Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/LeUiJWOAE2FmlC7DFVz4zajn7Es.roa
File: LeUiJWOAE2FmlC7DFVz4zajn7Es.roa (raw, json)
Hash identifier: 3EvtjqkdX3DPucihGxQ8cPPKBOXA9EEQhB6XseVl6T0=
Subject key identifier: 2D:E5:22:25:63:80:13:61:66:94:2E:C3:15:5C:F8:CD:A8:E7:EC:4B
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 0690BCCB
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/LeUiJWOAE2FmlC7DFVz4zajn7Es.roa
Signing time: Sat 01 Jan 2022 14:59:06 +0000
ROA not before: Sat 01 Jan 2022 14:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.159.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110148811 (0x690bccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Jan 1 14:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2de522256380136166942ec3155cf8cda8e7ec4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:f8:85:34:cf:21:94:04:47:0a:ff:cb:06:
be:89:ed:7e:b8:95:ea:d5:99:1d:ad:2a:7e:44:85:
7c:1f:e3:f0:be:f5:09:ed:55:07:1d:b3:e2:fc:82:
c6:4a:0c:23:1d:37:63:c6:2b:48:9e:ba:21:93:2f:
3b:9c:66:bb:60:d5:76:dc:d9:7c:cf:bd:81:9b:e8:
16:b3:3b:3f:38:b5:a3:98:9f:a4:fa:22:99:08:1f:
47:5b:6d:d6:d4:02:5a:4f:f2:73:ae:07:83:f8:c9:
2b:2c:3b:05:a0:dc:e1:98:7f:f5:c5:aa:fb:9d:8d:
03:c2:ce:ac:86:2c:61:95:de:32:a5:b1:dd:6c:4c:
11:20:6f:09:bf:fb:4f:61:45:42:55:ca:3d:b0:9c:
2a:3e:5c:5c:17:e9:66:27:77:54:96:c9:9f:b9:95:
66:88:81:f1:ff:91:2b:3a:c4:d2:9d:b9:8c:57:80:
a6:b6:45:0e:1a:a2:7a:6f:ec:41:29:18:cf:94:db:
62:3f:6f:89:ce:1b:b0:47:89:dc:00:fb:14:ca:be:
9e:43:52:47:ce:1d:c3:a1:3f:19:27:ba:8a:c5:6c:
7f:19:89:ff:0e:f6:4e:a4:67:af:a7:2e:6c:66:00:
eb:8f:14:8a:19:fb:39:06:8d:39:15:4f:df:d3:96:
da:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E5:22:25:63:80:13:61:66:94:2E:C3:15:5C:F8:CD:A8:E7:EC:4B
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/LeUiJWOAE2FmlC7DFVz4zajn7Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.120.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:1a:38:c4:d3:b7:e3:b3:7e:85:88:38:89:60:b7:02:c9:4f:
0c:9e:46:4a:94:fd:90:ee:d6:25:d0:30:75:bc:e5:4b:44:9e:
9d:38:ea:2c:d4:1d:23:fd:65:c2:e4:33:f2:59:fb:f8:08:9f:
02:c7:a5:79:5b:a0:28:e6:8f:e7:98:b8:e2:11:e8:4a:9d:69:
a0:48:5e:fa:5f:41:65:00:6b:2a:e7:d2:c1:22:4f:e5:ea:5e:
e6:f7:4b:d8:18:4b:3a:d5:80:bd:4c:b3:40:d4:a9:ea:c5:73:
89:f0:35:f0:fb:8c:14:09:e4:0a:cb:c1:c1:a1:b5:84:4c:1e:
82:7e:20:84:cb:06:4e:dd:42:1e:c6:b8:1b:76:ff:12:ea:95:
35:9d:72:dd:41:fd:ba:d8:92:3f:dc:df:5a:2c:b5:77:a9:21:
92:8d:2c:c3:1d:3c:9e:62:30:76:56:2b:ff:6a:35:94:4c:be:
af:db:ce:9a:e4:8f:f9:3e:44:6b:48:d0:fa:fb:9f:55:37:1f:
b9:08:3c:ed:0e:d6:bc:d9:0b:4f:25:43:f1:cc:ca:3e:41:2d:
a4:33:26:89:7d:ec:b6:32:bc:d2:c3:59:1b:d2:97:89:d6:bd:
3c:17:56:b4:61:03:eb:28:cc:e8:ce:f9:09:87:10:34:c0:10:
d8:47:05:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:26 2023 by rpki-client on console-fra.rpki-client.org