Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/59lxd5gshitTKWb9Fitdj8LT2lI.roa
File: 59lxd5gshitTKWb9Fitdj8LT2lI.roa (raw, json)
Hash identifier: ipYmJN87E/F4Uv5wkTYnkzcRROgBBTbfZ6Wj7aDp8GA=
Subject key identifier: E7:D9:71:77:98:2C:86:2B:53:29:66:FD:16:2B:5D:8F:C2:D3:DA:52
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 02090E04
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/59lxd5gshitTKWb9Fitdj8LT2lI.roa
Signing time: Sat 01 Jan 2022 08:04:46 +0000
ROA not before: Sat 01 Jan 2022 08:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35758
IP address blocks: 185.191.206.0/24 maxlen: 24
185.191.207.0/24 maxlen: 24
2a0a:1dc4::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34147844 (0x2090e04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: Jan 1 08:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7d97177982c862b532966fd162b5d8fc2d3da52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:7a:5c:aa:41:f9:5f:75:3b:3c:e9:36:be:
e6:3d:5d:19:34:58:92:24:9a:89:ad:bd:de:31:16:
23:4d:78:7c:d9:e8:23:14:17:b4:c6:6a:8b:10:fa:
d4:85:5d:d5:71:04:70:37:8c:13:2c:83:38:96:38:
0a:42:24:7f:75:57:0d:c0:53:0a:19:ef:df:ff:aa:
8e:61:eb:d2:55:0d:37:55:40:00:72:da:88:bf:ca:
f7:fd:60:e9:60:6d:91:d2:e6:c2:c7:6c:04:d6:38:
9d:4c:40:86:51:97:e3:4b:f6:6d:86:d5:8b:cf:a1:
dd:ae:74:18:f3:1a:66:9c:66:60:ac:58:64:09:cc:
39:18:0d:4c:18:7d:26:f1:fb:15:ad:73:f1:bb:76:
8b:a9:9e:b6:6d:1f:22:09:f8:78:c1:12:a0:28:be:
59:de:59:a1:8e:ed:e9:30:66:c9:f8:35:58:e2:d8:
d0:f9:97:ab:1a:36:fe:d8:0f:96:e3:b3:0a:ac:25:
8a:7a:64:4f:cd:2b:98:16:01:ae:75:49:dc:f6:d4:
72:e7:b9:e3:ba:10:67:bc:f6:49:b3:f9:a8:ea:37:
e9:86:45:27:83:89:27:4b:83:52:cb:ae:f3:17:0b:
4e:73:19:c1:e0:eb:21:15:b9:c2:78:a2:2b:f5:ca:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D9:71:77:98:2C:86:2B:53:29:66:FD:16:2B:5D:8F:C2:D3:DA:52
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/59lxd5gshitTKWb9Fitdj8LT2lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.206.0/23
IPv6:
2a0a:1dc4::/30
Signature Algorithm: sha256WithRSAEncryption
8b:1e:8c:4d:dd:17:00:db:f0:aa:21:ed:8e:de:33:9f:2e:e9:
3b:be:aa:ae:b7:67:59:3a:13:e7:db:82:08:3e:a2:0a:4d:5b:
03:09:e0:b3:f0:48:ce:d2:ca:90:be:5b:ac:44:7a:fc:07:74:
c4:55:46:2a:8f:22:74:ea:17:c8:6c:7d:70:66:5f:79:21:68:
6d:c5:3e:08:65:b4:0e:09:bd:ea:20:2f:d6:36:09:9f:5a:e9:
e7:47:d8:92:41:41:ee:89:bf:f8:ee:48:86:f6:70:0b:a1:2e:
1a:02:87:ee:de:a2:cb:bd:d2:fd:68:0b:8f:4c:24:ef:90:56:
87:e0:e8:64:71:33:7d:bb:e4:7a:17:fd:a6:e1:5d:99:ac:a3:
c1:02:97:dc:87:c5:6b:40:24:b0:a5:a9:c3:20:51:c8:64:b5:
09:7d:95:6a:b2:02:df:6e:c5:3b:bb:63:3f:cf:df:1a:3d:69:
91:f0:da:1a:25:83:40:b5:05:9d:36:19:31:42:50:23:bf:d1:
ac:0a:59:f2:d2:a0:03:5f:5b:ec:00:a3:c7:49:6f:6f:9e:e1:
36:c5:2d:66:ae:9d:f6:66:ec:70:b6:f6:19:53:ec:d8:1a:2c:
ee:e6:38:85:7b:58:3e:15:6b:b2:d5:b9:72:2f:7f:3f:15:a0:
d8:6f:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:46 2023 by rpki-client on console-ams.rpki-client.org