Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Lh2fi0IFA0zJIpx5-szEd1gq82U.roa
File: Lh2fi0IFA0zJIpx5-szEd1gq82U.roa (raw, json)
Hash identifier: PCKJEORPhS+v4FSZxM5Z6CnnzZCnUoFSMrIROprt8d8=
Subject key identifier: 2E:1D:9F:8B:42:05:03:4C:C9:22:9C:79:FA:CC:C4:77:58:2A:F3:65
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 381BE065
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Lh2fi0IFA0zJIpx5-szEd1gq82U.roa
Signing time: Wed 09 Mar 2022 14:37:09 +0000
ROA not before: Wed 09 Mar 2022 14:37:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50149
IP address blocks: 62.122.216.0/22 maxlen: 22
89.104.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941351013 (0x381be065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Mar 9 14:37:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e1d9f8b4205034cc9229c79faccc477582af365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:6b:e4:dc:04:81:57:3d:a3:8f:ce:09:72:
4e:8d:77:24:4f:be:fb:27:93:b3:bc:e5:e5:a8:5e:
ac:3c:db:e5:77:72:99:83:89:10:fd:6e:77:6d:63:
86:b7:e8:f0:eb:09:58:02:2f:65:eb:8c:a4:0b:b8:
19:b3:1f:6c:fe:76:02:2a:63:8f:5b:4b:2d:c7:bc:
92:f8:80:c9:14:c6:c4:68:a5:80:10:af:62:54:a2:
8c:45:6e:ff:43:cd:c4:c9:83:ab:b3:9e:26:24:1e:
b8:91:53:5f:59:38:e4:bb:fc:81:bb:a2:8e:3f:dc:
99:9e:32:08:b6:d2:dd:47:9f:66:52:96:58:dc:9a:
cf:fd:ff:e8:7b:fa:66:e1:1d:e8:c4:73:3e:af:0e:
96:d5:b8:5a:1f:9d:19:42:6b:e6:bd:cd:3e:f6:cc:
19:85:90:24:85:4d:ca:34:af:12:20:65:eb:3b:20:
d9:fc:ce:e6:a0:5d:71:b0:1c:93:13:81:0c:de:26:
1f:21:8e:30:50:b0:4b:7d:10:a0:88:d6:d3:17:5e:
8b:09:11:9f:bb:fa:c7:e8:32:d3:3c:e3:f1:2c:3f:
a7:6d:98:98:6a:1b:67:63:58:e4:a4:2b:70:39:d0:
b1:ef:d2:2a:74:dd:c4:f7:ac:d4:bd:69:ed:3d:81:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1D:9F:8B:42:05:03:4C:C9:22:9C:79:FA:CC:C4:77:58:2A:F3:65
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/Lh2fi0IFA0zJIpx5-szEd1gq82U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.216.0/22
89.104.107.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ac:32:58:4a:88:d0:24:07:2b:b4:63:0c:2c:e0:cb:3b:c1:
3c:17:a1:ee:52:aa:2d:73:a5:02:81:b4:ec:72:56:5f:70:9a:
b3:25:35:32:78:d5:f3:97:62:fd:2f:2f:79:5b:6e:5a:e7:94:
21:19:c7:6e:84:d7:ef:eb:b5:4d:50:14:38:7c:0a:02:2e:8f:
6f:cb:e1:9a:10:55:26:f5:da:eb:ef:4c:52:9f:66:c1:a2:69:
e4:ee:59:db:43:09:fe:41:3e:bc:48:bc:8d:a8:c1:4a:8f:38:
31:cf:78:c7:ea:81:71:a8:e6:55:9e:f3:e3:b4:c3:96:35:1e:
35:30:2e:c7:1d:e3:4c:63:10:8b:37:2a:ce:83:3e:a2:b5:8d:
8a:4d:1f:78:e0:93:80:cc:7f:0e:5b:bd:d5:6b:f7:72:d5:1b:
74:44:c3:32:14:a9:1b:d4:bd:da:3f:5f:31:e9:25:90:2c:fe:
fa:b2:f9:b8:a1:ce:00:c8:cf:a4:b7:7c:9e:f4:0e:b3:70:02:
61:b7:32:b8:fc:c7:7f:e4:bf:e3:ee:89:5c:f1:11:d9:79:b2:
b3:2d:f9:aa:d2:ad:94:47:bc:60:e7:09:24:10:5a:89:08:94:
a3:d1:65:1e:a1:9a:f9:40:11:af:62:3a:65:c3:a1:7b:b4:4e:
e0:8a:b3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:18 2024 by rpki-client on console-ams.rpki-client.org