Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/LIXK5kMi-qFiE101k7_eEw651_I.roa
File: LIXK5kMi-qFiE101k7_eEw651_I.roa (raw, json)
Hash identifier: Fn+tAzkU8fe/91q5Xp80wBgOvZNmMyg7fhvdYxqa/8c=
Subject key identifier: 2C:85:CA:E6:43:22:FA:A1:62:13:5D:35:93:BF:DE:13:0E:B9:D7:F2
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 9540FE
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/LIXK5kMi-qFiE101k7_eEw651_I.roa
Signing time: Mon 14 Mar 2022 15:32:31 +0000
ROA not before: Mon 14 Mar 2022 15:32:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209768
IP address blocks: 2a12:5844:1212::/48 maxlen: 48
2a12:5840:1f2::/48 maxlen: 48
2a12:5840:1f0::/48 maxlen: 48
2a12:5844:1111::/48 maxlen: 48
2a12:5840:1f1::/48 maxlen: 48
2a12:5840:2111::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9781502 (0x9540fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Mar 14 15:32:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c85cae64322faa162135d3593bfde130eb9d7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:5f:66:90:38:12:5d:5f:7c:e3:3e:80:94:
62:b4:f5:18:5d:96:ea:cc:23:9c:b2:35:13:27:06:
b5:d0:f3:ea:72:59:bd:47:ef:90:d1:e3:8c:88:ff:
00:03:f4:d2:61:33:44:25:77:1a:fd:f0:9e:78:0f:
09:5a:95:13:68:f0:0d:5b:af:6e:a2:9f:e2:a6:0b:
26:9e:6c:af:56:31:a1:f0:98:e5:6c:98:0d:5d:9d:
a0:8d:af:9e:04:f5:d6:5e:99:a5:3e:c4:a5:4e:0e:
e0:ff:9e:3b:39:1e:ef:66:0c:ec:94:42:17:e3:53:
c3:86:bf:e1:72:97:32:ca:7c:08:1c:33:a0:5f:4b:
c5:1a:ca:ba:e6:0f:2f:e1:5e:15:cf:ce:25:c0:40:
ea:8f:bc:e9:8e:78:7b:3f:02:51:f3:dc:49:8b:74:
12:ac:48:87:f7:95:ce:7b:e1:91:a6:e4:f5:b2:c7:
7d:79:b6:ba:76:ba:63:cc:51:2b:1f:a0:a3:19:6b:
91:36:a8:79:7b:b2:4d:05:ac:00:40:b0:6d:e0:2c:
c3:cf:37:a6:d3:9d:2a:b7:a0:44:7a:db:88:c8:c4:
bd:f7:fe:e6:e6:58:43:2d:6d:f9:cd:f0:1f:00:96:
d3:e4:e1:3c:fd:82:ee:67:1c:5a:d4:87:40:7d:fe:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:85:CA:E6:43:22:FA:A1:62:13:5D:35:93:BF:DE:13:0E:B9:D7:F2
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/LIXK5kMi-qFiE101k7_eEw651_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5840:1f0::-2a12:5840:1f2:ffff:ffff:ffff:ffff:ffff
2a12:5840:2111::/48
2a12:5844:1111::/48
2a12:5844:1212::/48
Signature Algorithm: sha256WithRSAEncryption
b8:eb:e8:13:f3:ec:7a:62:77:9c:01:4a:fa:45:6d:8c:4a:e2:
1d:2e:25:b5:90:a7:12:24:18:53:a6:dc:0a:2a:fc:7a:ad:2e:
48:88:48:7e:2c:34:d4:ef:e1:83:c4:2d:64:a4:be:f0:9f:b7:
ee:b0:9f:cf:95:d8:66:d9:e8:eb:1f:f3:97:ac:93:09:0d:77:
33:28:5a:8b:14:aa:94:87:48:62:19:7f:40:b5:7a:b1:e7:5a:
11:14:bf:c6:d9:d9:c7:61:e4:a4:0d:71:05:2b:c3:07:99:63:
f5:1d:95:12:f6:98:71:fa:b1:77:7f:54:a9:30:31:5f:10:27:
5b:8f:a9:0a:12:07:77:90:07:c5:30:a2:a2:ff:0d:53:44:32:
a8:a4:69:8f:c7:06:55:d3:42:d1:5a:21:55:de:41:2c:f0:4f:
19:a2:34:1d:37:eb:6a:b4:b2:e6:79:d0:9c:96:04:de:51:4a:
5a:1a:f7:97:e0:41:af:95:94:d3:f6:06:21:a6:87:d3:65:71:
02:eb:60:96:35:45:3c:c9:86:3c:88:58:3c:66:d2:01:a1:de:
3d:a2:0a:7d:3f:51:bd:3d:3e:51:b0:7d:1f:8b:fa:6b:3e:3b:
c8:c9:80:30:38:27:8d:16:75:14:53:7b:0d:1d:5c:9c:07:bc:
b4:42:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:36 2024 by rpki-client on console-ams.rpki-client.org