Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/lFviuLT33oU8OIYiE-dX2QEPGYA.roa
File: lFviuLT33oU8OIYiE-dX2QEPGYA.roa (raw, json)
Hash identifier: lCppUZ2LO86m8BZ127v8CxKAcbDhaxPKliTUQbZQUGw=
Subject key identifier: 94:5B:E2:B8:B4:F7:DE:85:3C:38:86:22:13:E7:57:D9:01:0F:19:80
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16DFE67C
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/lFviuLT33oU8OIYiE-dX2QEPGYA.roa
Signing time: Sat 01 Jan 2022 12:01:38 +0000
ROA not before: Sat 01 Jan 2022 12:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199735
IP address blocks: 46.243.179.0/24 maxlen: 24
178.170.249.0/24 maxlen: 24
178.170.251.0/24 maxlen: 24
141.101.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383772284 (0x16dfe67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=945be2b8b4f7de853c38862213e757d9010f1980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c0:99:4a:8c:aa:49:be:80:3d:4a:08:18:37:
d4:16:bc:0b:77:8a:9b:d7:fe:25:0f:b3:cd:c2:62:
42:e5:31:e6:69:70:4e:99:f5:c7:4a:07:72:5b:57:
26:d4:ce:50:04:2d:87:92:13:8e:0b:2f:ca:b0:86:
d0:f4:4f:00:5d:af:ff:56:bb:1a:6a:26:af:dc:91:
67:2e:12:77:b2:e4:e6:d0:94:d7:a5:10:1b:1b:2c:
e4:61:8a:28:73:5e:cd:99:93:28:e4:5d:47:86:5a:
cf:ba:ba:2a:39:c0:f1:72:aa:da:20:07:a7:88:78:
53:89:8e:06:48:78:29:0b:e7:04:36:cd:f6:2a:97:
8a:15:5c:8c:7e:6b:34:bb:2e:04:58:27:17:66:e4:
57:3d:a0:b4:8f:67:0a:a5:29:21:1d:68:3e:67:02:
88:d4:32:22:50:13:ed:e8:50:40:26:79:7b:0c:a3:
ed:60:a7:52:49:54:b4:47:09:57:c9:c8:54:f0:6f:
8d:58:ce:1b:b9:b7:2b:db:ea:84:5a:fe:ab:f1:e0:
b7:2e:10:44:81:14:23:88:95:62:ce:d5:ef:27:94:
70:84:55:f6:45:e0:15:c8:8b:6d:15:dc:92:18:f2:
25:85:7c:e8:ec:09:70:27:c0:d1:87:e2:9c:59:5d:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5B:E2:B8:B4:F7:DE:85:3C:38:86:22:13:E7:57:D9:01:0F:19:80
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/lFviuLT33oU8OIYiE-dX2QEPGYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.179.0/24
141.101.249.0/24
178.170.249.0/24
178.170.251.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5a:d6:cb:5f:7f:19:b3:09:6c:67:d2:41:cd:f1:d8:52:ba:
b9:b9:8d:c8:b3:ac:cc:aa:ca:12:59:65:62:73:fc:3a:e8:d7:
6a:ed:93:c3:da:55:28:24:ec:f7:05:68:b1:db:72:ab:69:ea:
8c:ee:3f:36:4a:b6:84:9d:61:69:73:d2:3e:f0:91:12:5a:a4:
4a:56:d5:fb:22:52:72:4a:2f:e7:c1:99:44:0a:f5:93:eb:0b:
10:e8:5a:30:67:23:14:2a:6f:77:8e:65:ce:f3:fd:b3:ac:f7:
c7:e9:c4:0d:a6:b8:47:c6:bf:9e:fa:d4:fe:f1:5d:13:15:54:
83:ac:e7:b6:9d:dc:8a:8c:15:9d:64:bd:b0:c5:e1:18:d5:9f:
d9:19:25:64:d0:e3:bc:b9:d1:61:e4:08:a4:e4:31:29:ac:fc:
49:87:8c:2e:73:8c:02:b4:1c:2a:2c:40:94:50:b9:08:f1:2c:
dc:4c:4b:4a:59:29:85:47:90:57:05:68:70:c7:0b:14:61:e2:
1c:3f:34:d0:cf:15:c6:cb:0e:4e:59:ae:0b:63:84:5b:5d:8d:
16:41:c5:f3:c4:cc:9f:30:56:09:d4:e7:61:73:80:c7:33:ac:
ba:99:51:08:51:e9:92:3b:b4:0d:53:6f:07:54:23:06:d7:87:
e2:1b:c2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org