Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/lh6Z3bDoLKjkVfrTd-JDmVYYzxc.roa
File: lh6Z3bDoLKjkVfrTd-JDmVYYzxc.roa (raw, json)
Hash identifier: WzDAS3eFc30F7e5Wu0BCZaZsjrwUN4orVxClFst4oWo=
Subject key identifier: 96:1E:99:DD:B0:E8:2C:A8:E4:55:FA:D3:77:E2:43:99:56:18:CF:17
Certificate issuer: /CN=dd82de4f1304339fde527ba06033ca9e511171bd
Certificate serial: 058F4DE2
Authority key identifier: DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/lh6Z3bDoLKjkVfrTd-JDmVYYzxc.roa
Signing time: Sat 01 Jan 2022 15:00:31 +0000
ROA not before: Sat 01 Jan 2022 15:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211903
IP address blocks: 45.94.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93277666 (0x58f4de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd82de4f1304339fde527ba06033ca9e511171bd
Validity
Not Before: Jan 1 15:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=961e99ddb0e82ca8e455fad377e243995618cf17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:8e:f5:0b:0c:c3:9c:19:48:a9:93:74:8c:
a0:e7:2f:fe:5c:eb:79:b7:36:94:75:9f:bd:33:bf:
32:d2:fc:6b:16:a1:63:a7:3d:2e:0b:74:f3:6f:8d:
73:e5:aa:1d:86:e7:ff:72:5d:db:77:0c:4d:4f:cf:
9a:6f:93:a2:f5:b0:0d:12:60:2e:d7:41:ce:c9:35:
35:ac:8a:2e:31:85:5f:84:69:b9:22:61:55:6e:7c:
19:3f:c6:49:1e:92:64:da:15:a4:ae:f5:d0:84:49:
1e:87:1a:a3:63:3d:78:d7:37:7b:7e:33:21:08:f6:
69:f8:6b:60:b1:f7:72:86:28:c2:7c:68:f7:42:ab:
55:67:7c:9f:b8:e4:a0:23:f8:fd:9d:f3:75:fc:6a:
8d:c4:aa:f2:cc:75:45:72:41:7d:8a:87:15:b5:28:
82:bf:d6:6c:79:e8:4e:ea:b7:03:54:f4:fa:f2:97:
3d:33:e9:f6:22:c6:d7:09:97:70:0b:25:75:20:f7:
08:a9:7d:98:d3:77:66:55:75:46:3c:4b:89:f1:78:
9e:f2:81:82:e3:47:dc:98:3f:04:7e:78:23:b6:6d:
45:25:cd:d1:4d:78:da:36:dd:42:9b:4a:89:4a:0e:
7b:03:fd:f5:c5:b1:f6:60:88:99:df:7e:66:a2:30:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1E:99:DD:B0:E8:2C:A8:E4:55:FA:D3:77:E2:43:99:56:18:CF:17
X509v3 Authority Key Identifier:
keyid:DD:82:DE:4F:13:04:33:9F:DE:52:7B:A0:60:33:CA:9E:51:11:71:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YLeTxMEM5_eUnugYDPKnlERcb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/lh6Z3bDoLKjkVfrTd-JDmVYYzxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f8bb1b-d6fd-49a1-9653-ff157bef0621/1/3YLeTxMEM5_eUnugYDPKnlERcb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.253.0/24
Signature Algorithm: sha256WithRSAEncryption
75:7e:03:d2:56:6f:cd:3c:58:c0:bb:40:74:b4:30:a9:f6:ec:
f9:bd:a5:ff:eb:3b:74:16:36:8a:02:8e:dd:ca:9b:81:95:43:
27:c0:f9:f5:27:d8:d9:96:a4:62:9c:09:65:fc:48:e8:a1:c2:
63:50:83:89:63:cc:5a:9c:f1:6b:98:f9:06:fb:dc:54:64:62:
74:8b:b3:5a:9b:21:1c:1f:75:b8:72:fd:be:ad:b0:65:71:51:
e6:6b:8d:6e:52:38:0a:39:b1:0f:73:6d:ac:0f:67:39:9c:38:
a9:48:78:c4:f7:b4:13:15:5a:e9:1e:5a:65:5c:b2:8d:de:a7:
2d:57:54:28:0d:ba:6c:2f:19:30:c2:49:12:66:6b:5f:17:42:
8d:95:b8:f9:10:20:7e:f5:93:41:65:9c:e0:f5:b6:ee:ed:14:
5e:d3:f9:5d:69:82:d8:5c:f6:f9:66:5d:eb:b5:55:4d:82:60:
25:90:ac:ed:ab:ca:3c:a1:6b:d7:d6:50:b2:d8:e9:ad:0f:e8:
7b:aa:d6:85:67:e1:d0:66:2a:b5:ce:f8:96:5c:f3:d7:24:83:
31:57:0a:66:3e:5e:b7:94:ad:5f:8f:72:05:84:6b:1d:08:e1:
f5:68:a3:c9:60:be:9a:b4:44:57:4e:6f:15:19:93:89:fc:72:
da:fe:19:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:27 2023 by rpki-client on console-fra.rpki-client.org