Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/L9_rqwucCPTvwKqXOLhQfwoDoJ0.roa
File: L9_rqwucCPTvwKqXOLhQfwoDoJ0.roa (raw, json)
Hash identifier: aHh3rZhrwXsnpiGZx3rxvbRFDyOmue6FfB5P5FyN55Q=
Subject key identifier: 2F:DF:EB:AB:0B:9C:08:F4:EF:C0:AA:97:38:B8:50:7F:0A:03:A0:9D
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01825FBBDB9390527B0FEEF313018825D97A
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/L9_rqwucCPTvwKqXOLhQfwoDoJ0.roa
Signing time: Tue 02 Aug 2022 18:05:23 +0000
ROA not before: Tue 02 Aug 2022 18:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60506
IP address blocks: 45.140.244.0/22 maxlen: 24
81.199.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5f:bb:db:93:90:52:7b:0f:ee:f3:13:01:88:25:d9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Aug 2 18:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fdfebab0b9c08f4efc0aa9738b8507f0a03a09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:17:ed:4a:bb:07:7b:b5:c4:8c:e4:e5:a8:
4c:59:22:c4:85:7f:79:77:5a:dd:71:f6:1d:e0:76:
42:fd:9b:a5:b2:a3:76:99:69:8f:cc:82:84:ba:c9:
ec:c3:b3:85:e7:73:ab:1b:f6:4b:90:19:c6:53:2e:
5c:d8:7d:3b:38:41:93:1a:5a:54:69:9a:dc:a0:2f:
44:ac:92:55:69:c5:ca:f4:83:e8:28:e7:04:7d:5d:
40:1c:87:97:df:1b:ef:01:b1:47:ea:e3:1f:2c:a2:
f4:b8:ef:ad:90:bf:5f:38:f5:c5:a9:9e:8a:6d:08:
9b:14:a9:18:99:86:24:d5:cd:b6:03:4b:4a:15:42:
6a:f6:d8:48:9b:af:73:b5:78:fb:fd:ab:77:7a:ea:
a8:bb:62:ec:ec:c1:aa:fa:14:32:c6:54:c6:d0:d6:
9e:31:2a:b5:1b:a9:f9:73:13:98:73:38:af:47:38:
42:d5:4e:35:aa:8d:da:ff:cd:72:fd:bd:c6:bc:c0:
3f:6e:63:78:15:f1:8d:19:78:8a:80:3a:96:6c:34:
d3:af:2a:c7:b3:83:1b:4d:92:37:ff:8f:55:02:3e:
81:ac:cc:6f:8a:d5:9a:04:58:04:38:b1:c7:1b:8b:
77:d5:d1:fd:a6:57:55:9c:00:75:c0:bb:8b:16:76:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:EB:AB:0B:9C:08:F4:EF:C0:AA:97:38:B8:50:7F:0A:03:A0:9D
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/L9_rqwucCPTvwKqXOLhQfwoDoJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.244.0/22
81.199.24.0/21
Signature Algorithm: sha256WithRSAEncryption
41:3a:f4:60:6a:32:e1:1f:da:e9:0f:73:2b:57:dd:7f:43:90:
b2:5e:2b:e6:d2:b2:2f:15:96:d2:dd:5b:94:ac:e2:c2:c8:e1:
8a:b2:36:98:e8:bd:74:f7:81:ea:0e:36:cf:37:fa:4e:8d:ae:
33:88:c3:4d:9d:33:f7:d0:f0:f5:cc:3a:33:1e:d9:9e:2a:85:
a5:2d:f9:81:2a:6a:8c:69:9a:a9:3e:f3:69:6e:13:06:25:22:
1c:1c:f2:65:42:91:65:98:76:5f:36:4c:a9:71:5b:b2:4d:6a:
af:c2:7f:bd:f7:6e:2c:a8:c9:77:55:fd:d6:88:a1:f8:df:73:
18:04:52:dd:40:04:2d:53:0a:e5:31:06:b4:e3:d8:6f:82:c1:
02:ab:cc:69:c4:52:d7:11:b4:f0:e5:96:59:f6:16:e7:00:9f:
45:ec:5c:7f:0e:65:d6:60:bd:b6:aa:f2:2c:a4:7a:83:3f:8c:
e0:88:f4:de:61:15:d7:25:b4:46:9c:a1:97:69:a8:eb:85:96:
da:48:b4:4c:7a:5b:84:53:71:48:a9:f6:de:fe:e9:f0:b1:76:
5c:2b:8b:15:b0:7a:d3:ac:36:af:8f:8c:d1:7f:8e:6f:a4:f4:
90:90:a7:2a:9c:58:b3:c1:1e:8b:8b:67:6b:a2:a7:41:26:30:
46:cc:16:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org