Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/i-lLdcUMvRj41-1JnIJoMlVet8k.roa
File: i-lLdcUMvRj41-1JnIJoMlVet8k.roa (raw, json)
Hash identifier: OM0yWvlulGSxg3UR5WZWMWxguGDap53Xsl2lXcXYCo8=
Subject key identifier: 8B:E9:4B:75:C5:0C:BD:18:F8:D7:ED:49:9C:82:68:32:55:5E:B7:C9
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 03FEC756
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/i-lLdcUMvRj41-1JnIJoMlVet8k.roa
Signing time: Sat 01 Jan 2022 13:54:43 +0000
ROA not before: Sat 01 Jan 2022 13:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39383
IP address blocks: 45.153.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67028822 (0x3fec756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 1 13:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8be94b75c50cbd18f8d7ed499c826832555eb7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:4b:96:6d:78:ed:24:c6:7a:b0:e1:6b:12:
63:e8:8c:36:6c:53:a8:9e:2a:19:5c:b5:35:b3:1b:
87:02:19:c8:2e:50:43:35:e7:b9:d0:26:7b:5c:93:
19:a2:2a:1a:39:75:5f:f8:f1:1f:0c:1c:87:56:56:
77:85:1a:e9:4f:f2:1d:65:ef:16:c6:58:ee:88:c2:
d6:bf:35:7c:79:02:c7:73:ea:df:92:f9:94:1b:8c:
58:de:32:f6:48:f5:b3:6c:78:66:cb:16:7c:e8:c1:
53:2c:e4:fd:84:5f:62:79:88:51:0f:25:ec:9a:b6:
3f:4b:30:60:1c:5b:87:23:fb:a0:f7:ec:a7:bc:04:
09:91:20:71:a0:39:e3:34:e5:23:e6:4e:df:5d:e6:
51:9b:c7:b5:ce:cb:74:a1:50:30:16:14:c4:34:db:
c6:4f:ca:d7:99:f9:01:c3:6a:41:6d:59:00:ca:14:
9b:95:90:fd:57:d4:8c:4d:c7:1f:2d:bf:61:ca:fa:
63:ba:00:1b:c6:e6:09:3f:f3:90:20:16:66:2c:64:
c0:c2:ac:7e:59:ac:42:86:71:94:8d:ba:25:e6:f8:
10:35:7c:0a:34:44:ea:d1:95:41:0e:ab:23:52:0b:
ee:37:ca:51:db:c5:55:35:23:5b:34:4c:25:91:27:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E9:4B:75:C5:0C:BD:18:F8:D7:ED:49:9C:82:68:32:55:5E:B7:C9
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/i-lLdcUMvRj41-1JnIJoMlVet8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.88.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ea:0b:a2:52:12:a0:8b:66:86:d2:df:bd:20:c1:ae:5a:35:
a5:64:4d:1b:d2:26:0c:36:dc:b7:0a:8c:ca:65:84:67:cc:69:
19:66:01:24:7c:02:95:47:40:53:c7:fd:dc:32:83:07:10:c6:
74:2b:80:b1:be:b1:4c:52:9b:c5:23:37:71:e1:09:00:e0:62:
59:9a:d3:7a:01:9e:25:5a:25:fe:a8:82:8c:aa:bf:58:4b:4b:
49:b6:22:73:e9:42:27:fd:4e:5d:a7:30:09:6e:7b:31:a9:a8:
0c:a4:07:6f:68:64:13:10:ee:e2:bf:94:0d:fd:71:3b:a2:3a:
4f:c9:66:fe:15:5c:a9:e1:36:c8:01:69:80:d9:12:63:8f:f7:
25:24:9e:26:99:3f:99:d2:2c:a3:be:02:57:e7:f8:04:5b:e9:
e3:d5:6e:c5:ec:92:55:db:0e:c1:36:2b:a3:87:ab:dc:ad:2f:
1b:42:a5:04:75:21:10:bd:2c:55:68:45:2f:e9:d3:0f:5b:38:
1c:86:a5:0d:6a:ee:74:d1:0a:eb:f1:43:22:7c:d7:80:5c:1d:
0f:66:2e:c6:cd:7c:a9:e4:4b:61:ca:1c:65:76:ff:f3:ae:f4:
f2:1d:eb:03:f5:a7:87:4a:84:1e:c5:c3:36:29:2a:f0:f1:40:
7c:f8:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-ams.rpki-client.org