Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/__Ll9LJHxs9Nt0Py7I-XAZfudNM.roa
File: __Ll9LJHxs9Nt0Py7I-XAZfudNM.roa (raw, json)
Hash identifier: oyNq71GozbDkFhtf5FnVVRpAzIZfb8NfgJJ6okf4q7Q=
Subject key identifier: FF:F2:E5:F4:B2:47:C6:CF:4D:B7:43:F2:EC:8F:97:01:97:EE:74:D3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 01856E0AE548AF956CF008DB6ABF735ED3A7
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/__Ll9LJHxs9Nt0Py7I-XAZfudNM.roa
Signing time: Sun 01 Jan 2023 15:54:45 +0000
ROA not before: Sun 01 Jan 2023 15:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34624
IP address blocks: 185.71.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:e5:48:af:95:6c:f0:08:db:6a:bf:73:5e:d3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Jan 1 15:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fff2e5f4b247c6cf4db743f2ec8f970197ee74d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:eb:80:60:f8:fb:fd:4a:5a:3b:66:2d:ea:
4e:2c:26:7e:7d:69:c4:a6:a1:fb:ee:08:9b:02:22:
aa:c3:d3:1a:24:6d:56:f8:9b:06:90:e4:8f:51:f5:
88:19:e2:73:e4:63:41:fe:ea:f1:12:59:42:54:ed:
cb:65:7f:35:39:eb:34:85:67:51:e8:01:65:93:9e:
3b:c7:09:e2:82:4f:bd:1d:15:5a:ce:0c:89:6c:e9:
c1:36:02:e1:1f:65:f3:b4:86:f0:3b:17:b5:6c:9d:
22:7f:8f:ed:b6:70:e8:70:9f:1c:fa:f2:d1:5f:56:
43:d3:8c:10:c1:fc:1c:43:2d:e3:33:2a:e0:14:e4:
43:4b:c5:3f:97:bd:e6:6b:21:9f:36:fb:38:d5:88:
5b:95:57:d9:49:5e:96:1a:bd:aa:34:b0:7e:ed:a3:
ee:b1:08:f2:13:1f:66:5b:44:65:af:76:3d:f5:a8:
ed:18:3b:bb:ff:33:2a:ed:5e:48:09:26:d0:df:d9:
e7:09:c8:e0:40:cd:38:b6:dc:6c:fc:df:2b:c1:97:
89:87:4f:b0:75:06:fb:c3:3d:40:c5:f4:71:9a:8d:
94:e4:29:7b:e6:28:79:1c:81:3d:d0:58:31:85:27:
f8:47:be:97:8b:2d:c9:e1:de:59:85:c5:39:9f:0e:
df:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F2:E5:F4:B2:47:C6:CF:4D:B7:43:F2:EC:8F:97:01:97:EE:74:D3
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/__Ll9LJHxs9Nt0Py7I-XAZfudNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.124.0/22
Signature Algorithm: sha256WithRSAEncryption
89:5e:e4:2b:65:03:2f:4e:e8:87:6b:49:fc:7f:3c:93:82:4d:
7e:e4:57:8c:f3:8e:fd:ce:36:01:fe:c1:ef:bf:60:5d:88:26:
8f:09:65:ab:9d:f7:0c:f0:c3:81:3a:b3:d2:ff:d7:f5:76:55:
b0:5b:f4:5b:b6:48:c0:f1:f1:9c:cc:5d:b7:c7:77:4a:43:a6:
0e:fb:31:bc:fd:64:0b:fc:b6:88:29:3d:fd:4f:0a:19:52:14:
a2:3d:27:ab:46:af:ef:7c:f9:cc:ca:1c:5e:9e:b9:c1:2b:f8:
3f:7b:1d:49:e0:7e:ea:74:7a:ed:c9:ec:06:b5:72:b2:6e:a3:
31:40:c0:7f:fd:b3:2f:54:05:f7:9a:ab:e3:3a:5d:86:d3:98:
01:e1:9b:cd:58:25:c0:26:d3:f2:72:e3:e0:2e:eb:ec:2e:18:
78:13:59:ed:e3:a1:9a:92:cc:f2:c4:bb:61:0f:51:f6:d5:48:
b1:27:ed:00:ea:c3:a3:ca:19:a5:c4:f9:d9:01:4d:9b:cd:16:
ec:84:48:d1:32:d3:7e:65:43:c0:d0:ea:fd:f6:2b:45:b4:71:
bd:76:f1:c9:3d:7c:05:71:86:f1:bd:5c:13:4f:66:00:53:82:
b7:39:d6:e4:96:c7:b6:fc:ab:46:3f:87:02:61:e4:c6:95:01:
21:a4:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:27 2025 by rpki-client