Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/lZiTv6qJ8I0ISYL_QeVzMTb9vHw.roa
File: lZiTv6qJ8I0ISYL_QeVzMTb9vHw.roa (raw, json)
Hash identifier: 03pEDQ+3RYydWnlBztg39ryGxOaLdc+o0NdUZWfH+dY=
Subject key identifier: 95:98:93:BF:AA:89:F0:8D:08:49:82:FF:41:E5:73:31:36:FD:BC:7C
Certificate issuer: /CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Certificate serial: 0184D72E065E50E0F3334CC636D0533E5A57
Authority key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/lZiTv6qJ8I0ISYL_QeVzMTb9vHw.roa
Signing time: Sat 03 Dec 2022 08:50:28 +0000
ROA not before: Sat 03 Dec 2022 08:50:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 185.255.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:2e:06:5e:50:e0:f3:33:4c:c6:36:d0:53:3e:5a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Validity
Not Before: Dec 3 08:50:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=959893bfaa89f08d084982ff41e5733136fdbc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:42:6a:44:85:70:53:af:6e:dd:7c:d9:7b:
fd:28:63:c8:71:fb:4b:67:27:01:11:a9:74:d0:9e:
d3:a9:f5:92:61:16:2a:ac:a9:fd:9d:04:ba:47:bb:
d7:fe:86:f2:c4:71:f0:2a:10:e1:81:85:ef:ba:72:
c8:95:46:8c:7b:bd:ba:08:aa:3b:51:43:b8:c9:f2:
df:7c:62:75:a6:f8:12:5d:f8:dd:b8:7c:0e:d1:84:
bf:75:b4:37:af:bb:b3:11:2a:ac:c4:06:40:23:ab:
f1:f0:58:fd:ed:12:d7:b5:b8:af:97:e0:40:c9:4d:
ac:3b:1f:89:55:9f:be:0e:29:03:16:33:0b:4b:c0:
dc:87:e6:34:df:28:5d:41:0c:cf:79:7b:c0:01:c7:
6e:c7:e0:08:16:70:27:d8:21:57:a5:cb:f7:cb:23:
04:da:a5:68:db:81:0a:af:ab:46:65:06:af:f7:9d:
fa:cd:e1:dc:68:83:03:83:1f:88:10:58:64:f1:d4:
40:61:29:32:dd:62:6b:2e:10:3e:17:0f:68:f8:15:
75:ac:c7:f9:bd:fc:77:67:8c:58:fe:d7:76:50:f3:
a8:63:93:aa:df:7e:7e:1e:5f:3d:99:7a:5c:03:8c:
3b:12:68:28:01:83:50:f6:32:ec:92:f3:53:58:d8:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:98:93:BF:AA:89:F0:8D:08:49:82:FF:41:E5:73:31:36:FD:BC:7C
X509v3 Authority Key Identifier:
keyid:EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/lZiTv6qJ8I0ISYL_QeVzMTb9vHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:89:5b:4e:c2:af:73:46:82:e4:5f:4b:53:be:44:fe:09:da:
6d:f5:3c:3e:58:07:05:98:53:dd:92:8e:9b:49:48:87:aa:f3:
5c:34:10:84:90:29:08:54:7a:09:d6:50:55:14:6d:e8:9d:8d:
fa:c2:24:db:a6:90:d3:76:86:3c:ba:cc:c3:2b:bf:90:d5:a2:
58:6f:4f:e4:70:5b:c3:86:be:9d:4f:f9:67:1c:7b:dc:7c:39:
32:c2:10:13:a3:34:63:ef:27:fc:44:8d:fe:28:64:a1:25:1c:
5e:ce:16:33:d5:bd:f2:81:ef:3c:16:54:97:a8:2f:1c:db:ce:
b6:bc:06:8b:11:46:75:6a:01:1b:30:e1:6d:d0:f9:b8:dc:b2:
98:50:9f:f2:3a:7d:bf:88:d9:e8:6a:a5:3a:a9:67:b6:e2:fd:
81:92:36:62:7d:79:f6:b8:8b:62:71:0e:c0:b4:d2:33:3d:b9:
75:88:33:8a:76:be:08:12:65:13:7e:2b:5e:8a:ac:eb:39:0a:
d7:70:3b:50:9d:ca:a7:ec:d2:06:af:68:b6:2f:4d:08:7f:ce:
12:35:41:d0:61:b4:48:6c:e4:a3:12:4b:fe:13:f9:4d:18:b9:
06:a0:06:6c:0e:02:4e:d5:ed:40:28:04:1a:f4:c7:ce:c4:ff:
d7:09:d6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:22 2023 by rpki-client on console-ams.rpki-client.org