Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/lIzcVaN-JsRSwGOBlwX8FC4DXcM.roa
File: lIzcVaN-JsRSwGOBlwX8FC4DXcM.roa (raw, json)
Hash identifier: SITNRjHNeRdPIvxS2AfnAAFcx5wPU2wZW8R+MsaBicI=
Subject key identifier: 94:8C:DC:55:A3:7E:26:C4:52:C0:63:81:97:05:FC:14:2E:03:5D:C3
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 0182114E248D0489A96B6E876311DDDD0282
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/lIzcVaN-JsRSwGOBlwX8FC4DXcM.roa
Signing time: Mon 18 Jul 2022 12:35:09 +0000
ROA not before: Mon 18 Jul 2022 12:35:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 45.150.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:4e:24:8d:04:89:a9:6b:6e:87:63:11:dd:dd:02:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Jul 18 12:35:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=948cdc55a37e26c452c063819705fc142e035dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ad:64:d7:93:fb:b7:40:27:01:85:b5:eb:43:
63:04:d3:01:1f:81:f4:a9:f0:91:e3:48:0e:b1:c9:
b9:8d:49:13:16:73:ef:ab:70:2a:d9:b8:98:2d:39:
97:3c:8e:71:0e:d8:47:b1:c2:e1:98:b1:6e:6b:08:
57:f5:2a:74:51:d1:46:bb:2e:d2:47:22:81:ad:63:
d8:bb:e6:c7:3c:be:05:e2:3b:93:95:18:bd:16:9e:
1d:76:f2:47:d4:db:d5:b7:ae:70:d4:d3:56:f0:0f:
ca:f3:e1:d6:9d:05:1f:3a:38:6d:b7:92:84:db:e3:
61:79:9b:a2:f2:3f:c5:da:44:1f:cc:b6:5e:cd:4e:
b9:02:98:49:97:31:d1:45:9e:93:f0:d6:90:54:fd:
ed:b8:f7:61:a3:b0:a2:e5:10:93:a1:ab:5c:5d:cd:
1a:1f:57:c1:0a:b0:cb:0f:bf:fd:b6:c6:96:71:48:
86:ce:16:36:42:83:9f:ee:2a:d2:36:b9:6d:6a:d3:
03:58:c7:c8:0c:4b:1b:8f:a3:d9:41:11:d5:c0:5f:
f6:ed:84:33:22:eb:95:75:30:8d:f7:d3:68:c1:74:
31:ba:50:26:6e:f5:03:60:6f:f1:9e:dc:01:f0:94:
60:12:81:62:15:73:04:0f:47:fa:a8:0d:7d:9b:98:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:DC:55:A3:7E:26:C4:52:C0:63:81:97:05:FC:14:2E:03:5D:C3
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/lIzcVaN-JsRSwGOBlwX8FC4DXcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.5.0/24
Signature Algorithm: sha256WithRSAEncryption
19:12:5c:63:98:9f:2d:38:f1:c6:ec:e1:a2:91:4f:36:fa:7d:
c9:0d:d2:df:27:ed:a1:d5:0c:95:a4:92:55:f1:4c:f5:00:80:
08:bd:a5:29:02:d0:c0:6c:57:a7:04:87:a3:95:d1:32:b2:74:
11:a8:83:77:b2:2c:82:6e:51:5a:9f:f8:dc:a9:82:eb:20:52:
0c:21:a6:7d:45:54:2b:49:3a:ab:6e:98:15:c2:2f:fe:b4:bc:
89:42:77:a6:0d:31:6e:0d:f7:25:db:24:21:ee:c2:13:e0:31:
03:23:2b:b3:29:fb:e9:4f:3a:dd:72:be:94:52:52:8e:d9:52:
f7:8d:c6:05:c0:c1:1c:2e:d4:11:15:03:10:3e:fd:68:08:58:
68:d0:15:c5:b3:ad:23:85:4c:c6:28:04:bc:2d:38:f6:7a:b5:
16:96:88:4a:3c:9a:2c:51:05:a5:08:76:0a:15:a5:05:e9:9d:
7a:e5:74:25:4b:6d:56:98:e8:57:e7:25:96:b7:fa:df:42:9a:
a7:17:1e:2a:01:ae:a0:27:ea:65:ac:eb:0c:74:24:bc:ce:56:
c7:27:f5:70:0b:ed:4f:94:90:9f:32:5b:56:59:9b:75:22:db:
8c:e4:00:55:b3:77:e4:f3:af:a0:d9:03:ac:2d:a6:92:64:9d:
23:02:d5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:18 2023 by rpki-client on console-ams.rpki-client.org