Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/i2VC3tXviOCB5JgwHonIjThXT2c.roa
File: i2VC3tXviOCB5JgwHonIjThXT2c.roa (raw, json)
Hash identifier: lppSQwIokFbMEpNhzBvypUg4FppasTg5FuZSTsk0OUM=
Subject key identifier: 8B:65:42:DE:D5:EF:88:E0:81:E4:98:30:1E:89:C8:8D:38:57:4F:67
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: D232
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/i2VC3tXviOCB5JgwHonIjThXT2c.roa
Signing time: Wed 13 Apr 2022 16:52:14 +0000
ROA not before: Wed 13 Apr 2022 16:52:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205929
IP address blocks: 2a06:89c3:5010::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53810 (0xd232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Apr 13 16:52:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b6542ded5ef88e081e498301e89c88d38574f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:b4:7b:b4:51:f6:37:ae:01:d6:11:fc:6e:
ad:21:8e:5e:85:c4:35:8a:bc:c6:c0:fd:d2:ff:4d:
cc:8e:5f:8f:09:c9:c1:6c:df:3e:54:82:e7:f7:57:
00:55:89:87:eb:a0:02:fa:5b:0c:8b:f0:81:1f:b1:
2b:88:74:07:4f:54:30:67:d5:51:93:8c:3e:bc:48:
41:01:ff:7e:49:44:05:fc:44:d8:ff:94:01:04:7b:
a0:fc:9e:97:96:d0:ee:ed:30:2a:e8:bf:0f:be:4d:
1b:5f:12:df:15:c5:85:96:a4:68:7e:14:d0:fb:76:
14:8f:fb:39:31:fc:85:55:4c:f0:60:a9:b4:7f:23:
a2:7b:2b:95:f3:ea:fa:9d:e9:8d:8e:4d:18:86:d9:
c0:e9:1f:42:68:43:ad:23:79:c3:46:8f:b1:98:ea:
23:85:6f:27:6d:96:96:c8:71:ef:3c:aa:c8:fa:56:
be:d4:c9:d8:b1:b7:2a:3f:f9:de:7e:16:b5:b7:59:
d8:8e:08:f1:57:1b:03:0e:99:f7:b8:5e:75:15:ea:
69:d6:cc:29:ec:51:8a:e0:7f:d5:aa:d4:87:90:de:
54:38:15:0b:cd:20:43:23:8d:f0:a3:3f:c1:c9:59:
19:f3:6f:b2:35:76:70:42:48:62:78:ef:e4:b0:2c:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:65:42:DE:D5:EF:88:E0:81:E4:98:30:1E:89:C8:8D:38:57:4F:67
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/i2VC3tXviOCB5JgwHonIjThXT2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:89c3:5010::/48
Signature Algorithm: sha256WithRSAEncryption
55:f5:cc:76:38:d9:a6:90:a7:e4:1f:b9:cd:4b:04:94:6f:e0:
7b:12:b2:07:ec:11:78:b8:ec:67:35:9b:21:cd:6f:44:ce:f5:
ff:d2:25:f7:46:a5:a3:42:d3:98:f1:f4:c5:51:cf:db:a4:0a:
15:86:24:cd:5b:80:8f:be:9e:3e:79:db:90:9d:bb:36:35:66:
37:42:aa:aa:f3:19:8d:cd:dc:fa:1a:bd:7e:3b:01:e4:c2:bd:
ca:c4:1a:31:6b:01:24:b4:5f:cf:bf:b9:87:00:74:66:35:da:
91:ab:79:24:a0:48:d4:c8:ce:5c:0e:23:6b:a7:11:23:2e:01:
b4:6a:f9:00:9d:7d:85:a4:a0:20:85:3e:88:5d:2c:5b:87:d2:
7f:1e:0e:de:b4:e4:77:fb:9c:18:d0:18:dd:89:d8:1c:17:4c:
26:ea:c6:78:80:86:01:13:ea:80:21:af:27:25:27:f3:33:81:
a9:5f:d8:42:c9:2f:13:88:a0:37:09:71:08:4a:c5:02:9f:96:
55:31:7f:c9:fa:92:c7:d3:ac:c3:cc:1b:6d:28:67:ce:7e:7d:
67:bb:f3:31:cb:d7:5f:df:81:ef:be:fd:fc:dd:54:fd:34:97:
61:aa:67:b2:27:ae:98:44:11:99:77:f4:80:b1:86:b6:7c:68:
6d:dc:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:25 2024 by rpki-client on console-fra.rpki-client.org