Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/cLx3fJvtgBk0Jooo2BJ2DLy3LWg.roa
File: cLx3fJvtgBk0Jooo2BJ2DLy3LWg.roa (raw, json)
Hash identifier: pwPOkwakCR0cz3G5mJi+TbMae6ZP9yw+AgxzWh/2Bho=
Subject key identifier: 70:BC:77:7C:9B:ED:80:19:34:26:8A:28:D8:12:76:0C:BC:B7:2D:68
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 1C2AB4C9
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/cLx3fJvtgBk0Jooo2BJ2DLy3LWg.roa
Signing time: Wed 08 Jun 2022 13:23:02 +0000
ROA not before: Wed 08 Jun 2022 13:23:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 185.31.180.0/22 maxlen: 23
2a00:bf60::/32 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472560841 (0x1c2ab4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Jun 8 13:23:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70bc777c9bed801934268a28d812760cbcb72d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:4a:26:96:b3:77:90:86:1d:5b:6e:e8:df:
66:49:fe:3d:77:3c:02:f7:2a:8c:10:80:08:4b:3d:
20:70:b8:ec:06:71:d7:c0:a0:3c:ce:bf:cc:d1:ec:
29:bb:da:c0:d1:7b:8f:fd:82:65:7a:61:5e:5a:ba:
c2:4f:01:65:c2:31:bc:9d:57:24:97:54:9b:fd:35:
ee:6f:90:fd:1c:82:c6:81:96:99:9d:06:2f:6f:14:
dc:15:81:41:d7:2d:79:70:22:65:31:cb:fd:af:67:
b6:be:d6:2b:0e:2a:40:bf:72:2b:89:20:3f:75:ea:
14:98:5f:bb:26:7c:68:9e:52:8d:e9:4e:9f:d9:af:
a8:d7:21:54:05:fa:2b:d4:e5:f1:fa:df:41:df:80:
c7:32:b1:80:51:92:8a:33:a0:0e:fe:08:fb:66:fe:
9a:08:bb:5d:0f:97:d0:5a:bb:9a:7d:8e:e3:1b:bd:
c9:eb:97:f8:20:d2:c4:94:1e:5e:07:a8:12:dc:dc:
3e:88:c7:2f:c0:41:50:4f:41:77:08:8f:ab:37:38:
ec:92:d6:48:ff:a7:38:3a:f2:bd:39:aa:84:28:fc:
59:9e:65:55:86:c8:26:83:7a:36:d9:69:3c:aa:c0:
eb:b0:06:87:12:a9:4b:13:a2:4d:68:e8:5b:57:1a:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BC:77:7C:9B:ED:80:19:34:26:8A:28:D8:12:76:0C:BC:B7:2D:68
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/cLx3fJvtgBk0Jooo2BJ2DLy3LWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.180.0/22
IPv6:
2a00:bf60::/32
Signature Algorithm: sha256WithRSAEncryption
35:c1:44:90:bb:5b:29:cc:eb:d8:85:fb:a6:41:e2:25:90:93:
bc:b7:a9:64:0a:1d:af:a6:cc:1e:f1:e4:59:e8:01:22:63:6b:
45:be:33:01:da:8b:55:92:00:5f:83:c8:a8:14:20:05:fa:f5:
38:d7:54:64:67:1e:f2:26:b1:8b:78:6e:37:43:af:b3:71:05:
23:35:61:f9:56:03:9d:40:1c:ce:86:0b:8e:aa:e4:63:75:0e:
de:a3:97:71:7a:40:68:04:3b:ee:c8:4e:d5:25:ba:87:bd:7b:
5e:5e:76:da:95:31:82:09:cc:b7:a1:10:97:4a:16:2f:f4:62:
52:14:e8:c2:e9:84:55:ba:ab:53:2b:62:97:e0:21:f7:87:7f:
79:12:bd:c2:29:be:47:2c:d7:87:4f:7f:b3:9d:f9:41:86:7a:
2b:c1:10:c3:03:1a:25:27:bc:cc:48:f9:a6:43:d6:2f:47:d9:
c8:41:e5:82:0b:32:06:c3:92:9d:ed:dd:df:52:b8:45:e1:25:
5c:86:54:30:c6:82:3f:54:8b:04:f4:6b:01:bc:03:87:76:fd:
5c:83:c0:31:96:80:0e:c4:af:7e:6c:17:d0:17:05:9e:cc:07:
8d:e8:d9:10:9f:5d:f4:46:51:59:b1:04:46:7f:9b:84:b1:bc:
5e:c4:63:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:47 2024 by rpki-client on console-ams.rpki-client.org