Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/lrlEJdvQ3awV8K7ShiKJLcSr1iA.roa
File: lrlEJdvQ3awV8K7ShiKJLcSr1iA.roa (raw, json)
Hash identifier: KAnYc54iNbbBXNLA5Wbc1OsrQSO+haq65LmQs7XCe/4=
Subject key identifier: 96:B9:44:25:DB:D0:DD:AC:15:F0:AE:D2:86:22:89:2D:C4:AB:D6:20
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 3A0662FA
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/lrlEJdvQ3awV8K7ShiKJLcSr1iA.roa
Signing time: Sat 01 Jan 2022 14:00:39 +0000
ROA not before: Sat 01 Jan 2022 14:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201253
IP address blocks: 217.153.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973497082 (0x3a0662fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96b94425dbd0ddac15f0aed28622892dc4abd620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:ac:ec:ef:c7:ca:8e:a1:1e:05:94:76:ec:
e2:a1:74:5c:ea:0f:b5:0a:82:29:6f:22:3e:6a:42:
09:6d:3b:8b:a7:94:27:f0:e4:3e:6e:d1:ef:9b:ac:
1d:41:62:bd:62:f0:b0:e3:8c:91:a2:a5:96:84:3c:
58:05:1e:52:44:f3:2f:c9:c2:a6:43:3c:3d:7b:1b:
d9:f7:96:77:ac:6b:8a:be:19:c9:cd:cd:12:4d:e8:
ee:11:0e:22:22:6e:13:8a:2f:45:d5:70:88:bd:9a:
3b:50:e3:e0:5e:9c:3d:75:77:af:86:9c:76:b4:57:
76:28:69:2b:f9:b4:20:49:a6:17:c5:44:30:6b:4b:
a8:9e:a9:0f:8d:4c:4c:6d:97:36:30:41:fb:7e:5b:
08:5e:42:01:ff:f7:8b:18:ab:9f:57:c3:6a:8e:e6:
db:0e:e1:f3:40:0e:ab:4f:f4:d2:87:6e:f9:36:2c:
c7:9b:e5:20:fb:75:32:4a:5c:e7:1f:d3:b5:fb:ab:
38:ee:e8:0c:f7:a4:0b:a9:d9:ec:5b:3b:25:f9:1f:
65:b6:59:a2:f7:0f:5f:a9:c6:4d:d0:3a:48:89:95:
15:33:30:e6:60:e7:70:db:6d:9f:62:7b:87:b7:96:
1e:c3:89:18:42:22:50:48:34:92:1b:21:40:17:c6:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B9:44:25:DB:D0:DD:AC:15:F0:AE:D2:86:22:89:2D:C4:AB:D6:20
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/lrlEJdvQ3awV8K7ShiKJLcSr1iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.153.126.0/24
Signature Algorithm: sha256WithRSAEncryption
69:20:dd:3a:e8:76:a9:c2:c6:8f:d9:18:e0:b9:47:9d:e8:1d:
49:84:b0:d9:8a:78:44:77:b7:95:c3:8e:ba:3d:82:89:2b:57:
34:8e:95:84:94:8f:7f:f2:df:5e:05:01:7e:19:05:28:97:13:
a8:31:3f:1a:db:c4:f5:09:af:01:40:9b:99:af:e8:92:e8:9d:
0a:dc:30:05:cb:42:e4:b2:be:81:0e:49:35:71:ee:ee:27:e5:
57:7a:75:33:b8:da:c0:15:89:72:53:93:b0:ee:cb:dc:c3:31:
65:a7:08:2b:7f:17:a9:7f:8d:09:cd:0b:9a:e2:e3:19:df:82:
27:a1:95:ed:34:ef:48:5a:36:ab:d0:35:6e:5f:bb:b7:7f:04:
87:7b:cb:2e:bb:6f:37:71:71:d2:17:d0:65:5a:91:eb:57:4f:
17:20:9d:8d:6e:8b:c3:8b:be:92:dd:fc:be:84:d3:93:ef:f6:
a8:6d:4f:98:55:c6:78:54:6e:06:3d:e4:b3:05:29:7d:c9:92:
28:a2:24:2b:e1:0b:83:b1:5a:23:2c:27:48:1a:66:c0:67:ec:
44:67:c1:1a:b2:01:86:4e:ac:10:83:ef:40:ba:03:c7:57:f5:
81:0d:3f:1c:62:fb:59:77:38:70:c2:8b:f1:ab:51:54:48:c6:
4a:b6:30:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:02 2023 by rpki-client on console-ams.rpki-client.org