Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/iKrOoq8FSm3uujTCvw0QrXvU9KA.roa
File: iKrOoq8FSm3uujTCvw0QrXvU9KA.roa (raw, json)
Hash identifier: REQD2ih16MlTMObqQExcT/TmFH7Rt3X0GN86ouhcSNg=
Subject key identifier: 88:AA:CE:A2:AF:05:4A:6D:EE:BA:34:C2:BF:0D:10:AD:7B:D4:F4:A0
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 0184C2DA5B88B99A7FD8C970FC4B34A33DEE
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/iKrOoq8FSm3uujTCvw0QrXvU9KA.roa
Signing time: Tue 29 Nov 2022 10:06:40 +0000
ROA not before: Tue 29 Nov 2022 10:06:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138211
IP address blocks: 2a12:3fc2:e600::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:da:5b:88:b9:9a:7f:d8:c9:70:fc:4b:34:a3:3d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Nov 29 10:06:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88aacea2af054a6deeba34c2bf0d10ad7bd4f4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:0a:1d:44:89:af:41:71:ff:b9:ad:15:43:
45:fc:77:5c:53:8b:13:c3:36:29:f5:17:d6:55:8b:
e6:09:35:ea:13:b0:f3:a9:36:7e:b3:da:a7:61:c6:
62:ac:50:a4:a4:fe:49:86:a6:79:3e:ba:3d:9a:5d:
28:67:bf:3a:78:43:32:b8:1a:b4:ae:07:1b:57:07:
4b:86:00:70:2f:f9:4b:aa:8b:c9:96:f8:e4:7b:c2:
d1:7d:5c:74:fc:12:b1:4e:80:a4:ff:ca:b6:77:85:
d5:28:9f:63:b2:02:f7:3f:12:55:13:b6:d9:80:ef:
c0:1f:43:48:e6:16:43:a7:9d:9f:9e:95:76:32:e8:
17:34:f6:93:96:fb:18:bd:42:1f:08:a4:55:a6:f4:
3a:e3:86:e2:86:16:2d:d9:d5:ae:9f:9a:1b:d1:c4:
21:08:72:c9:f9:92:83:0c:9e:f5:53:e1:21:5a:f8:
0b:ea:d1:35:8c:e5:47:15:78:d1:80:0a:ed:34:2a:
12:6c:80:b2:3f:86:a4:86:27:ea:3b:b0:07:39:2a:
be:dc:13:8a:67:c6:e6:8f:32:bb:d9:29:5c:51:df:
25:2a:a9:8b:87:b5:4c:09:05:70:2a:d9:75:07:9e:
c7:db:86:d9:52:e4:83:4b:cc:d2:25:df:43:ad:b6:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AA:CE:A2:AF:05:4A:6D:EE:BA:34:C2:BF:0D:10:AD:7B:D4:F4:A0
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/iKrOoq8FSm3uujTCvw0QrXvU9KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:e600::/40
Signature Algorithm: sha256WithRSAEncryption
50:84:8e:78:6c:02:da:e8:7f:dd:f8:c4:53:bd:8a:8a:11:ed:
17:7f:45:10:79:3e:b9:0b:d8:b9:95:e0:32:05:2b:ff:ee:8d:
d8:df:15:9b:cd:12:9c:ff:98:33:99:c6:f1:8d:ab:e0:2a:7f:
04:f5:36:88:a2:24:96:f2:ea:af:fe:ea:6d:ce:c1:d2:46:21:
93:d9:53:95:1d:bd:e7:24:68:44:d3:f7:b4:4f:ec:7d:a6:6d:
08:36:a1:46:12:7f:af:1a:0a:39:00:55:9b:94:2b:90:1a:90:
5a:63:71:6d:a0:ab:2b:00:cd:57:7d:92:35:0e:db:1e:ec:27:
be:cf:11:cd:76:69:f1:b9:89:77:df:4c:cb:a1:41:6d:d0:a5:
ce:96:6a:0b:fc:df:5a:75:1c:f0:2a:a7:16:3e:5a:da:6f:d2:
26:be:09:d1:6c:51:bb:25:c7:af:18:28:10:f3:f8:c1:25:41:
56:55:6c:d0:f2:84:f3:3b:c8:0a:61:80:93:ff:7f:d1:ca:7e:
d8:cd:78:fb:91:f4:73:98:4e:79:b6:22:58:c2:7b:0d:74:77:
29:dc:61:16:5f:88:0a:a3:ce:8f:c5:41:21:ee:b9:f2:80:78:
00:a3:39:b9:c8:a5:06:ac:9a:c7:67:87:9a:35:ce:7e:65:99:
a1:77:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:17 2025 by rpki-client