Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/_LXcHcPcQk_O9BYXd9oopmEYl08.roa
File: _LXcHcPcQk_O9BYXd9oopmEYl08.roa (raw, json)
Hash identifier: ihEYtKBmUSbuEeUmMQ1HtXug72emmYaGAbUAYTt5rdM=
Subject key identifier: FC:B5:DC:1D:C3:DC:42:4F:CE:F4:16:17:77:DA:28:A6:61:18:97:4F
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16E16875
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/_LXcHcPcQk_O9BYXd9oopmEYl08.roa
Signing time: Sat 01 Jan 2022 12:01:38 +0000
ROA not before: Sat 01 Jan 2022 12:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201138
IP address blocks: 141.101.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383871093 (0x16e16875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcb5dc1dc3dc424fcef4161777da28a66118974f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:b6:af:b0:a8:f0:00:b2:a9:b1:5a:7c:3a:
3e:cd:7f:6a:a1:3f:98:2f:15:d4:05:07:a6:7b:67:
64:20:73:a7:ae:40:97:c5:b7:b4:9a:ab:87:77:56:
52:80:a2:51:d2:29:ec:e2:e2:45:5a:ec:68:bf:25:
26:db:2a:c0:79:3d:9d:0e:ea:34:78:4f:20:bb:fd:
62:5d:c5:5e:01:50:06:f5:ec:12:8f:98:e9:d9:50:
95:c0:8a:d2:8c:1d:b3:18:f8:62:bb:2a:48:f4:41:
b5:20:b7:63:8f:c7:26:84:a7:df:5d:68:f8:86:ec:
31:b0:6b:d9:b6:ba:ed:aa:e5:9b:8d:e1:9b:b4:4a:
e8:11:44:ba:e4:5b:d0:e5:aa:4f:68:d8:90:3b:91:
5e:22:36:eb:3c:b4:69:28:35:68:f3:17:42:80:ed:
95:5a:35:76:cd:37:e4:c0:1f:7e:d1:09:3a:df:21:
13:2a:0c:06:e1:62:30:19:fa:12:38:e0:41:83:5f:
69:8d:07:a5:df:a8:cd:a6:49:0b:8c:01:ea:96:b2:
19:e9:98:97:cb:74:9f:64:ec:50:ee:ff:a1:44:86:
2e:1d:6e:49:5a:f0:b4:46:b3:70:82:2f:56:ee:3e:
0c:d9:8a:84:bc:ef:33:e6:2d:01:3a:49:3d:8f:8f:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:DC:1D:C3:DC:42:4F:CE:F4:16:17:77:DA:28:A6:61:18:97:4F
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/_LXcHcPcQk_O9BYXd9oopmEYl08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.235.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:eb:0e:3d:f6:92:67:3f:eb:05:f7:73:2d:15:5a:5f:60:e8:
2f:b3:27:b2:e9:29:62:4c:a1:76:ed:e3:80:29:95:fd:8b:72:
fb:00:5a:71:1b:63:6e:24:db:e0:6a:27:44:e4:dc:a3:cf:d3:
51:ce:2d:a5:5f:a3:c5:e9:bc:22:b5:3b:75:85:f5:7e:59:41:
d8:98:34:b5:3c:58:5c:90:7c:17:46:72:dc:1d:0c:d0:66:4f:
a2:27:d4:ff:57:0d:92:62:b5:f9:20:eb:6f:ad:36:20:46:36:
65:f0:0e:39:72:0a:f9:f3:4e:7d:da:62:8b:02:f1:7f:b4:22:
39:9a:24:f4:5a:99:1a:62:c8:69:7c:7b:46:c4:d3:89:ee:8d:
4c:24:ce:ed:4b:07:78:62:e5:dd:aa:7d:4a:d8:57:2e:8a:d5:
e1:38:3c:f1:69:bd:9f:73:c0:aa:c1:cb:8c:a4:8e:13:c2:af:
31:78:15:c2:4b:31:9d:51:53:a2:22:f4:09:2d:0e:6f:78:44:
bb:12:21:fe:2f:13:7a:99:bb:34:52:e2:d8:98:05:68:58:24:
e8:62:a2:17:f0:6a:0f:dc:13:95:32:5c:da:31:e2:6d:be:a8:
13:5c:e8:13:d6:59:1a:f2:63:24:17:90:fb:5e:e5:fb:0f:72:
5c:48:f4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:32 2023 by rpki-client on console-ams.rpki-client.org