Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/liKvrhCfRyVC9Rnaafe1moPTf6g.roa
File: liKvrhCfRyVC9Rnaafe1moPTf6g.roa (raw, json)
Hash identifier: euCx8l04XwIKc2+XH9kg+d7MzSryxQqp4oWr1uAU1LE=
Subject key identifier: 96:22:AF:AE:10:9F:47:25:42:F5:19:DA:69:F7:B5:9A:83:D3:7F:A8
Certificate issuer: /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial: 02D4DE13
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/liKvrhCfRyVC9Rnaafe1moPTf6g.roa
Signing time: Sat 01 Jan 2022 13:06:45 +0000
ROA not before: Sat 01 Jan 2022 13:06:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62176
IP address blocks: 185.38.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47504915 (0x2d4de13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
Validity
Not Before: Jan 1 13:06:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9622afae109f472542f519da69f7b59a83d37fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:ed:d8:37:e4:30:29:0c:bb:22:4f:ba:41:
bc:6d:c1:82:c0:61:4b:03:4c:7c:5e:91:b3:26:7e:
83:f8:2d:eb:6e:6a:b4:e4:0f:dd:69:39:34:94:4b:
70:2f:ba:ee:56:fa:2c:31:3b:0a:08:f5:8d:34:b2:
79:15:9a:12:37:3e:2c:23:aa:5b:e6:d6:46:d5:15:
52:11:fd:d7:8b:1f:e0:3f:7f:0c:26:a5:10:2a:3a:
80:72:b2:30:ec:e0:cd:75:10:e9:86:72:75:49:96:
14:de:27:9e:e0:52:79:5e:44:bc:30:97:f6:e8:38:
80:64:4f:be:ea:e6:18:e0:46:87:cf:83:b5:61:2b:
03:01:9a:8c:1d:69:af:11:80:a6:67:c9:a1:df:f9:
7d:2c:ed:0f:3d:3a:66:77:0e:dd:62:7f:ee:31:0a:
dd:ee:d7:6b:b8:a6:fe:bf:3f:06:19:c7:6c:1f:66:
03:e3:ba:4f:2a:a3:86:b6:60:b7:05:bf:24:c5:78:
4a:85:e4:d7:35:f3:fa:be:7f:e0:f1:ed:c1:fb:37:
54:45:bf:e7:99:30:61:00:9d:af:9b:de:78:fa:1b:
3c:7f:c5:2e:5b:29:2c:3b:99:3b:65:6a:ad:51:d0:
73:54:e9:74:87:53:71:5a:79:5e:ed:97:57:b1:cf:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:22:AF:AE:10:9F:47:25:42:F5:19:DA:69:F7:B5:9A:83:D3:7F:A8
X509v3 Authority Key Identifier:
keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/liKvrhCfRyVC9Rnaafe1moPTf6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.188.0/22
Signature Algorithm: sha256WithRSAEncryption
42:a5:6b:1d:44:95:33:a6:41:3c:46:1c:9d:14:91:fa:b8:1f:
71:94:60:36:3b:26:ee:a7:77:66:60:16:d1:ca:96:25:4d:1d:
f8:de:3d:77:02:a6:ef:21:f7:8f:b0:ee:43:42:28:ab:5e:c3:
b1:f5:68:c2:5f:95:1b:20:06:60:c9:69:5b:d3:7b:9f:91:0c:
7e:b2:04:16:e9:4a:41:81:98:d7:c7:0c:f9:71:d7:14:d0:d4:
ca:e2:c5:18:d3:cb:13:55:29:6c:fa:3e:8e:49:84:d0:1b:8a:
4f:1f:d8:7b:ab:b9:7d:db:e4:25:e5:56:9b:02:45:a9:60:ee:
61:44:12:12:e4:32:9b:07:2e:eb:7b:0b:e1:53:d9:eb:5f:5f:
2c:5e:c6:46:d9:80:d3:ed:c5:59:48:6f:6a:6c:47:e6:74:48:
b4:fb:b8:4d:42:bc:f3:17:d0:a3:f1:df:69:d1:27:d5:85:a7:
20:f1:cb:ae:de:bd:2e:f2:74:d9:05:b4:9e:04:e4:d9:99:e2:
9c:61:e7:a4:b3:74:92:16:74:b5:96:0b:93:a1:6e:2d:83:5e:
ef:14:2c:a5:5e:86:46:94:13:5d:a7:e2:64:27:53:70:b7:01:
51:6c:56:41:8c:c0:d0:a5:47:c6:30:4e:46:10:78:8f:b4:21:
e0:33:1b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org