Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/lSWJ4eEke1wbURFbi8F-GLWf6rA.roa
File: lSWJ4eEke1wbURFbi8F-GLWf6rA.roa (raw, json)
Hash identifier: Ty9SjixDOFvKdKdfOPsQQhI/7o60vK6Qa+a/epVw1jo=
Subject key identifier: 95:25:89:E1:E1:24:7B:5C:1B:51:11:5B:8B:C1:7E:18:B5:9F:EA:B0
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 39055C0A
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/lSWJ4eEke1wbURFbi8F-GLWf6rA.roa
Signing time: Mon 14 Feb 2022 11:19:49 +0000
ROA not before: Mon 14 Feb 2022 11:19:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 85.254.138.0/23 maxlen: 23
85.254.84.0/23 maxlen: 23
85.254.103.0/24 maxlen: 24
85.254.124.0/23 maxlen: 23
85.254.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 956652554 (0x39055c0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Feb 14 11:19:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=952589e1e1247b5c1b51115b8bc17e18b59feab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:20:44:fc:e7:e4:61:65:48:32:5e:43:8f:
d6:2b:3d:3e:cd:9c:fa:f3:60:e3:0e:99:3d:d8:70:
ed:df:1a:2b:9f:44:e4:60:7b:56:5d:05:15:d4:23:
b7:20:7e:2a:0e:4c:a4:a1:d5:0a:d0:31:d4:d0:df:
fc:d6:fd:d9:a5:93:bb:81:10:4c:4d:7d:c8:ad:ed:
9b:e5:34:54:5c:fa:b0:98:0d:87:b0:09:af:a0:54:
d5:ea:7f:3a:7b:f3:85:a9:75:42:1c:d3:b4:68:79:
9a:18:e3:7f:46:3e:07:91:fb:f4:09:c9:7b:da:92:
79:c2:43:25:22:6c:0d:5a:41:34:0a:a2:75:cc:10:
66:39:86:dc:50:46:e3:f8:2f:10:82:19:74:1a:47:
97:92:62:54:33:fc:c5:8b:8f:aa:79:25:7e:86:74:
26:05:fa:b0:e9:68:a6:10:3f:22:a2:33:44:3b:4c:
d1:a9:bd:17:19:68:6e:a5:54:78:29:d0:3d:36:5c:
b9:f8:8f:42:74:7e:7a:86:25:78:4a:ee:d7:fb:67:
54:7a:7d:ab:18:5f:9b:3a:e8:f8:26:3b:0a:18:a8:
82:6c:24:ca:f1:a2:25:f3:80:9c:c7:f7:f0:f2:b9:
48:b2:c8:42:e5:ff:65:d8:24:ff:75:61:cf:39:55:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:25:89:E1:E1:24:7B:5C:1B:51:11:5B:8B:C1:7E:18:B5:9F:EA:B0
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/lSWJ4eEke1wbURFbi8F-GLWf6rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.84.0/23
85.254.103.0/24
85.254.124.0-85.254.126.255
85.254.138.0/23
Signature Algorithm: sha256WithRSAEncryption
15:3c:e3:33:50:57:e1:77:b2:a8:9d:07:47:bd:5c:72:b2:f3:
b2:98:8e:36:e0:8e:82:7c:d7:fd:50:cf:97:fb:6a:0b:78:ba:
8f:de:c4:92:93:df:80:ec:f9:e8:60:37:4b:00:50:bd:c6:78:
40:f5:36:10:26:75:59:6a:57:20:c7:51:f5:a9:dd:8c:dc:f4:
be:8d:94:f7:da:81:ec:c6:55:c1:24:d3:e0:d3:82:fe:7b:3e:
0e:25:1a:5a:a3:dc:0c:3d:c6:47:dd:a0:6a:d2:ce:71:cc:2e:
78:e8:43:13:a9:9f:dd:1d:36:72:00:37:a2:27:e3:ac:0c:d5:
cb:ec:1b:5f:c4:79:f1:0e:d6:7d:a7:fe:b5:97:46:bb:3f:69:
c1:c4:08:ea:bf:6a:99:2c:3f:57:06:1c:09:40:d5:ba:59:07:
cc:cc:09:e0:e7:1e:85:97:fb:3c:1a:b5:ce:2d:10:2c:a3:a3:
5f:74:eb:0c:02:7a:24:91:87:7b:5a:c7:e4:08:cd:c9:fe:f6:
6e:99:54:b7:d4:a4:f1:c0:2e:c6:a2:dd:e1:85:cd:00:8b:88:
ca:78:9e:a2:65:51:34:dc:bd:b2:f6:05:98:be:4f:6e:0b:69:
a2:74:1f:bd:e4:15:57:75:5e:f6:e1:8c:5f:87:48:6d:a3:42:
2a:d7:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:38 2023 by rpki-client on console-ams.rpki-client.org