Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/xLPPIBZZA7a1h5DQG_wkg2_mOLk.roa
File: xLPPIBZZA7a1h5DQG_wkg2_mOLk.roa (raw, json)
Hash identifier: AaKDynBwDxru3P3pbBslJu2wLcnIt/SmuMCkXR+FwPQ=
Subject key identifier: C4:B3:CF:20:16:59:03:B6:B5:87:90:D0:1B:FC:24:83:6F:E6:38:B9
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 03F0A24D
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/xLPPIBZZA7a1h5DQG_wkg2_mOLk.roa
Signing time: Sat 01 Jan 2022 07:58:19 +0000
ROA not before: Sat 01 Jan 2022 07:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39729
IP address blocks: 81.88.48.0/20 maxlen: 24
2a01:8100:2000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66101837 (0x3f0a24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jan 1 07:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4b3cf20165903b6b58790d01bfc24836fe638b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:54:03:76:9d:30:f8:7e:9a:75:e3:91:ad:
75:ae:83:49:38:f1:2c:7f:ed:96:4e:f1:11:ae:c9:
0c:af:bc:58:ef:42:46:fb:4f:66:3b:a1:21:01:96:
87:e7:b9:76:69:c4:3d:29:f3:94:d7:c2:61:56:56:
9e:a3:0b:1d:c1:af:8b:f2:f1:c2:9b:6d:be:e1:01:
90:a9:11:94:7f:72:b4:92:a1:a6:ec:1b:d8:6a:70:
4e:aa:26:a2:b7:b4:39:2c:b3:94:69:d2:7e:64:9f:
e7:a7:5f:74:36:7b:19:77:51:1d:b2:a1:1d:12:9b:
c6:be:a4:25:10:69:04:56:8a:7e:78:10:34:ff:fb:
a2:3c:0c:f6:af:d9:2d:4f:45:ba:4f:cd:ad:46:ae:
06:be:7a:82:6c:73:6d:ec:f6:6f:ad:3c:2b:d7:ce:
f0:6a:d7:ea:3b:a7:2b:12:10:d4:0c:c4:1d:12:f3:
a5:fc:0a:f8:92:25:61:a3:fb:ca:89:00:60:12:26:
dc:ae:b6:74:80:49:a3:41:f0:08:47:a8:75:75:27:
dd:43:5d:55:ed:2f:64:c9:fc:65:a4:4f:52:95:7f:
4a:e2:aa:a0:88:4f:ea:dc:73:b0:dc:b0:4d:a3:4e:
1c:cf:d8:f3:35:19:6b:5a:91:9f:58:aa:1f:ee:f8:
9f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B3:CF:20:16:59:03:B6:B5:87:90:D0:1B:FC:24:83:6F:E6:38:B9
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/xLPPIBZZA7a1h5DQG_wkg2_mOLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.48.0/20
IPv6:
2a01:8100:2000::/36
Signature Algorithm: sha256WithRSAEncryption
c7:4d:f3:75:30:69:e2:58:be:d2:1b:3e:f7:72:63:b7:5f:5e:
5d:20:a2:58:e8:f4:f3:2a:4f:68:ad:e3:9e:4d:2a:74:21:56:
83:e4:c7:e9:85:6b:a1:44:3d:2c:b7:70:7f:38:1a:d2:9f:4f:
02:61:1a:c5:e4:15:9e:a0:df:07:71:e8:56:7f:ee:11:e7:cf:
3e:41:0e:41:a3:1a:53:1b:3c:fd:7a:a4:5f:99:d5:2a:19:d6:
b2:36:26:40:b9:d6:fe:f3:0a:06:8d:e5:55:43:a9:36:47:5a:
f9:7b:a6:c2:ee:5b:60:7f:bc:3d:a4:46:5c:f0:46:c1:c7:b6:
da:bd:a5:c1:cb:5f:93:51:69:94:f2:6d:b4:94:e5:72:a2:fa:
e6:b8:9d:37:b5:44:59:d8:0b:21:9c:35:23:25:56:cd:53:db:
a6:99:a4:17:b1:7e:8a:d8:4e:14:c1:51:a7:4f:72:6e:30:d2:
4b:0f:74:34:fa:de:b9:cc:6d:7b:e9:4c:46:7a:df:60:5a:28:
74:46:18:a6:d4:ff:a9:e1:34:88:97:f9:63:9b:5a:93:e2:5a:
e3:57:78:b4:c2:1e:5f:51:d3:e5:ca:81:98:f7:a5:2e:30:a8:
b6:a5:2d:92:cc:6e:df:51:ce:c9:8c:ee:ea:e3:ff:44:a0:ea:
1c:b5:f7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org