:74:e1:d9:
ca:4f:ef:a3:28:57:fc:ac:03:c1:88:06:1d:09:40:1c:18:25:
ab:2e:79:b6:6a:3a:e2:cc:3a:96:e4:6e:2f:ad:a8:d3:6d:9d:
c5:3f:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:11 2024 by rpki-client on console-ams.rpki-client.org