Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rLkC6iX0B3d7kfdoBFzKRZouWno.roa
File: rLkC6iX0B3d7kfdoBFzKRZouWno.roa (raw, json)
Hash identifier: LIIIce/JV27omb9TzfRdz1oQMqnOQd6+6WF7ACSeYt4=
Subject key identifier: AC:B9:02:EA:25:F4:07:77:7B:91:F7:68:04:5C:CA:45:9A:2E:5A:7A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1DC110AD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rLkC6iX0B3d7kfdoBFzKRZouWno.roa
Signing time: Wed 06 Apr 2022 12:26:05 +0000
ROA not before: Wed 06 Apr 2022 12:26:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 85.217.145.0/24 maxlen: 24
194.180.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499191981 (0x1dc110ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 6 12:26:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acb902ea25f407777b91f768045cca459a2e5a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:88:51:a4:60:72:e9:6c:ab:85:03:78:80:
63:2c:1b:ce:5d:7f:e0:22:72:71:b4:56:17:48:fe:
5c:61:e2:16:21:24:bd:a3:04:b9:92:d9:df:43:9d:
13:84:7d:5e:f6:d6:6c:bf:b4:17:da:e1:63:00:c9:
82:8d:51:80:d9:92:52:48:36:de:9e:42:1b:fb:26:
10:42:0b:2b:79:7f:cf:e6:2d:4a:9b:da:82:ad:51:
5f:32:ba:1b:79:34:36:cf:dd:3f:ee:19:fb:b0:aa:
c0:aa:09:e7:8f:cc:06:44:0f:02:34:04:66:dd:ae:
e4:50:67:be:35:8a:67:3b:cf:47:48:a1:3f:4a:a6:
15:e0:34:5d:30:9b:8a:34:15:96:83:69:0d:ec:9b:
06:e8:1d:1d:bc:33:97:f6:ed:cd:a0:c9:13:48:93:
1a:9a:e5:b0:c1:4a:15:2f:34:b9:54:3f:89:2b:a1:
15:93:1a:e1:1a:00:d7:8e:78:07:eb:23:d5:8d:b1:
b5:f2:ac:04:29:76:18:90:98:db:51:b3:6c:6a:0b:
c1:37:64:df:23:dd:79:b4:93:eb:ab:9c:dc:78:5d:
79:11:7e:35:29:2b:5b:5f:eb:f9:5f:55:bf:e7:9c:
23:6d:84:f9:bd:9f:03:84:18:10:5f:dc:43:0b:e7:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B9:02:EA:25:F4:07:77:7B:91:F7:68:04:5C:CA:45:9A:2E:5A:7A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/rLkC6iX0B3d7kfdoBFzKRZouWno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.145.0/24
194.180.50.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ea:5f:d4:c5:22:84:3e:a1:63:6e:57:cf:89:75:cb:7b:e8:
55:5c:26:98:33:be:ce:8d:32:41:bb:59:dd:91:1b:81:51:6f:
10:db:20:2c:0f:df:c6:69:3e:fe:0c:59:2c:52:af:33:05:ba:
35:32:8b:37:4f:9d:29:60:be:e6:b7:65:12:b8:82:57:03:5d:
00:5b:27:59:a8:ce:4f:b0:a7:b9:e4:12:dc:6c:72:91:54:2b:
72:43:a9:d3:3d:25:bb:81:5b:c1:7b:ed:4e:f8:0d:ec:d0:50:
49:aa:b2:31:e2:4e:2b:2e:f5:8b:35:6c:e9:df:9b:7a:e0:b6:
29:32:73:37:8b:90:8f:3d:82:41:66:6b:6a:38:cc:9f:2a:5a:
4c:39:a1:a5:6a:4a:91:ae:22:e4:c5:93:a3:f0:06:49:32:93:
70:a4:1b:7f:3b:b2:18:32:48:98:8b:13:53:f1:04:a8:53:f5:
92:fe:cd:a8:82:4b:2c:6a:79:89:eb:42:87:07:bb:47:34:04:
e4:cc:18:98:14:d7:0f:5f:cb:ef:ff:b3:9e:8f:10:c5:4c:fc:
a7:4f:c0:18:57:3e:71:c9:71:03:4a:a5:d9:78:e8:64:c4:a1:
45:b1:02:f4:c7:3d:2d:bf:b0:38:cf:8d:9d:e4:96:91:1d:df:
eb:42:9a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org