Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/LXtRPT1PxCtFeRTomorZGcRKa_k.roa
File: LXtRPT1PxCtFeRTomorZGcRKa_k.roa (raw, json)
Hash identifier: QmEYj/OyjLnq7rDavLRyuyad9FJpKO1bFsKaVxaEgsk=
Subject key identifier: 2D:7B:51:3D:3D:4F:C4:2B:45:79:14:E8:9A:8A:D9:19:C4:4A:6B:F9
Certificate issuer: /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial: 08BC9ACF
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/LXtRPT1PxCtFeRTomorZGcRKa_k.roa
Signing time: Sat 01 Jan 2022 15:01:25 +0000
ROA not before: Sat 01 Jan 2022 15:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201193
IP address blocks: 185.231.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146578127 (0x8bc9acf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Validity
Not Before: Jan 1 15:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d7b513d3d4fc42b457914e89a8ad919c44a6bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:bf:3e:ca:e8:88:bb:87:46:ff:15:f5:3f:
e4:67:0e:46:ac:d3:4f:dc:c9:56:69:fb:75:99:43:
4a:0d:3f:c7:32:db:7a:bd:22:ac:94:d4:ca:39:84:
07:d5:b4:a5:ab:10:92:b1:1d:44:b4:cd:23:78:d3:
d2:2a:b0:65:09:d2:fe:3e:55:00:0c:ab:53:4d:6b:
76:8c:96:e2:cf:c1:04:46:e2:b1:4c:39:01:1e:ac:
0d:b2:46:26:8a:4b:b3:06:f0:11:4b:53:e0:34:3e:
c6:70:f5:d6:bd:db:05:3a:69:c7:f8:82:d9:55:fe:
73:91:e3:5a:aa:df:16:7e:5a:aa:0c:af:38:c6:95:
1f:49:da:4a:3b:11:ff:f0:d6:28:4d:1c:6e:61:c6:
4d:51:43:5b:bf:92:f6:27:f4:f9:33:17:71:01:e2:
75:35:d9:95:8b:27:53:9f:2f:b3:14:98:88:77:fe:
6c:b5:b7:22:e9:99:57:76:e0:bb:05:2d:52:20:f1:
a8:e2:64:af:79:42:67:71:fe:47:d9:b7:1a:0a:87:
d1:9e:4e:68:7b:c3:2a:a6:42:ce:4b:4c:b7:9a:e9:
3d:99:cb:65:d3:03:48:6b:b3:f9:58:63:35:2a:79:
17:7d:25:26:c3:20:d3:aa:cc:96:70:ba:55:8e:eb:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7B:51:3D:3D:4F:C4:2B:45:79:14:E8:9A:8A:D9:19:C4:4A:6B:F9
X509v3 Authority Key Identifier:
keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/LXtRPT1PxCtFeRTomorZGcRKa_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:35:91:b3:e0:f5:b3:3b:df:f4:56:a1:b4:67:bb:87:74:f9:
62:90:56:59:69:d2:b9:7b:36:16:6d:02:2d:2f:41:bd:b4:02:
60:3c:f2:69:86:20:50:0c:dd:8e:42:11:81:0f:a2:41:df:0f:
0e:d4:a5:e2:64:c9:0d:51:4f:8f:24:51:36:ef:f6:41:63:6e:
c8:c5:59:49:5d:d0:61:0d:4d:e4:96:b7:32:b8:86:44:e2:64:
e4:06:0d:21:de:1c:aa:f2:55:fc:09:62:01:8b:2f:e7:86:79:
6b:28:77:af:ca:e6:80:41:5a:e3:91:6c:f1:2d:ec:5c:cc:ee:
47:28:0d:2d:51:84:17:2e:a6:a5:7c:45:1b:99:e3:b5:79:70:
74:11:5d:9b:5b:a8:8b:c6:43:2c:0d:e0:95:80:e6:91:b6:a0:
0c:b8:37:19:d2:0b:fa:8f:70:e4:52:27:1a:8a:ba:88:ea:21:
47:04:ae:7f:27:34:5b:62:2e:14:3d:ca:fb:a4:68:d1:3c:6a:
cb:d2:7e:dd:94:8c:af:36:2d:f4:91:9b:17:18:8d:f0:c5:d0:
39:dc:fd:0e:90:75:10:65:fe:0b:ca:86:6b:c7:95:d9:ae:49:
a9:42:4b:70:08:fe:b4:60:00:52:a2:e5:15:ea:10:b0:93:3e:
0e:bc:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:51 2024 by rpki-client on console-fra.rpki-client.org