Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/0lX9_WDKHIrObhcVxv1LESeiNg4.roa
File: 0lX9_WDKHIrObhcVxv1LESeiNg4.roa (raw, json)
Hash identifier: 50YMntcLv+X0x4a90DcdOaNYZAbXb0wHlN0X2i09r1s=
Subject key identifier: D2:55:FD:FD:60:CA:1C:8A:CE:6E:17:15:C6:FD:4B:11:27:A2:36:0E
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01831C6B642FFF992D4F4E79CC4A935C99BA
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/0lX9_WDKHIrObhcVxv1LESeiNg4.roa
Signing time: Thu 08 Sep 2022 09:25:43 +0000
ROA not before: Thu 08 Sep 2022 09:25:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 86.62.30.0/24 maxlen: 24
45.80.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:6b:64:2f:ff:99:2d:4f:4e:79:cc:4a:93:5c:99:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Sep 8 09:25:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d255fdfd60ca1c8ace6e1715c6fd4b1127a2360e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8c:60:0c:a7:e6:13:90:1e:9d:90:54:9b:d8:
3d:9d:bc:23:b9:79:a4:8b:89:65:fe:f8:02:d6:f1:
73:76:9f:6e:a6:4f:ac:a9:ff:75:ad:2a:ad:ae:9e:
65:90:aa:cc:86:74:e4:f3:6d:ef:d7:e6:4c:ce:a0:
65:98:d7:94:89:ec:ef:8b:d6:a5:13:25:8f:2a:d5:
47:4d:db:7f:e5:5f:95:ce:9d:d3:48:b3:1e:7e:2c:
69:ca:97:9a:bb:80:1e:16:0e:50:e8:74:b2:fc:d2:
3d:da:33:31:f1:d3:12:50:f4:28:8b:1c:b3:64:52:
fc:2c:85:5e:6b:78:54:a9:d3:f0:f0:ca:d4:17:f5:
d0:35:9d:fb:21:10:65:b1:8e:39:46:3b:30:03:dc:
65:82:03:26:da:a2:2e:fa:59:8e:c6:3f:84:f1:c3:
49:0c:51:d1:56:47:dc:0f:6b:e7:3a:6d:36:c7:2b:
83:fd:3a:ce:af:3d:a0:7e:31:ae:30:e3:27:22:83:
22:51:35:26:12:4e:74:92:c5:3b:97:95:d9:23:87:
e1:27:c4:39:15:e9:3b:c3:ca:fb:e9:bb:2a:5c:b5:
f4:b3:d7:e1:12:9e:d9:88:c3:eb:64:78:4a:da:9c:
f4:ab:d8:19:bb:1a:8e:17:9d:dc:c5:26:2d:92:b2:
f9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:55:FD:FD:60:CA:1C:8A:CE:6E:17:15:C6:FD:4B:11:27:A2:36:0E
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/0lX9_WDKHIrObhcVxv1LESeiNg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.29.0/24
86.62.30.0/24
Signature Algorithm: sha256WithRSAEncryption
22:5e:73:60:d7:c5:20:ec:57:ed:3c:a2:bd:ea:e4:f3:f8:c6:
72:a9:ba:d5:d7:2c:b3:11:24:e4:9e:84:c3:ea:cb:69:3c:bc:
2f:4c:5d:59:61:2a:0d:97:8c:a2:fe:4a:81:fe:09:94:c8:e6:
23:47:29:2a:84:36:ed:46:04:ad:04:0e:e3:44:32:7c:6e:d6:
71:cb:99:4d:5a:ce:0c:bc:3d:87:3b:21:b7:7a:59:96:51:f4:
0f:7b:ee:f6:49:5a:7e:d5:e2:51:53:fb:8d:d4:b5:db:40:69:
f0:ca:a3:c1:13:23:51:16:73:ea:12:7e:80:86:6e:e3:af:60:
28:c5:35:f3:c2:63:a1:fd:8f:d5:8c:dc:4b:01:25:01:2e:9f:
23:7a:0a:49:95:df:65:c5:b8:1a:05:37:d0:44:01:87:01:62:
04:f5:b3:35:b4:2e:d2:bb:55:7b:18:48:d3:d2:e6:5f:96:0b:
c4:c8:1a:6c:ee:6c:36:f4:4c:e0:51:1e:7c:6b:34:87:a6:dc:
eb:38:d1:66:24:e9:4d:74:38:31:bf:40:44:39:81:52:40:db:
98:46:53:9f:b9:31:8d:f9:b2:60:a0:21:b5:38:29:f9:91:15:
d4:56:d4:30:03:21:ca:28:4c:ea:14:99:ff:69:3a:74:a8:f4:
62:60:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org