Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/LjC6bfhnFfjoL4k3GkVac7zSvdI.roa
File: LjC6bfhnFfjoL4k3GkVac7zSvdI.roa (raw, json)
Hash identifier: 8yTTh1CrUfZvAVzG2sJvM+j4alVLoo+Dp2CMkeR8ZuY=
Subject key identifier: 2E:30:BA:6D:F8:67:15:F8:E8:2F:89:37:1A:45:5A:73:BC:D2:BD:D2
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 086F5F2A
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/LjC6bfhnFfjoL4k3GkVac7zSvdI.roa
Signing time: Sat 01 Jan 2022 05:59:52 +0000
ROA not before: Sat 01 Jan 2022 05:59:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13030
IP address blocks: 185.240.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141516586 (0x86f5f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Jan 1 05:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e30ba6df86715f8e82f89371a455a73bcd2bdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:13:fd:cd:18:cd:6e:d2:5e:dd:7d:57:f0:
5e:12:cf:9e:f9:dc:6e:29:f0:c8:4a:83:b1:20:7f:
00:f6:f5:eb:d8:d5:11:09:c9:07:e2:5a:35:7b:b3:
6b:e5:9b:91:70:77:0e:c7:fb:aa:76:cd:73:04:5c:
eb:6a:c4:5b:36:47:49:82:9d:d5:c3:4e:f1:45:65:
59:70:0e:18:a1:30:af:3c:4f:42:20:7c:d7:87:b2:
12:c4:d5:55:7e:f9:25:bf:c4:95:d8:17:9f:99:d1:
a1:5b:bf:46:11:b4:3b:15:6e:69:45:d6:49:3f:87:
88:ff:24:d9:d7:9d:09:6e:fb:a8:71:59:1b:c0:dc:
04:46:48:e6:f7:8f:f1:06:08:39:65:ba:3b:40:8c:
64:b3:45:27:95:15:f2:9f:62:b7:38:53:3f:80:25:
67:f9:d1:7f:62:48:9f:5f:db:fd:3a:1f:39:0e:a6:
85:f2:bd:72:93:b9:12:66:4a:32:85:53:46:56:aa:
7f:72:16:d7:66:09:43:ef:19:2a:a1:ee:4c:e4:65:
14:40:23:4d:ce:9f:ec:7d:41:a9:aa:18:e4:c3:2b:
a5:7d:b9:d1:a5:ce:07:10:78:50:92:bf:58:90:3a:
b0:93:54:99:bf:70:c0:ea:b2:04:3d:0d:df:89:61:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:30:BA:6D:F8:67:15:F8:E8:2F:89:37:1A:45:5A:73:BC:D2:BD:D2
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/LjC6bfhnFfjoL4k3GkVac7zSvdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.172.0/22
Signature Algorithm: sha256WithRSAEncryption
27:99:d9:2e:5e:07:2e:4b:a7:82:09:eb:43:aa:9e:bb:99:de:
7f:56:3e:a0:4d:bf:a8:89:2d:3d:1f:08:e0:ce:24:c3:98:cf:
7a:3f:52:5b:42:02:ad:7e:62:97:b2:5b:91:4a:c5:5a:e2:cd:
65:db:67:e9:49:0a:af:5d:7f:2d:1c:80:f5:d0:2a:94:77:e9:
63:22:a9:24:d5:d1:24:96:b0:a6:4f:71:09:be:ae:b5:1e:05:
9c:c9:62:17:ee:f4:fc:5f:9e:05:d3:b9:c1:33:e2:5a:40:61:
e6:75:ea:af:5d:b5:fa:07:d5:2a:c7:75:98:1a:3e:f0:b0:32:
23:2e:77:4f:81:f4:76:ec:f0:91:2e:e7:88:77:48:77:39:9f:
e5:76:6a:92:5d:b6:97:e3:10:53:ef:3e:42:a0:ad:04:9c:33:
98:65:e1:9f:58:3a:d1:e4:89:78:74:6e:91:53:76:7a:97:e2:
5d:8f:5e:bf:67:f5:ca:58:dd:a5:9e:a8:de:5a:be:63:22:93:
cd:a0:8f:b9:c9:87:9b:65:3f:3a:6f:4d:ef:71:11:1a:a1:38:
95:44:2e:09:d7:ae:d8:84:bf:e9:8f:75:d8:e8:91:24:95:b4:
85:cd:fa:83:b4:06:e1:2b:3d:72:02:04:81:0f:b1:57:dd:55:
30:ff:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:29 2024 by rpki-client on console-ams.rpki-client.org