Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/l77-vL9tjjosL0x0E9aSl-e6b1E.roa
File: l77-vL9tjjosL0x0E9aSl-e6b1E.roa (raw, json)
Hash identifier: RF2cp17BM5uFiIW7RxsAZJcJ3hG5Bjlc9sa4EtSmHDQ=
Subject key identifier: 97:BE:FE:BC:BF:6D:8E:3A:2C:2F:4C:74:13:D6:92:97:E7:BA:6F:51
Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial: 35BD49FF
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/l77-vL9tjjosL0x0E9aSl-e6b1E.roa
Signing time: Sat 01 Jan 2022 08:53:05 +0000
ROA not before: Sat 01 Jan 2022 08:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60465
IP address blocks: 185.30.104.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901597695 (0x35bd49ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Validity
Not Before: Jan 1 08:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97befebcbf6d8e3a2c2f4c7413d69297e7ba6f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:d5:e1:50:45:67:68:c5:dd:d7:d8:4b:f3:
9b:04:97:cb:ef:be:f2:36:4f:08:90:01:c0:de:36:
10:78:33:34:04:54:e7:8b:3e:0b:45:a4:69:f0:90:
15:1a:57:8b:0b:76:73:f5:f8:3b:28:70:c7:85:38:
cb:f1:6e:dc:9a:5f:86:dc:31:3d:d1:fc:5a:8f:ba:
a1:bd:1e:99:42:69:99:9d:bc:1b:ad:54:b9:7f:dc:
b0:72:4e:28:f5:43:b3:e5:0b:f2:b2:1f:95:a6:0a:
d8:dc:d6:3d:ce:4e:3d:e7:29:26:99:32:6c:58:a1:
7b:e0:1c:aa:4d:dc:5a:3b:23:72:97:de:0d:ca:43:
a0:3a:a8:8f:c1:ba:36:25:94:b3:30:b7:f1:11:18:
2b:a1:f2:d9:10:ca:e6:7b:67:c7:c9:e3:ca:e3:6a:
00:d8:34:37:58:cd:a9:f1:95:48:ee:84:93:d6:fe:
a6:9b:d0:38:90:01:a3:af:14:3a:20:51:97:54:ee:
a4:36:53:2a:c1:1e:c8:4c:ec:7a:b6:00:c5:c8:ec:
21:54:c0:46:c6:f9:81:a1:38:94:97:3a:08:e5:45:
6f:98:21:5b:45:f2:49:fe:90:0e:f8:2b:7e:5e:a0:
d1:d1:75:11:f8:ce:f1:20:ac:79:be:44:57:2d:11:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:FE:BC:BF:6D:8E:3A:2C:2F:4C:74:13:D6:92:97:E7:BA:6F:51
X509v3 Authority Key Identifier:
keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/l77-vL9tjjosL0x0E9aSl-e6b1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.104.0/23
Signature Algorithm: sha256WithRSAEncryption
20:34:37:64:bf:26:42:55:2f:4c:0b:d3:1a:06:4e:87:eb:f1:
39:b8:5b:1f:b9:4e:cd:58:0d:f6:35:29:0c:42:10:17:37:f4:
26:84:ea:b9:9d:f9:3b:0e:e5:57:97:d0:59:03:f9:72:d1:c4:
2c:ce:ee:c6:0b:50:40:6c:c1:76:31:b5:71:71:00:14:b0:1a:
0c:64:e6:66:dc:f5:56:2b:94:1e:c1:7e:1e:2a:df:45:0e:4b:
a5:77:14:a1:31:87:54:3a:d2:d1:d2:d8:d9:2a:44:f9:18:67:
d6:29:20:dc:1a:1f:26:87:a8:bc:51:a2:26:f9:0d:d3:87:67:
9c:83:35:dd:45:c4:32:e9:3b:6f:54:d9:4a:74:ae:b8:d8:f0:
f6:b3:ef:f1:0c:ad:e3:e2:d8:d5:8c:f3:4c:40:48:a3:c3:a8:
65:bc:6a:1f:9f:07:92:4f:e7:e8:40:cb:e3:a0:80:b6:17:48:
7d:1b:49:21:ef:cd:29:48:5b:a6:91:b5:3f:59:66:79:6a:00:
dc:74:09:14:96:23:8c:5b:1b:5f:be:22:b2:e8:c7:37:4f:32:
df:48:0e:6f:5c:f0:23:89:d4:4a:4b:5e:ee:59:f7:8b:cd:35:
11:90:f8:1b:7a:35:0d:41:55:63:60:45:db:99:04:21:93:44:
e8:b5:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:37 2024 by rpki-client on console-ams.rpki-client.org