Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/lG53HTzD93lyCuIUi_dHXDJT00I.roa
File: lG53HTzD93lyCuIUi_dHXDJT00I.roa (raw, json)
Hash identifier: kLymwvn0Q5P+YGGfqkVdmjVXLdWwjPuNWDbrkXpmYkU=
Subject key identifier: 94:6E:77:1D:3C:C3:F7:79:72:0A:E2:14:8B:F7:47:5C:32:53:D3:42
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 050E03D9
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/lG53HTzD93lyCuIUi_dHXDJT00I.roa
Signing time: Wed 27 Apr 2022 09:26:51 +0000
ROA not before: Wed 27 Apr 2022 09:26:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.169.48.0/24 maxlen: 24
45.153.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84804569 (0x50e03d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Apr 27 09:26:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=946e771d3cc3f779720ae2148bf7475c3253d342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:72:6a:f1:cf:5e:47:12:02:14:81:9c:03:
a6:8e:16:ff:f8:fc:10:cd:19:96:b2:9a:90:41:c8:
ac:dd:a0:a7:7e:8a:96:23:5b:58:38:a1:07:d0:93:
8a:37:a9:67:cb:cb:2c:17:a4:be:37:8b:a8:c7:52:
ba:8c:fe:7b:db:00:06:0d:94:65:ff:5b:46:e0:a5:
62:b2:d9:61:d6:76:76:ca:a6:93:81:2d:12:7e:71:
37:37:8a:26:62:91:2e:5e:ec:cc:33:b2:fc:48:e1:
3f:65:d0:b3:b9:2d:c3:b6:a2:ff:a3:36:6a:ba:67:
ca:b1:93:86:08:d7:03:f0:2f:84:68:87:2f:5f:b6:
63:f8:48:76:d1:d5:e1:6a:a2:cb:0f:a4:02:e7:a1:
af:d6:1a:95:10:ab:8a:81:da:69:82:85:03:33:b1:
66:f4:8a:86:59:32:af:43:ed:90:5b:30:14:6a:80:
36:5c:e6:4d:a2:0d:83:f4:44:4a:32:c2:0d:d0:cf:
f7:6c:c6:34:b0:9c:83:96:4c:a1:0f:b7:55:d9:8e:
ff:90:0d:7c:11:00:62:30:a8:ac:10:b2:c5:5a:97:
39:dc:db:ed:4f:77:89:10:3a:cf:1c:aa:46:f2:35:
db:dd:f7:12:22:57:6d:00:13:a5:30:3e:0f:5a:22:
01:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6E:77:1D:3C:C3:F7:79:72:0A:E2:14:8B:F7:47:5C:32:53:D3:42
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/lG53HTzD93lyCuIUi_dHXDJT00I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.91.0/24
194.169.48.0/24
Signature Algorithm: sha256WithRSAEncryption
77:16:bd:e6:10:28:9c:f9:9f:4c:ad:de:15:1a:95:99:ed:41:
c8:f0:98:8c:83:f0:42:ab:ce:ba:56:a5:e7:91:6e:5f:c0:69:
43:23:55:e7:fc:96:17:25:6e:95:b6:34:0a:54:d1:49:73:87:
24:5d:d5:83:2b:3f:0a:4e:9b:75:07:f6:c9:8f:14:6e:3e:df:
08:8a:ff:2a:7e:e1:4e:bb:7b:a0:c1:e8:ad:51:96:df:06:25:
4a:75:d9:b0:00:ee:0b:41:b2:97:6c:2f:7d:e7:51:70:99:7a:
fb:12:24:7d:57:04:f6:f5:8f:73:8c:ef:e5:41:8a:21:e8:d4:
c4:78:33:94:8c:df:2f:5f:5c:65:b3:20:d8:1f:36:5d:58:1d:
5b:07:c2:60:ec:ec:90:48:ca:af:95:bc:17:72:f0:7d:a7:7f:
41:32:e4:b7:a0:fd:2e:1e:1f:10:1c:21:9f:98:6b:c5:9a:67:
7b:dc:46:72:37:e8:13:af:e0:6d:4b:53:6b:72:c6:50:73:fc:
54:bb:78:f9:90:93:6e:e2:ba:1f:16:a7:25:04:9e:89:6c:68:
17:47:75:fd:d1:6d:ea:f2:47:a2:cb:f1:25:3d:c0:18:4d:b2:
cf:dd:fe:48:62:60:8e:19:18:cf:21:9f:f1:a3:e4:40:aa:10:
61:41:7e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:00 2023 by rpki-client on console-ams.rpki-client.org