Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/1-LkPf4l09OY1vumb59WhB4k88K4.roa
File: 1-LkPf4l09OY1vumb59WhB4k88K4.roa (raw, json)
Hash identifier: clMuckJnGv/XWujR0KRwRovHPSyJHQasdlVW2WCCIh0=
Subject key identifier: F8:B9:0F:7F:89:74:F4:E6:35:BE:E9:9B:E7:D5:A1:07:89:3C:F0:AE
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 0184F0DFA87BA591FE28BDFD157240284A83
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/1-LkPf4l09OY1vumb59WhB4k88K4.roa
Signing time: Thu 08 Dec 2022 08:35:00 +0000
ROA not before: Thu 08 Dec 2022 08:35:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201319
IP address blocks: 194.56.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:df:a8:7b:a5:91:fe:28:bd:fd:15:72:40:28:4a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Dec 8 08:35:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8b90f7f8974f4e635bee99be7d5a107893cf0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:37:e0:cd:f7:6a:3f:00:55:c5:30:9d:7a:
8a:24:eb:76:20:46:83:41:97:db:2a:ff:e3:70:31:
79:50:1b:cc:13:4a:ff:7f:56:34:61:7b:56:7e:c3:
a0:f4:ce:08:6c:ab:df:cb:4c:75:28:71:32:01:3b:
28:4a:d9:b4:a0:ec:6c:b1:e3:8f:e5:b3:64:15:e0:
05:8c:4b:6d:e9:f2:a7:f8:7f:6f:a6:41:1d:b1:d4:
ae:1a:c1:7b:1c:51:c7:99:a0:19:cd:c2:f8:10:3c:
1d:13:71:97:e1:eb:71:ab:c6:b6:b2:76:ce:5b:76:
7d:1e:84:81:70:f0:85:5e:f9:06:02:ea:e6:4a:3e:
8b:f2:16:eb:0f:d9:0f:ca:ae:40:42:90:a3:aa:e7:
38:48:0d:18:ce:24:01:9f:1f:9f:a2:79:7c:d4:5b:
53:be:b7:6d:2e:1d:6e:27:4d:5e:36:1a:aa:12:61:
84:98:e2:62:03:4d:31:eb:61:fe:7d:03:f2:a6:53:
37:16:22:64:2e:15:0e:cb:19:53:98:96:0e:a3:3b:
b7:64:35:a9:ac:2c:41:2b:24:7d:71:07:b9:ea:e2:
5b:9b:5b:30:fe:f1:c7:81:74:99:80:e2:68:2c:2d:
66:3a:8d:66:2e:b3:26:69:70:8c:f3:39:9b:80:18:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B9:0F:7F:89:74:F4:E6:35:BE:E9:9B:E7:D5:A1:07:89:3C:F0:AE
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/1-LkPf4l09OY1vumb59WhB4k88K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:55:f1:2e:bc:b1:e7:a8:09:5b:8a:cd:fc:91:c5:2c:b2:70:
cd:3b:b5:b0:57:1b:52:95:2d:65:3c:29:ef:b9:d4:bd:b0:d8:
2e:ba:8b:da:52:ee:47:c4:cb:c9:b9:93:57:7f:84:59:21:21:
b2:19:91:c6:9d:84:1c:e0:d8:08:9a:d2:34:bf:57:52:7d:ce:
c8:29:a5:fb:e0:6f:00:29:6f:ee:9c:e5:64:50:2f:dd:57:b6:
2a:0a:69:c8:7a:be:34:dc:27:f8:36:ef:5b:4a:d1:38:fd:1f:
d3:2e:47:0c:42:67:98:19:7e:ca:06:51:42:01:8d:07:31:1a:
35:a4:3e:fe:35:6d:ab:7a:06:aa:a6:a7:d0:a5:90:fe:ed:d2:
2e:f6:cd:df:39:8a:13:d5:b3:44:fc:55:21:78:43:30:b6:25:
4e:45:d2:af:32:90:53:29:50:2e:00:7a:cc:1c:09:56:d6:59:
19:84:4f:30:10:60:74:2a:12:ac:0c:66:3f:8c:7b:b6:c6:d0:
9b:3d:1e:1e:f9:b9:a6:62:86:bc:e3:b3:3d:41:e6:44:9c:d1:
f5:24:ad:79:79:d7:8a:07:55:a1:63:a6:fd:3e:ef:c2:d6:e3:
69:ba:91:ad:3c:02:69:d0:95:03:16:d3:cc:12:2a:95:1b:89:
1a:c0:cb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:17 2024 by rpki-client on console-ams.rpki-client.org