Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/llZqPjNovBOPgjqFUHeBZfwgVqQ.roa
File: llZqPjNovBOPgjqFUHeBZfwgVqQ.roa (raw, json)
Hash identifier: 0h+/CF+IwOWsjleKRAhriRZIkGzEjvpdfEEmsMe9FyM=
Subject key identifier: 96:56:6A:3E:33:68:BC:13:8F:82:3A:85:50:77:81:65:FC:20:56:A4
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0768BAAD
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/llZqPjNovBOPgjqFUHeBZfwgVqQ.roa
Signing time: Wed 02 Feb 2022 15:50:57 +0000
ROA not before: Wed 02 Feb 2022 15:50:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.88.138.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124304045 (0x768baad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 2 15:50:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96566a3e3368bc138f823a8550778165fc2056a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:e2:c8:8c:a5:fa:08:24:99:90:04:76:b7:
20:84:e8:1c:d2:08:04:7c:d7:74:cb:25:7c:c9:bd:
73:37:91:4a:a1:57:0d:8b:09:54:27:15:9e:ea:07:
9f:79:c7:5d:82:6d:23:c9:d2:e1:d9:bf:18:58:03:
25:0f:99:4e:79:05:83:80:75:02:6d:d8:3e:47:e1:
51:ac:76:1f:59:a0:ec:f0:07:04:68:ce:00:97:e5:
cb:ea:9c:fb:77:08:ce:7f:86:9b:bf:82:35:e1:e0:
4e:ab:cb:7e:5f:a4:08:5e:9c:53:79:2d:48:bb:47:
4f:1a:b4:80:dd:2f:dd:c0:eb:de:97:a3:8b:cc:6f:
07:71:e9:bd:f5:83:96:ee:b2:83:d8:b3:c9:cb:4c:
63:37:3a:8b:a0:b8:39:4d:49:1c:e7:34:45:6d:02:
6c:30:6e:31:15:6b:38:f5:81:9d:46:f4:38:54:26:
78:6e:03:0d:49:c0:c7:36:08:fb:14:d1:e1:e5:b3:
57:00:19:2e:f9:ce:cc:c1:3a:1f:4f:09:4f:03:42:
1b:5c:1f:24:63:d4:1d:74:e6:a7:3f:8d:e5:62:84:
ed:5e:3c:b2:11:1f:8a:04:43:16:26:6f:b7:97:69:
d3:46:15:e5:df:58:ce:38:58:80:0e:28:95:47:77:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:56:6A:3E:33:68:BC:13:8F:82:3A:85:50:77:81:65:FC:20:56:A4
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/llZqPjNovBOPgjqFUHeBZfwgVqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
77.83.38.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:98:d8:84:e7:41:e8:fd:d1:c7:8a:7b:6b:86:26:dd:f7:41:
43:50:9e:40:0f:df:46:53:f4:a9:32:0d:4b:16:5e:27:e7:02:
41:17:fa:96:0e:a6:87:e4:a2:7c:cf:1f:69:cc:9d:f6:ce:79:
93:85:e4:1e:6a:7a:49:e4:ac:d7:dc:6c:cb:54:ab:f8:e5:a1:
d3:e3:19:15:8b:9c:f4:67:0e:02:1f:e3:03:ec:c7:fd:43:7b:
d1:29:f8:13:f6:3a:e4:fb:25:ee:e6:af:06:0e:da:dd:b4:74:
84:2b:60:0d:ef:7c:8f:68:99:5a:ba:b5:aa:52:1e:1e:ca:ab:
eb:4b:bd:67:d5:7f:73:3b:f0:11:71:97:9b:92:12:08:e5:0d:
91:7a:21:b3:84:07:ab:e8:99:87:9e:f7:00:fc:e1:f2:0c:d9:
d4:b9:e9:c6:6e:f2:84:d9:08:2f:cb:18:6a:67:39:aa:d9:9c:
cb:b9:9d:83:87:64:91:65:40:f4:9f:28:11:90:0e:1f:71:f6:
83:13:63:fe:6a:1a:cb:db:e5:4d:dc:66:9c:10:96:35:da:14:
50:c6:c0:c9:5f:14:76:fe:a0:f9:50:c7:55:41:b7:51:19:89:
ba:b2:2d:74:b8:84:9c:df:d6:e5:d8:4d:00:a8:68:2e:c3:64:
a2:d6:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org