Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/D0bL6q_xc4xVjfPjtLYKVbWVLR0.roa
File: D0bL6q_xc4xVjfPjtLYKVbWVLR0.roa (raw, json)
Hash identifier: LglkAl0Y8hMztP0n56mfqTtxCoL8iHb9h2R315bYZmc=
Subject key identifier: 0F:46:CB:EA:AF:F1:73:8C:55:8D:F3:E3:B4:B6:0A:55:B5:95:2D:1D
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 3C4CA615
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/D0bL6q_xc4xVjfPjtLYKVbWVLR0.roa
Signing time: Sat 01 Jan 2022 13:57:38 +0000
ROA not before: Sat 01 Jan 2022 13:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45794
IP address blocks: 134.97.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1011656213 (0x3c4ca615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Jan 1 13:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f46cbeaaff1738c558df3e3b4b60a55b5952d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:ad:30:3c:a9:93:2b:a9:7b:e5:d7:3e:fc:
5b:b0:c8:58:9f:c3:61:11:1a:d2:47:c5:f6:35:05:
20:32:41:8e:07:3d:fe:fe:c9:48:3b:a7:6b:cd:4e:
93:9e:5e:df:1f:02:8b:fa:27:aa:36:e1:98:8b:9a:
62:b0:97:b6:f0:60:a5:b9:ad:56:8f:c0:3c:a0:8b:
57:da:8d:8c:bf:40:fe:fc:8b:ca:e5:59:e2:f0:a0:
6f:42:5f:aa:b3:26:c7:54:fd:8d:a6:1d:0d:9b:cc:
a7:9c:e1:21:d3:56:e0:b3:4b:16:96:88:69:8e:37:
a5:27:0a:99:f7:71:78:f6:62:f1:0f:32:09:28:9b:
85:75:53:1f:01:c8:52:40:7f:52:47:d3:8d:25:f5:
f0:70:ae:cc:f4:49:33:13:e9:c6:da:80:37:20:c7:
7a:4a:43:d0:af:5c:62:2f:c1:dc:a9:fc:2b:a4:5f:
bf:dc:54:31:6d:53:ba:cf:93:a0:33:82:b8:95:b2:
58:ac:2b:89:1f:70:0e:f5:6d:42:eb:f8:10:1e:8a:
c8:d8:fc:25:74:0f:5e:7a:82:a0:9c:89:de:a5:c8:
4e:0a:e8:e3:e9:94:e1:d6:30:df:b2:7a:04:0e:fa:
b7:a9:56:ff:8d:a1:32:ba:4e:ff:16:2b:c5:d0:04:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:46:CB:EA:AF:F1:73:8C:55:8D:F3:E3:B4:B6:0A:55:B5:95:2D:1D
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/D0bL6q_xc4xVjfPjtLYKVbWVLR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.97.18.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:83:4b:28:79:88:bd:48:ee:a7:26:2e:c7:47:bc:c4:d5:b6:
07:fe:d9:9c:85:59:85:18:a3:f2:6a:41:4d:d6:c9:c0:93:c1:
6f:93:1e:58:93:c0:f7:76:36:15:12:0f:5f:c6:37:cf:56:dc:
90:c7:a2:79:37:31:a1:77:22:46:ea:a0:4c:53:a9:ab:b2:9d:
44:77:81:11:ce:6a:b9:e8:b2:ba:d0:50:e8:bd:84:67:a3:90:
d5:99:66:63:d7:a8:99:13:d9:33:ff:92:87:1f:8a:e4:13:0e:
5b:cb:05:67:e0:7c:aa:94:d4:84:c5:da:2c:97:75:61:7c:3b:
23:bc:c3:80:e0:0a:59:7f:4d:01:4f:c6:60:cc:f4:25:1e:4b:
52:55:53:da:ce:56:0a:07:ea:7f:bb:3f:fd:6f:0b:c6:10:a9:
07:23:95:5c:69:77:4d:84:a7:e9:1f:2a:e2:bb:48:9b:f0:33:
60:e7:94:9e:ab:3c:e3:26:31:90:74:1f:ed:d7:fa:1c:86:b4:
29:02:69:70:ba:09:70:51:db:57:4c:c7:7a:6f:9e:b7:d3:64:
a9:ec:1e:70:d7:bd:32:f1:93:b9:c8:63:98:df:ea:2c:d2:b4:
ba:25:6b:2c:b6:0e:3e:8a:31:74:8a:e5:18:2e:5b:df:c8:94:
03:f8:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:47 2023 by rpki-client on console-ams.rpki-client.org