Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/5lq_p35plVwmM1_AZtwBl-ypmQE.roa
File: 5lq_p35plVwmM1_AZtwBl-ypmQE.roa (raw, json)
Hash identifier: R6RvtwIrgZK7neTkm6xdWEcKVkapuiMVlLHeT4Mx6pY=
Subject key identifier: E6:5A:BF:A7:7E:69:95:5C:26:33:5F:C0:66:DC:01:97:EC:A9:99:01
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 093EA165
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/5lq_p35plVwmM1_AZtwBl-ypmQE.roa
Signing time: Sat 01 Jan 2022 06:00:32 +0000
ROA not before: Sat 01 Jan 2022 06:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 92.118.204.0/24 maxlen: 24
45.11.231.0/24 maxlen: 24
45.11.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155099493 (0x93ea165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e65abfa77e69955c26335fc066dc0197eca99901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:3f:ed:0d:10:50:02:23:3e:91:b8:1e:cf:
51:b6:43:0f:d0:06:b9:26:5f:e2:4d:0c:94:12:7b:
74:2d:84:75:20:39:cb:73:2d:0c:08:d9:b1:57:1d:
a2:9e:7a:d2:5f:68:1e:c2:6c:b0:a8:02:26:d3:56:
a7:26:c6:74:eb:91:00:3f:6e:d7:ca:84:93:6b:54:
0d:b9:46:65:ea:c1:62:86:3d:5b:e1:2e:75:5b:e7:
22:36:d2:bb:86:ae:45:2e:37:b8:16:3f:f8:07:10:
65:1f:d7:4c:e2:cc:3b:a8:5c:c4:98:0c:06:35:97:
47:d3:94:31:39:ff:b9:e5:88:8c:d5:7c:f2:07:6f:
e0:70:79:70:f0:9a:14:e7:06:ac:8c:d8:0c:9f:1c:
84:c2:08:6f:a0:0f:26:90:4a:7c:25:14:e0:d4:d7:
2a:e4:ed:52:50:9d:e9:31:64:99:f0:d0:60:6e:f8:
25:5c:12:48:58:48:90:8b:85:6c:6f:a9:d8:62:f6:
83:11:71:28:27:fe:ed:33:97:f6:e6:ec:45:f7:d7:
1e:04:71:08:c9:97:e1:fe:c1:13:8c:69:15:9a:98:
fe:fe:3f:e6:ce:55:8e:96:0e:44:91:7f:b4:b2:47:
23:22:13:a8:c8:15:c4:c1:c9:cc:94:87:dd:a5:0a:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5A:BF:A7:7E:69:95:5C:26:33:5F:C0:66:DC:01:97:EC:A9:99:01
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/5lq_p35plVwmM1_AZtwBl-ypmQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.230.0/23
92.118.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ea:a0:67:b5:52:da:fa:ce:96:cb:4d:bd:71:d7:da:51:67:
f8:68:ef:c6:41:86:3d:13:73:78:1e:fa:69:e1:ea:0b:10:1d:
c6:d9:8a:34:58:9e:8d:45:56:1d:ef:ca:6f:3f:70:ea:b8:be:
cb:cf:a8:24:ef:7b:ae:b1:2b:ea:b1:ac:9c:a3:30:44:e3:d1:
37:87:32:7b:d5:50:74:35:1a:9b:72:01:2c:24:5f:21:41:b5:
53:b1:31:80:02:48:85:5a:be:83:dc:f1:08:c9:12:ea:f7:75:
76:83:ca:0f:cf:f8:36:fc:07:e3:4f:33:b8:d1:eb:0c:79:9f:
69:89:83:db:91:fe:fd:e4:2d:01:30:67:ab:37:15:c3:aa:34:
6a:47:63:7f:be:e8:e8:04:64:35:0a:ca:ee:f3:4d:18:db:aa:
4c:8d:7e:e5:da:99:e9:5c:ea:e7:f9:b2:40:e0:31:8d:d3:a0:
86:0d:a0:21:7c:80:1f:ab:24:54:ac:85:84:2d:b6:82:29:5b:
c0:8d:b8:d1:62:7e:0a:c0:bf:01:57:4f:82:f3:e9:36:6b:83:
65:80:f0:02:06:27:85:24:4b:81:05:00:86:e6:d6:a7:da:c5:
42:b5:9b:cd:1d:30:19:cf:c2:f7:26:c0:1a:31:4e:8a:a0:7b:
d3:1c:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org