Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/lipWxG7IwPcd7yO8EkwsLc7ikxY.roa
File: lipWxG7IwPcd7yO8EkwsLc7ikxY.roa (raw, json)
Hash identifier: mtQ2+a6MhxBimhT7FDGXoBfP/mVUprGZBIMAIiF2I/w=
Subject key identifier: 96:2A:56:C4:6E:C8:C0:F7:1D:EF:23:BC:12:4C:2C:2D:CE:E2:93:16
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 0182909BBEBE134B47E500B361728183308F
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/lipWxG7IwPcd7yO8EkwsLc7ikxY.roa
Signing time: Fri 12 Aug 2022 05:51:42 +0000
ROA not before: Fri 12 Aug 2022 05:51:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208924
IP address blocks: 45.14.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:9b:be:be:13:4b:47:e5:00:b3:61:72:81:83:30:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Aug 12 05:51:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=962a56c46ec8c0f71def23bc124c2c2dcee29316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:85:d7:3c:f3:be:ab:57:86:14:c3:b7:8d:
57:ec:ee:86:9c:78:14:f6:66:65:04:61:86:42:29:
52:32:64:77:dd:b7:36:6f:30:61:52:99:5c:58:93:
a1:01:7f:78:7c:59:6b:fc:cd:49:46:b0:23:de:b2:
44:a7:6f:54:9d:c1:9b:c7:ab:a8:0f:20:f1:0d:85:
78:49:b7:4d:f6:84:e6:84:70:d1:ce:cc:ec:d3:82:
13:a2:13:89:e9:ae:75:54:65:e1:ba:15:0d:63:a0:
69:d6:39:ad:30:e8:47:12:b0:95:33:ec:b4:dc:da:
09:f7:aa:00:13:95:7d:86:5f:a3:47:48:6c:98:93:
d9:0d:a1:31:ac:93:3e:7f:8e:54:b6:9d:3e:a8:12:
8d:b7:e5:2a:23:a1:61:98:ab:d6:96:b1:e5:f4:74:
f8:cf:0c:a8:b6:1a:2f:40:30:5d:76:3c:a6:53:c9:
be:2c:9f:92:1c:a7:0a:b6:d0:9b:05:83:41:c4:bc:
ab:01:c4:59:a1:b9:eb:36:f9:ff:f1:f9:f1:fa:02:
56:b8:ce:39:64:7e:94:74:64:fd:14:f6:c8:5e:44:
59:6d:66:c6:4f:68:f7:4e:d4:9e:84:07:0b:dc:90:
1a:99:0c:d8:f3:34:14:cd:b0:5b:f6:10:4a:3d:03:
71:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:56:C4:6E:C8:C0:F7:1D:EF:23:BC:12:4C:2C:2D:CE:E2:93:16
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/lipWxG7IwPcd7yO8EkwsLc7ikxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.172.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ee:a1:69:a5:33:98:49:ae:9c:2d:ae:09:21:af:fc:75:a3:
c4:f8:2c:35:51:c1:fc:ec:b8:f5:9a:ca:2d:40:8e:3b:33:a3:
50:23:91:ab:2b:3f:d7:d1:2c:bd:17:9a:4a:55:31:6b:cd:9c:
f2:e9:08:fb:c6:7a:14:3d:ab:f7:8a:4f:62:5c:10:a1:95:d1:
85:80:c9:ea:2a:ef:97:70:7d:b0:fb:9c:db:7d:4b:ca:73:ca:
9a:e2:8d:62:d7:f4:73:94:06:ff:d5:2b:ee:58:9b:c8:b8:7c:
1b:a6:4e:7e:1c:20:d8:27:96:4d:79:c3:9c:ff:00:a2:cb:fa:
bd:8b:60:85:f1:9e:96:04:d6:d5:d3:19:c8:60:10:79:b0:e1:
d5:ef:fd:e6:4d:04:76:5e:df:6a:ee:5d:1e:c3:95:0a:39:d8:
cc:aa:e5:9f:86:5b:8f:a8:76:4b:a3:d1:5e:c0:11:06:5f:08:
40:db:37:a7:2a:90:42:e5:86:0e:d0:9d:c2:14:3a:f3:ca:65:
e4:11:34:18:c1:09:51:a4:00:49:60:ee:c6:a5:8d:8a:5c:6a:
dd:f2:6d:c4:0e:27:17:c1:70:ac:fd:c4:ec:e6:a2:c5:29:e2:
e5:03:53:e7:e7:42:1b:03:c1:4f:fa:0e:cb:10:8b:03:dc:68:
94:8b:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:04 2024 by rpki-client on console-fra.rpki-client.org