Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/_lxMMuhGsYBHNk8VA27-rgWm89c.roa
File: _lxMMuhGsYBHNk8VA27-rgWm89c.roa (raw, json)
Hash identifier: 9Ni66nZHutjmrLUatwGGYK0EnzcLBl5oquZWRS5yVPY=
Subject key identifier: FE:5C:4C:32:E8:46:B1:80:47:36:4F:15:03:6E:FE:AE:05:A6:F3:D7
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 0489A3B4
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/_lxMMuhGsYBHNk8VA27-rgWm89c.roa
Signing time: Wed 02 Mar 2022 10:47:56 +0000
ROA not before: Wed 02 Mar 2022 10:47:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1887
IP address blocks: 195.187.64.0/18 maxlen: 18
148.81.0.0/16 maxlen: 16
2a00:1488::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76129204 (0x489a3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Mar 2 10:47:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe5c4c32e846b18047364f15036efeae05a6f3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:14:49:aa:93:bb:93:90:58:46:a7:1f:95:
cc:e4:f6:81:dd:2c:5c:a9:1e:1e:85:c5:8c:22:e3:
b6:e5:1d:69:56:da:35:1d:e0:47:55:43:19:9c:95:
61:9c:fc:20:e7:78:28:13:9f:bf:ba:61:5c:9d:c1:
d3:45:2e:ca:66:ab:d5:8a:b3:4b:99:b1:02:f5:55:
d5:ac:99:64:bb:31:d2:80:05:79:ca:4e:99:2d:60:
5b:ee:77:f2:19:99:44:4e:14:6a:db:fd:05:9f:94:
bb:7e:ab:ef:23:58:86:fc:08:40:ca:4c:d9:a7:bf:
f0:08:8e:cb:d7:de:88:bf:9d:c7:2b:11:df:46:98:
cf:de:4f:40:59:65:2b:57:ea:87:66:f0:64:ea:e3:
b5:b3:b3:d1:ec:db:02:fb:94:60:8b:fa:74:ba:74:
df:dd:3b:48:34:bf:8c:2c:0d:23:c1:86:69:05:7d:
b8:bb:12:5f:9e:72:49:91:7e:33:5c:15:7d:a5:bc:
44:e1:56:e6:41:ac:28:b4:2f:cb:02:9e:19:97:64:
e1:04:20:97:f5:48:35:e7:da:03:57:85:3c:ea:6d:
1d:0f:46:b2:84:bf:c1:8f:9c:ac:88:3a:e3:6d:ae:
c4:e0:18:a6:39:57:ce:d6:f7:bb:6e:e0:4a:dd:10:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5C:4C:32:E8:46:B1:80:47:36:4F:15:03:6E:FE:AE:05:A6:F3:D7
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/_lxMMuhGsYBHNk8VA27-rgWm89c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.0.0/16
195.187.64.0/18
IPv6:
2a00:1488::/32
Signature Algorithm: sha256WithRSAEncryption
6f:38:65:58:7d:d9:4f:08:5b:41:f2:bf:39:8f:69:f2:c4:7f:
67:d6:8c:81:ea:94:a2:9c:d1:c0:f2:bb:44:65:57:6e:5e:c6:
b9:fd:50:be:07:a6:32:c6:f7:8d:9b:a5:9e:33:78:86:b2:70:
5a:0a:ab:7e:77:20:53:ab:35:fc:b7:1e:83:14:44:31:c4:5b:
cc:0a:69:69:da:f2:cb:89:5d:87:bc:2c:2e:8b:00:1c:3f:11:
b5:2f:d3:ed:f8:2f:ee:35:36:9e:8e:26:bc:89:10:12:ef:03:
54:6e:cd:b2:89:95:42:0a:f9:31:cd:c3:f3:a9:38:12:66:18:
52:af:58:a1:03:9b:c1:bd:86:8d:e4:2f:ae:e1:25:a3:2e:69:
bc:19:a9:2d:97:8a:73:fc:11:b7:71:e7:e9:56:63:50:53:23:
1b:5b:26:9c:f7:54:48:dd:6d:d3:42:71:e4:61:77:88:6b:b1:
ad:8b:aa:1c:4c:13:e4:fd:f9:1d:af:1c:0b:14:d5:0a:fc:33:
9e:e6:5a:dd:b5:18:f8:d8:0d:7a:8a:5f:ae:0c:3f:99:cb:8c:
8c:8c:d5:50:bc:33:5e:36:6e:c7:0d:7f:06:90:38:8f:b8:6b:
b2:a6:80:9b:bc:c7:ca:de:9a:d8:0e:5f:42:40:8a:5f:15:26:
c6:df:c5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org