Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-xLj1mC_Vsqx0B6B39OJ_TfUCuU.roa
File: 1-xLj1mC_Vsqx0B6B39OJ_TfUCuU.roa (raw, json)
Hash identifier: wpo86vZ1QrNhxmSgoCHAdvTnpsxwwti1SpemcxzT/sk=
Subject key identifier: FB:12:E3:D6:60:BF:56:CA:B1:D0:1E:81:DF:D3:89:FD:37:D4:0A:E5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018475406DABB79CB7D41029DDD863E33E2F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-xLj1mC_Vsqx0B6B39OJ_TfUCuU.roa
Signing time: Mon 14 Nov 2022 08:27:47 +0000
ROA not before: Mon 14 Nov 2022 08:27:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 84.54.51.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:40:6d:ab:b7:9c:b7:d4:10:29:dd:d8:63:e3:3e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 14 08:27:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb12e3d660bf56cab1d01e81dfd389fd37d40ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:6a:3f:80:bb:ed:6f:aa:68:31:9b:21:d6:
56:62:7d:f3:fa:a5:e5:b8:91:15:90:03:79:d0:ad:
aa:4d:81:6a:0b:cc:58:25:61:69:93:43:3f:96:75:
f8:92:84:9f:c7:3e:03:2f:1a:e2:a8:c4:9e:e5:96:
e4:93:ff:16:80:2d:77:4a:37:30:ab:c8:bc:24:ed:
5f:00:63:ee:9b:cb:f5:ef:98:50:47:93:4d:0f:d3:
f1:e5:97:93:4a:c6:fc:2d:fa:e1:57:83:c1:96:34:
7d:ad:dd:e0:29:a3:a6:60:da:fe:2c:6a:fc:59:44:
5d:3a:b0:ef:43:e2:71:7c:d1:9a:66:be:9f:35:08:
05:32:57:8a:b4:fc:dc:ff:74:1f:cc:e3:d1:0e:c9:
c4:a8:72:e1:cf:56:72:25:96:88:d5:d8:07:18:41:
13:8d:73:e0:d5:6c:64:00:cd:d8:41:d7:60:28:cf:
52:32:33:d7:f3:a6:d2:d9:97:89:9f:20:62:fe:29:
97:82:51:e5:ba:34:03:d8:e9:95:1a:a5:43:25:e9:
6b:ee:b6:6a:9f:2e:be:d6:d2:03:62:9d:2f:97:6c:
d7:1e:2f:ed:15:bf:b6:28:48:ca:c8:bc:4b:e6:48:
b5:f0:31:6b:52:7f:82:57:af:c3:dc:85:8e:4b:86:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:12:E3:D6:60:BF:56:CA:B1:D0:1E:81:DF:D3:89:FD:37:D4:0A:E5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-xLj1mC_Vsqx0B6B39OJ_TfUCuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.51.0/24
185.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b5:2d:b1:e1:c0:81:a5:a7:6e:3f:b5:d6:ef:e9:63:6c:4f:
46:65:29:eb:ae:37:02:34:69:d5:c5:ae:77:96:4c:e3:8e:52:
6d:14:57:5d:cd:87:87:12:b5:13:2a:a5:2c:09:7b:b3:38:78:
57:1a:a1:b6:cb:ab:56:58:c3:36:6d:c8:da:2e:c3:a8:9a:e7:
90:ed:31:1c:5c:49:5c:cc:a2:6c:bf:13:14:62:f0:99:44:3f:
de:b0:67:8e:fd:b8:02:01:1b:60:a2:18:f4:dd:89:f1:2e:20:
4c:39:b7:f9:1d:14:25:0a:84:8e:c9:17:da:95:78:66:97:e5:
80:5a:fc:82:00:6b:a2:6d:5c:7f:92:b5:d0:7d:9c:83:3b:9e:
8c:3d:ec:78:88:fb:e8:83:49:3f:09:b5:d2:75:55:2f:33:81:
5a:66:2c:cc:10:e8:97:fa:f4:62:2f:91:1d:07:0d:ff:99:24:
b8:9e:a5:47:b0:8a:8f:e3:29:67:e2:65:8a:a5:4b:bb:c5:c0:
d2:59:da:b3:c6:48:bf:42:a0:70:2d:a0:81:eb:63:56:92:69:
f7:22:00:6f:b6:3a:db:cf:68:e6:8c:80:06:2a:79:6e:5b:87:
38:48:3a:ed:c4:0a:b4:b0:d7:eb:75:33:51:0e:89:6e:48:98:
57:e5:7a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:56 2024 by rpki-client on console-fra.rpki-client.org