Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/LxxfkMU4zVXpfHe5ODvdN_9d26I.roa
File: LxxfkMU4zVXpfHe5ODvdN_9d26I.roa (raw, json)
Hash identifier: ZqSTJPWZmUlEA+CeyE5JxQsjCgDO3iQV/NT9hsU0PsY=
Subject key identifier: 2F:1C:5F:90:C5:38:CD:55:E9:7C:77:B9:38:3B:DD:37:FF:5D:DB:A2
Certificate issuer: /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial: 12BE032A
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/LxxfkMU4zVXpfHe5ODvdN_9d26I.roa
Signing time: Sat 01 Jan 2022 05:00:20 +0000
ROA not before: Sat 01 Jan 2022 05:00:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38719
IP address blocks: 176.74.24.0/21 maxlen: 24
185.184.152.0/22 maxlen: 24
2a00:fd80::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314442538 (0x12be032a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Validity
Not Before: Jan 1 05:00:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f1c5f90c538cd55e97c77b9383bdd37ff5ddba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:fb:2d:98:40:dd:d3:e0:d7:d3:1b:5f:c8:
9e:08:83:03:be:cf:df:c2:ce:97:85:c0:c6:ca:1a:
4a:a9:2e:ad:6f:8f:c3:0a:32:fd:f6:51:2a:dd:98:
b7:78:8c:da:ea:21:d1:d0:54:f4:5a:00:43:e3:2e:
32:f3:ad:b5:30:94:08:66:39:6e:34:12:c3:68:37:
c3:37:e8:9b:b6:d7:3e:8a:ef:7c:12:b1:c1:8a:aa:
91:a5:5d:fe:39:9e:4f:a6:92:64:a9:f3:0f:d3:2d:
4a:5b:f4:c0:40:8c:2f:3f:89:0a:b0:4e:cb:25:a2:
d3:5f:5c:a6:3d:c8:6f:27:04:03:2b:88:e4:d8:cd:
b7:a8:12:46:38:d1:d7:9e:e1:d5:ff:55:d7:61:ae:
af:cc:41:78:f2:77:da:af:cd:b8:48:97:00:29:2a:
ff:92:4b:a3:9b:f0:77:45:b8:65:d2:25:90:36:b7:
fc:40:43:cf:d0:c6:39:2e:7e:ad:3b:54:86:10:7f:
e3:e6:46:b2:6f:e9:ab:b6:ab:79:9e:f1:f1:2b:9b:
06:fb:b4:49:a9:7f:1e:e2:11:c9:a3:40:9e:5a:3b:
50:2d:02:a5:3f:e4:83:39:4d:15:15:42:aa:e1:df:
fe:b9:b6:b3:25:f3:74:ce:a4:c7:de:58:f3:cf:c9:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1C:5F:90:C5:38:CD:55:E9:7C:77:B9:38:3B:DD:37:FF:5D:DB:A2
X509v3 Authority Key Identifier:
keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/LxxfkMU4zVXpfHe5ODvdN_9d26I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.24.0/21
185.184.152.0/22
IPv6:
2a00:fd80::/32
Signature Algorithm: sha256WithRSAEncryption
1e:83:b6:09:70:b9:30:dd:41:7c:ee:a5:ea:cf:c1:df:71:f3:
97:da:43:70:bf:3e:7d:f6:53:71:69:03:1b:88:55:c1:45:bf:
2f:bb:21:48:5b:16:fb:f0:9d:5b:ff:eb:35:4c:25:46:30:98:
a3:f9:aa:2e:f0:5a:26:ba:ea:b1:dc:94:4c:10:ee:fb:0f:59:
83:b7:6d:01:82:e4:c6:c9:4a:43:3e:c1:12:5d:6a:f0:cd:4d:
b9:7d:5e:43:56:fb:c5:ca:9a:20:4a:ab:89:84:b1:03:e3:87:
ee:93:b0:75:4c:2e:3e:6f:bd:a7:d6:19:88:31:50:38:9b:e7:
cd:b3:b8:e1:e8:5b:1a:34:47:b3:d0:af:23:4c:b0:ff:08:c6:
f6:cd:58:f6:30:e0:1b:be:a9:c6:87:e1:a7:32:27:da:8f:b9:
4a:37:85:4a:b9:25:2e:bb:23:99:8f:28:e9:6b:bb:2c:27:da:
70:6f:f9:44:1c:9a:4a:db:dc:e6:93:a2:cf:f0:e8:36:97:2f:
50:c3:ca:46:a1:cf:4d:9e:6f:25:c9:02:ae:3a:52:2e:66:18:
be:f3:f9:9e:4d:de:95:7e:d0:c7:fe:c2:67:cc:10:c1:6e:05:
52:48:a2:31:ed:68:4e:3e:a7:52:67:eb:f6:c7:86:03:36:90:
06:3c:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:08 2023 by rpki-client on console-ams.rpki-client.org