Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/lINTxH4hlRm56H41KR_jF2ctEYg.roa
File: lINTxH4hlRm56H41KR_jF2ctEYg.roa (raw, json)
Hash identifier: 8mAOa6OvMJX3zeEljmskAOQPfKs/HqrTShR1vcF3fRA=
Subject key identifier: 94:83:53:C4:7E:21:95:19:B9:E8:7E:35:29:1F:E3:17:67:2D:11:88
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 06FED1B5
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/lINTxH4hlRm56H41KR_jF2ctEYg.roa
Signing time: Wed 20 Apr 2022 20:25:23 +0000
ROA not before: Wed 20 Apr 2022 20:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.76.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117363125 (0x6fed1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Apr 20 20:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=948353c47e219519b9e87e35291fe317672d1188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:c1:b6:57:ed:d0:72:03:34:e8:b3:ed:a2:
ea:69:23:83:6a:9d:39:0e:3d:89:59:23:19:d2:27:
d1:37:8a:3a:40:c4:87:9e:49:ae:00:97:b3:a4:c6:
48:bc:dc:73:01:79:23:bb:73:47:f8:c9:8d:a3:01:
5b:34:83:9d:7d:68:93:8a:41:1e:b4:bc:02:0c:10:
8d:82:7a:b4:bf:2b:d6:e5:61:da:0c:69:03:16:bc:
62:c9:85:32:5d:24:57:5d:9e:15:ae:83:ab:6e:e3:
e0:84:0f:38:e2:00:f9:29:02:7f:ee:f7:25:5a:0c:
bb:7b:2e:59:b7:1d:3f:45:d1:14:49:cf:27:84:24:
15:85:22:c2:99:1e:7c:79:c9:11:a0:e3:ac:cf:22:
ff:6b:76:32:71:10:64:9b:21:06:57:f2:ce:c3:0a:
f9:4c:35:31:fc:8e:f7:aa:26:91:26:84:9c:15:42:
56:54:f5:74:a3:9d:ec:4a:ca:c4:3d:d1:9e:ec:e7:
a0:9e:9e:3b:ac:f9:68:9d:07:1e:74:f3:91:83:e1:
34:06:b4:7e:8d:72:11:34:c4:fb:47:0a:c9:33:0b:
d6:7d:b2:60:a6:54:b3:df:fc:a2:bb:15:a6:61:7a:
88:55:a8:a3:f2:3b:09:14:d4:6b:96:43:8c:f8:f4:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:83:53:C4:7E:21:95:19:B9:E8:7E:35:29:1F:E3:17:67:2D:11:88
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/lINTxH4hlRm56H41KR_jF2ctEYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/24
94.137.74.0/24
94.137.76.0/24
94.137.79.0/24
94.137.89.0-94.137.91.255
94.137.93.0/24
Signature Algorithm: sha256WithRSAEncryption
50:75:38:14:da:f5:be:24:74:35:ed:e8:a5:94:65:6c:c1:42:
a5:4c:9e:47:93:a7:e0:8d:1a:ba:36:a6:c9:8b:eb:36:93:cc:
1a:6d:fd:e8:ae:db:40:d9:43:99:0b:c3:e9:3e:42:b4:a5:b1:
65:63:dd:b5:8b:b9:2b:05:62:64:ed:5e:1e:88:12:f5:69:3e:
1d:eb:d7:f2:13:42:13:84:83:42:ba:ac:f8:83:63:c1:d7:b2:
3d:81:9b:b5:cd:9f:6e:cc:9f:53:aa:6c:9c:ec:67:a8:99:46:
b1:56:e4:9c:5d:9a:ff:15:9a:a8:f4:45:8b:c8:13:6e:73:a8:
74:13:23:ec:16:b3:84:83:4d:c7:96:29:54:80:51:44:ae:14:
cf:06:79:1d:64:6d:e8:fb:be:ce:c0:93:e8:c5:3f:8c:e3:e0:
61:cf:b8:dc:01:cf:a0:eb:27:bd:1c:df:82:5a:bd:55:df:6a:
ee:65:db:e4:c1:82:d1:52:fe:db:df:2c:04:e9:07:75:ce:d0:
d8:1e:bf:85:78:6c:18:2a:8f:55:87:69:47:a7:92:6b:68:05:
cb:ae:1b:07:55:b6:e2:2f:ea:dc:71:a4:42:72:4b:09:1c:09:
b5:aa:bd:9d:f7:a1:10:96:59:e5:cd:6d:66:b7:df:af:4b:87:
42:75:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org