Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/lmWhsK4xsRNH9VipxoLDpjviT-0.roa
File: lmWhsK4xsRNH9VipxoLDpjviT-0.roa (raw, json)
Hash identifier: UDpkTLbsuoyS2HJQ8OMLTJTS2ctAU4OGCWy3uji68uM=
Subject key identifier: 96:65:A1:B0:AE:31:B1:13:47:F5:58:A9:C6:82:C3:A6:3B:E2:4F:ED
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 01846FB4AFF7FA0F96D479A39D2D68DFA95D
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/lmWhsK4xsRNH9VipxoLDpjviT-0.roa
Signing time: Sun 13 Nov 2022 06:37:03 +0000
ROA not before: Sun 13 Nov 2022 06:37:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35410
IP address blocks: 217.151.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6f:b4:af:f7:fa:0f:96:d4:79:a3:9d:2d:68:df:a9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Nov 13 06:37:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9665a1b0ae31b11347f558a9c682c3a63be24fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:79:68:9c:69:08:dc:4c:1a:35:dc:58:bf:
7c:1f:ed:04:fe:88:34:46:75:83:5e:f2:43:65:cb:
b9:34:02:c6:ad:37:dd:44:3e:e6:c2:ae:72:b4:37:
e6:3e:31:71:fc:7a:2e:1e:e5:46:78:f8:0e:6b:a0:
ee:c9:f0:39:5b:c5:c0:c5:5e:33:68:d9:e3:d1:ba:
1e:bf:fb:f8:3a:e4:a0:68:28:6c:74:b5:ed:4e:27:
51:4e:3c:6e:bb:03:bf:b1:2a:70:1e:13:82:6d:22:
67:5a:61:db:f5:7d:b5:18:33:9d:7b:d3:8a:02:2e:
f8:67:69:f0:42:69:c0:d7:c0:6d:a5:14:66:f5:25:
20:f6:93:09:c8:64:f2:31:bf:3d:eb:c6:a4:a2:bd:
20:50:68:fc:66:24:7c:34:b6:cd:fb:2e:d6:3b:ac:
79:7c:01:b6:97:e6:9f:88:1f:d0:b8:17:1f:a1:06:
ab:be:72:a4:ab:d6:6c:cf:69:e2:46:69:0f:f2:77:
95:75:55:33:1e:0d:9a:6e:32:75:71:1e:8b:c7:71:
54:34:01:ef:c3:61:47:f4:5d:f8:d5:8d:44:14:88:
2f:65:6a:04:77:e7:5a:6a:47:04:a3:48:eb:05:cb:
60:9e:ed:9c:de:fa:b1:ec:9d:dd:61:a0:f7:b5:f3:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:65:A1:B0:AE:31:B1:13:47:F5:58:A9:C6:82:C3:A6:3B:E2:4F:ED
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/lmWhsK4xsRNH9VipxoLDpjviT-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.151.228.0/24
Signature Algorithm: sha256WithRSAEncryption
18:27:e3:7f:39:6d:84:94:95:c3:9c:63:7f:0a:80:4e:35:72:
b4:ea:9d:f7:c6:bf:0f:51:41:f5:de:e3:9c:bd:69:ee:46:9a:
d2:4d:f7:b3:0d:dc:28:24:3f:1d:56:86:ab:91:f9:3f:8e:47:
de:54:59:bf:56:50:8f:97:13:c7:28:51:4d:5e:78:7d:20:84:
8c:d3:95:04:4c:89:2c:df:0d:e6:f5:fa:e0:59:15:5a:14:8b:
03:82:90:f7:6a:46:94:fa:82:7a:35:c5:7e:73:d2:02:53:42:
82:32:3a:0d:b1:a4:f6:7a:db:44:db:fb:f4:58:44:e9:21:a4:
51:22:1e:18:24:8f:ab:98:2a:0c:e2:dc:26:3d:90:b6:06:91:
1a:99:27:23:15:f9:a0:56:af:47:af:5c:b7:49:8a:03:ff:af:
aa:c4:c9:0e:e1:c4:f6:02:68:89:2a:45:10:52:6f:6a:14:ba:
a5:73:ee:b4:c3:52:1f:bf:2d:25:df:0f:62:cc:bd:ec:78:88:
11:f9:d5:9d:65:d2:71:73:c0:0a:52:1f:ec:fc:99:88:9c:28:
07:84:ad:b6:e3:14:f6:da:6f:ea:9c:ec:aa:50:da:5f:c2:38:
5f:a8:ab:b0:15:40:b2:d8:5c:8d:6b:57:04:30:eb:37:46:d6:
87:5b:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org