Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LEhU_iYl_72DSubpvISyQIled7E.roa
File: LEhU_iYl_72DSubpvISyQIled7E.roa (raw, json)
Hash identifier: 6rk4Rn+1fZ/JduOLERyny7MQKv5u9qosqzYrmd67cn0=
Subject key identifier: 2C:48:54:FE:26:25:FF:BD:83:4A:E6:E9:BC:84:B2:40:89:5E:77:B1
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 09625BC1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LEhU_iYl_72DSubpvISyQIled7E.roa
Signing time: Mon 30 May 2022 06:55:15 +0000
ROA not before: Mon 30 May 2022 06:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 212.69.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157440961 (0x9625bc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 30 06:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c4854fe2625ffbd834ae6e9bc84b240895e77b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:77:82:af:38:b7:74:19:80:aa:db:02:6c:f3:
8d:95:24:24:61:41:10:46:cd:3a:f0:54:36:c3:16:
ae:09:3c:69:3d:96:ce:41:9b:1b:c5:13:24:13:76:
1e:b6:d0:39:a9:56:59:89:b1:01:f1:31:eb:04:31:
fc:59:89:3e:ec:9f:56:60:a4:88:4b:ab:27:82:e2:
48:f9:3a:d1:5c:d5:08:2e:61:3d:e0:53:eb:87:06:
eb:6a:f0:43:28:6e:fe:f0:b2:41:ef:4f:75:e5:1f:
1f:07:ba:c4:53:89:0e:ad:73:a4:d6:f4:d4:d6:34:
9f:bc:b4:53:26:e2:f6:3c:e1:85:01:be:d7:22:c1:
f7:8b:4d:89:51:ac:a7:c1:55:99:dc:6a:5d:b0:f1:
f2:c5:e3:e9:66:9f:e7:f0:8f:33:73:af:12:54:27:
98:3b:ad:ec:63:42:ec:52:5b:ce:7d:9d:3d:ed:9c:
2c:70:d8:e0:57:f9:4e:51:0c:da:a7:f6:df:76:55:
d2:d9:2a:ed:c1:6b:30:e5:97:e5:02:35:c4:1e:64:
98:56:58:05:10:94:71:8f:fe:85:7c:67:5f:dc:21:
1c:05:7c:d2:58:ef:78:6b:c9:5d:46:03:e7:4c:da:
6a:b9:be:b3:bd:67:17:4f:ea:07:09:70:43:7b:0b:
08:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:48:54:FE:26:25:FF:BD:83:4A:E6:E9:BC:84:B2:40:89:5E:77:B1
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LEhU_iYl_72DSubpvISyQIled7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.1.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5f:ff:ec:80:25:aa:50:f3:3a:cd:c0:3b:dd:59:08:24:e8:
f7:ae:4e:a8:36:96:9d:d3:bf:f4:dc:42:db:ff:dd:ce:a3:65:
cb:54:76:4d:c0:58:5e:73:1c:8d:a7:98:47:45:fc:0c:e4:d2:
1a:9c:ac:7a:38:98:62:bc:37:19:dd:64:45:1f:28:46:3b:86:
c8:82:b0:f5:a0:e0:b3:e6:cb:2f:94:40:2c:75:df:f2:12:b6:
63:fe:ce:c2:f1:ec:12:8f:ac:8a:95:cd:89:4d:bd:6c:11:af:
27:17:97:37:86:80:d3:2a:90:8a:ff:f8:9e:c2:17:e3:70:6f:
6c:1c:bf:64:27:29:7d:f9:68:8b:61:62:15:66:ef:6b:8b:13:
d7:5a:52:d4:9d:fb:af:a5:6c:d2:2e:e1:d1:34:0a:55:8f:a1:
3a:3d:65:7c:eb:47:c1:6d:95:55:2f:92:5b:f3:5c:43:50:f2:
3f:cf:e9:df:b6:40:33:d4:b5:c7:b9:53:77:d7:93:81:1a:a8:
11:b7:de:20:58:a7:d8:93:a6:9c:5a:cb:d3:22:25:9d:90:1c:
5a:c3:5d:06:69:f0:56:55:7e:95:02:0a:9d:1d:80:f1:61:6d:
f5:81:42:84:7c:ed:f0:0c:ca:bc:65:26:11:e8:d1:23:e5:e6:
30:63:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org