Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iLHSUZ9GahMAIb6YIHsZk4PWuSI.roa
File: iLHSUZ9GahMAIb6YIHsZk4PWuSI.roa (raw, json)
Hash identifier: QkKaLhK6+il6EVJAY3O/u5AB79eQB92f56eVE7OoVyw=
Subject key identifier: 88:B1:D2:51:9F:46:6A:13:00:21:BE:98:20:7B:19:93:83:D6:B9:22
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01846790F2C67FF02E1CD25D555D26C1410B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iLHSUZ9GahMAIb6YIHsZk4PWuSI.roa
Signing time: Fri 11 Nov 2022 16:41:03 +0000
ROA not before: Fri 11 Nov 2022 16:41:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17447
IP address blocks: 84.54.51.0/24 maxlen: 24
194.180.48.0/24 maxlen: 24
185.246.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:90:f2:c6:7f:f0:2e:1c:d2:5d:55:5d:26:c1:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 11 16:41:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88b1d2519f466a130021be98207b199383d6b922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:d0:cf:e2:29:1b:19:8e:a4:14:a8:63:9e:
69:d3:2a:db:c0:59:6e:f2:a2:af:12:b2:5b:60:e7:
d6:4d:94:78:cd:ad:b1:c1:7c:f1:9d:06:53:95:55:
45:5e:40:ec:8b:6c:4a:11:23:08:d7:b0:df:bc:2f:
01:1a:3c:5e:f6:62:47:27:3e:c2:6a:cc:50:76:ee:
31:a6:53:56:0f:91:20:d8:70:68:68:18:1b:7b:58:
95:62:4e:c0:88:ed:15:86:be:84:ce:3c:24:df:c2:
1b:2c:ec:63:e5:66:1e:99:b4:4b:1b:5e:ab:bc:b1:
50:b5:84:ea:57:e8:da:25:60:d0:61:e8:94:74:f0:
14:9f:46:9b:ee:68:6b:0a:67:ee:5a:fe:18:3e:29:
df:49:da:83:58:65:c3:d4:ae:f6:17:9f:f1:28:54:
32:4d:95:a5:21:09:85:db:02:cf:20:02:c9:e1:d0:
01:bb:41:2d:7c:9e:c7:ac:fc:60:33:dd:53:29:b2:
b0:d0:55:56:c2:e8:34:56:8d:4b:e5:03:21:cc:62:
8b:10:c2:31:41:1e:cc:eb:c5:13:cf:21:df:1f:c3:
9d:85:3b:8d:ae:e0:3b:97:c5:f7:0d:0b:ea:79:fd:
ef:cc:4c:97:f2:24:55:f1:cf:80:e4:f5:b1:a7:89:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B1:D2:51:9F:46:6A:13:00:21:BE:98:20:7B:19:93:83:D6:B9:22
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iLHSUZ9GahMAIb6YIHsZk4PWuSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.51.0/24
185.246.220.0/24
194.180.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:3c:b4:75:0a:22:6f:e6:ac:3a:3a:4f:1d:95:e7:f0:97:b7:
fa:6d:4b:b5:a6:24:34:d8:61:50:d3:4a:34:a8:a6:ee:71:92:
61:c9:75:61:0b:04:ae:f0:bb:e6:63:2a:bd:36:95:2d:a7:51:
d2:eb:80:0f:82:06:03:24:fc:f5:99:bd:89:4f:64:d6:34:c7:
30:e2:69:b1:9c:e4:52:50:2e:b4:91:c4:ad:69:3a:b1:b7:7c:
4d:c3:dc:c8:aa:29:3e:81:7b:c8:51:9f:9f:3a:f3:98:dd:d5:
36:c4:a7:e4:bb:f9:fe:3e:95:69:7b:d6:1e:24:09:65:fd:aa:
75:3a:6e:f1:b4:19:73:dc:11:5f:bc:47:b4:72:11:11:21:97:
50:d9:6c:ed:af:39:f5:ff:19:4e:4c:41:2a:b8:5a:19:eb:82:
8f:fe:63:0f:c8:58:62:3a:5b:04:6a:43:3c:b4:be:da:ea:5c:
75:89:b9:dd:0a:eb:3e:ca:d9:b7:8a:74:ad:8d:7f:c3:79:9a:
82:4e:80:e1:35:b7:9e:e7:7f:4d:87:07:8c:e6:de:7c:29:2f:
ce:b6:e5:8f:a5:de:24:b8:ce:90:27:4f:1f:c3:39:c1:43:b4:
53:bf:76:f0:e5:d0:12:0b:77:f5:01:4a:0d:a0:44:2d:a3:85:
ac:01:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:41 2023 by rpki-client on console-ams.rpki-client.org