Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/LwTpZgQ3goRN__vmUxaY2KR8ch8.roa
File: LwTpZgQ3goRN__vmUxaY2KR8ch8.roa (raw, json)
Hash identifier: 51aTNPf0gBrTHfh9imbQlbqFhgmWcN3NhlW1x7+CjvY=
Subject key identifier: 2F:04:E9:66:04:37:82:84:4D:FF:FB:E6:53:16:98:D8:A4:7C:72:1F
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 079B57F9
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/LwTpZgQ3goRN__vmUxaY2KR8ch8.roa
Signing time: Fri 08 Apr 2022 11:32:34 +0000
ROA not before: Fri 08 Apr 2022 11:32:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204860
IP address blocks: 185.217.234.0/23 maxlen: 24
185.181.56.0/22 maxlen: 24
80.254.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127621113 (0x79b57f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Apr 8 11:32:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f04e966043782844dfffbe6531698d8a47c721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:24:89:fb:0a:32:55:ef:b8:88:46:09:fc:
4d:f1:d8:f4:17:a4:0d:02:a1:2c:0c:ab:ab:30:8f:
b8:49:e3:9d:ce:b5:1f:e5:85:e5:61:91:a9:d5:8c:
26:a0:dc:9e:11:d1:ef:d6:6a:69:59:93:d3:37:cb:
fd:8d:14:53:16:1d:fb:57:80:6a:02:3c:ab:0d:ec:
f0:20:61:c8:20:c3:b7:3c:d7:36:c4:e3:6a:d0:0a:
b1:23:7a:47:c3:9b:f2:66:15:04:ce:7d:9e:9b:d4:
31:16:eb:36:84:5d:3d:6d:e3:eb:71:ef:db:41:26:
00:75:ca:29:b6:b3:78:2f:0a:42:fe:36:d4:7c:e7:
f0:3f:40:f4:b8:3d:9a:07:f9:b1:5f:9d:1a:0f:61:
9c:03:7e:33:99:1d:53:11:81:36:e2:0a:6a:e5:02:
71:80:d8:5f:69:82:14:a8:ab:83:28:45:fd:67:ce:
b5:d9:87:15:0f:41:21:d1:c0:d8:fc:a0:7c:28:8a:
6d:58:83:3c:14:37:50:8c:c3:57:0c:65:e8:d0:8a:
44:73:1c:bc:af:87:11:23:0d:a5:87:c4:ed:40:1e:
10:b7:84:15:6f:ff:5f:10:5d:83:ca:d3:12:1f:a9:
39:b9:98:cd:b8:59:69:5e:30:42:bc:64:8a:e2:c3:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:E9:66:04:37:82:84:4D:FF:FB:E6:53:16:98:D8:A4:7C:72:1F
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/LwTpZgQ3goRN__vmUxaY2KR8ch8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.236.0/22
185.181.56.0/22
185.217.234.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:8f:f4:86:59:55:3d:2b:4b:bb:cb:12:01:45:50:fd:ca:f4:
67:dc:c1:e6:3f:fd:55:c4:1b:b7:1f:18:a4:c9:fe:a7:fb:a4:
7a:ea:b6:ed:01:d3:f4:1b:08:6c:18:d7:74:8b:63:29:81:fb:
4f:d7:ca:60:7d:68:7b:a2:12:20:f5:c2:9b:ec:c8:4a:50:e0:
7e:ea:77:0f:d1:e4:49:0f:7a:c2:92:d8:98:7e:dc:75:91:fa:
3f:6e:06:fe:96:ca:c3:11:d9:0b:ee:43:01:35:75:e1:bd:02:
22:c3:4a:c1:d8:24:8e:c1:da:3b:e4:87:52:05:e1:b0:98:63:
11:5a:9e:fd:80:e7:f2:ed:e1:4f:3e:9f:6a:39:70:c4:c5:bc:
64:24:01:a6:77:df:ff:69:2e:ac:36:10:72:e7:2e:54:a1:4e:
33:19:32:08:65:ec:3c:e0:ba:54:ac:79:66:a4:ad:90:c5:a4:
42:ed:cc:1a:aa:fa:41:41:51:78:55:ac:2d:2c:d6:06:28:65:
33:a1:48:20:3b:8c:9b:06:3b:88:e1:3f:91:6d:2f:59:14:01:
c4:c8:3a:77:4b:47:ed:d3:64:8f:1c:50:43:eb:71:50:5b:78:
7d:4c:e2:1b:ce:9b:1f:ba:82:34:ff:c6:a3:58:8e:1e:e4:27:
d8:0b:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:10 2023 by rpki-client on console-ams.rpki-client.org