Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/lKLdeJnkJWCGPME9aPLFZdX_iZs.roa
File: lKLdeJnkJWCGPME9aPLFZdX_iZs.roa (raw, json)
Hash identifier: e9WHXYfrmFrWvWqAvxligdxEbUJR2dPyQLI2yaUKnhM=
Subject key identifier: 94:A2:DD:78:99:E4:25:60:86:3C:C1:3D:68:F2:C5:65:D5:FF:89:9B
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 0C79D395
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/lKLdeJnkJWCGPME9aPLFZdX_iZs.roa
Signing time: Mon 16 May 2022 07:46:30 +0000
ROA not before: Mon 16 May 2022 07:46:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208149
IP address blocks: 185.83.72.0/22 maxlen: 24
94.154.134.0/23 maxlen: 24
185.117.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209310613 (0xc79d395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: May 16 07:46:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94a2dd7899e42560863cc13d68f2c565d5ff899b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:c7:d6:4f:c1:f1:14:90:3d:01:0c:e2:93:
f5:27:67:6a:3c:9c:73:69:f2:cf:12:f6:d5:d3:d5:
08:29:83:0e:32:42:73:f7:d7:e9:fa:f1:6d:df:0d:
dc:a5:6b:a7:59:38:63:ce:8f:33:6c:08:a8:0c:56:
a8:f6:d6:47:a2:72:66:eb:a1:14:5c:4d:fd:09:c5:
b3:6e:66:8e:b2:47:18:08:da:dc:06:14:17:ec:17:
b0:f8:c6:48:9d:1d:73:0d:07:fb:12:a3:56:cb:a6:
ae:01:e8:ac:03:9d:84:0d:a9:18:92:ff:34:dd:95:
6e:91:56:b2:42:07:fa:25:8c:62:70:ae:08:3e:30:
b7:89:cf:1d:49:60:4c:d6:7a:d0:ee:24:44:69:b3:
e5:53:70:bf:e4:f2:f8:8f:c2:53:eb:45:2b:ce:69:
72:8b:42:24:78:64:7e:26:16:6d:2d:2e:30:10:8c:
02:da:ec:70:b2:9d:d6:e5:05:07:69:a6:c6:4f:f4:
d8:87:95:e4:7c:1a:4e:c8:14:89:90:1a:b0:d7:04:
3f:66:c3:03:27:e4:ba:53:31:c5:c2:a5:2d:33:7a:
d2:21:98:97:91:8f:1e:96:e0:e6:5c:d1:56:8e:32:
1f:7c:58:0d:f2:77:63:a0:d8:f4:99:df:94:30:aa:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:DD:78:99:E4:25:60:86:3C:C1:3D:68:F2:C5:65:D5:FF:89:9B
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/lKLdeJnkJWCGPME9aPLFZdX_iZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.134.0/23
185.83.72.0/22
185.117.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f1:4b:61:f7:15:78:99:ea:5f:0e:83:1f:1b:86:f0:15:e2:
32:73:d8:e0:ae:2f:87:c3:19:8a:33:c8:c7:4f:de:22:2c:15:
be:25:47:d3:7e:ca:8c:90:a7:08:1a:b8:5a:0f:fe:fa:79:0b:
73:bd:6f:85:a3:75:f2:13:91:a0:a7:cc:cb:b3:66:22:2b:a1:
ee:51:b0:ad:17:89:78:d5:61:22:05:6f:02:28:ed:5f:9a:d0:
51:a7:94:91:96:74:67:af:18:3c:5e:9c:24:21:47:af:08:4a:
bb:ef:c4:df:c7:3e:ed:81:d2:f9:75:63:e2:a1:cf:5d:e0:25:
38:af:57:16:d5:7a:7c:9f:14:c5:d2:e7:9a:af:fa:1f:96:24:
01:3e:fe:4b:32:43:77:c6:e6:e0:b1:49:e5:11:3e:d4:40:2f:
a7:30:35:80:aa:80:e5:85:eb:19:97:aa:d9:71:fa:ab:69:e1:
3a:f3:2a:1d:0e:0b:2e:79:fb:4b:1a:0a:b0:f1:ed:49:c7:a9:
3c:c3:81:8b:0d:e2:60:a5:1a:89:e9:2f:6b:ed:98:1d:44:51:
71:bf:37:45:46:58:c4:5e:e6:5b:64:3e:c8:6e:02:ed:75:71:
5d:9c:dd:94:19:da:22:e2:ab:49:66:9f:5a:11:80:0d:b2:84:
31:01:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:16 2024 by rpki-client on console-ams.rpki-client.org