Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/LqTCQCtNCK1SkRDSzTuPGSkrxuA.roa
File: LqTCQCtNCK1SkRDSzTuPGSkrxuA.roa (raw, json)
Hash identifier: hAPBneZq+PxCOoM0glTtQbK43CS9l1lax+xkmdYvmX8=
Subject key identifier: 2E:A4:C2:40:2B:4D:08:AD:52:91:10:D2:CD:3B:8F:19:29:2B:C6:E0
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 032F93D7
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/LqTCQCtNCK1SkRDSzTuPGSkrxuA.roa
Signing time: Thu 17 Mar 2022 14:07:41 +0000
ROA not before: Thu 17 Mar 2022 14:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 45.8.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53449687 (0x32f93d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Mar 17 14:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ea4c2402b4d08ad529110d2cd3b8f19292bc6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:99:a3:58:9e:b5:0f:8b:b5:65:41:fd:81:
94:6a:d2:c4:dc:f7:6a:df:ad:8b:f2:27:c6:cf:a9:
85:7b:c4:f8:65:56:40:b3:7d:da:88:0e:4e:c0:4a:
20:19:d0:aa:60:c4:40:2c:d9:b2:fc:e6:59:3e:78:
75:d2:26:8c:20:f7:db:98:1f:43:eb:ad:f7:85:c7:
6f:00:d1:8e:f6:9d:20:68:b8:1b:52:d1:d4:bc:32:
3d:83:17:f2:7f:4b:3e:43:fd:77:ee:53:e4:a2:6e:
9c:0f:43:08:ac:4a:cd:7f:9d:c9:a7:6a:3b:48:40:
63:1b:5e:9c:31:28:00:7a:bd:d6:8a:14:5b:a4:aa:
70:0c:fd:5c:77:0e:4a:e6:c1:5c:11:c0:b7:b4:eb:
2c:3c:05:34:dc:75:17:c4:6c:d6:c3:fc:9a:85:07:
e2:3e:f1:95:ba:d7:b6:6a:0c:fe:7b:cc:c3:a3:5b:
3d:1d:cb:80:49:7e:d9:e8:4a:cd:18:cc:06:95:ac:
0e:1d:57:44:63:1c:ea:f8:1e:1a:84:4c:9b:52:30:
42:91:bc:17:30:f5:be:e0:7c:a3:73:34:e7:0d:43:
a4:38:0a:27:7d:8e:43:57:7c:fb:f3:e5:a0:8d:e5:
9b:52:06:bd:e7:58:26:e4:af:01:28:49:0a:54:99:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A4:C2:40:2B:4D:08:AD:52:91:10:D2:CD:3B:8F:19:29:2B:C6:E0
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/LqTCQCtNCK1SkRDSzTuPGSkrxuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:78:3e:56:95:64:f6:c5:a4:ab:6a:a0:14:3c:f4:fc:4d:92:
8e:33:d2:2e:8d:da:93:36:bc:6e:4d:a0:ac:8d:f5:e2:78:3e:
ed:78:3c:5a:ac:e3:c1:86:ca:d5:90:e5:ea:da:c8:7f:b5:c6:
77:91:8c:34:22:08:78:1c:93:19:c5:61:3c:71:d9:41:2f:5f:
53:24:5f:ea:f2:dc:28:bc:83:92:5e:51:82:7e:8d:ca:ce:10:
a3:54:0e:24:34:53:e8:50:7f:50:83:5c:93:2d:a0:b4:21:e8:
ca:62:3f:27:a1:e4:c4:3d:b1:6e:45:be:25:96:01:16:4b:14:
ff:a6:41:cc:b3:6b:43:bf:1d:6c:a9:d0:6b:b9:a2:0e:08:6d:
e8:14:96:ce:78:82:ef:75:56:b5:c9:f4:b5:72:10:68:88:35:
f4:73:63:65:45:51:23:63:43:c6:29:f5:1e:72:3c:99:47:b8:
2d:a4:93:fe:63:51:4d:4e:73:ab:03:67:2b:c7:57:fc:58:55:
13:14:2e:f1:ee:a4:bf:aa:a0:60:af:73:7a:49:80:51:c7:7f:
93:fe:98:04:33:2d:d3:6a:50:4a:f1:f8:93:aa:ff:96:50:57:
3c:83:7d:29:fd:de:8e:b9:fe:05:be:57:ec:75:e2:a1:fb:2c:
46:c9:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:37 2024 by rpki-client on console-ams.rpki-client.org