Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/LTpFrxu3tWb56s81n8SMV_w3KYc.roa
File: LTpFrxu3tWb56s81n8SMV_w3KYc.roa (raw, json)
Hash identifier: ayuPjgHUhizLWGNY77cR2cWPKDAXx79PwYNKKDompo0=
Subject key identifier: 2D:3A:45:AF:1B:B7:B5:66:F9:EA:CF:35:9F:C4:8C:57:FC:37:29:87
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 07125D7E
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/LTpFrxu3tWb56s81n8SMV_w3KYc.roa
Signing time: Sat 01 Jan 2022 12:58:03 +0000
ROA not before: Sat 01 Jan 2022 12:58:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197874
IP address blocks: 194.246.159.0/24 maxlen: 24
194.246.156.0/24 maxlen: 24
2001:67c:22ec::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118644094 (0x7125d7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Jan 1 12:58:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d3a45af1bb7b566f9eacf359fc48c57fc372987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:ac:50:ae:ca:22:d6:89:b2:e3:2b:2f:94:
d2:5f:96:8e:6d:e1:59:fe:50:82:bf:a5:cc:0e:40:
f8:0d:8a:16:9c:e6:16:b1:b9:d8:a1:6d:47:08:85:
bc:13:17:31:d8:69:3b:3b:4b:12:47:ec:fe:9f:2f:
c6:44:7b:17:fb:de:c9:d9:bc:1a:9d:15:0b:03:cf:
1a:17:19:19:18:32:f0:0d:88:2d:20:c2:7a:b8:e2:
95:3d:83:df:c7:d1:1a:16:9d:eb:ed:8e:72:dd:63:
77:33:07:f9:d6:63:23:7b:1d:df:2d:30:58:b1:d3:
d1:8f:5e:98:9c:c4:96:6e:9f:96:96:77:6e:f0:d9:
de:10:b0:28:3d:c3:32:b0:88:40:a6:27:2a:46:20:
7f:57:ed:82:0b:a0:10:40:9c:2c:42:c4:c4:89:98:
70:29:9e:1e:19:49:86:38:6e:bd:70:d1:d4:df:2d:
34:62:a5:7a:04:a1:4e:e6:35:23:92:64:39:80:35:
cc:4e:db:0f:be:d4:41:c8:d8:d6:7e:b8:26:1c:65:
b6:56:20:93:7d:11:d8:d3:a0:a7:25:14:03:66:1e:
ca:32:fd:9b:0a:c0:1c:24:59:52:bb:fa:66:70:a5:
aa:30:38:79:3d:b6:16:78:08:f4:11:32:7d:7c:88:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:45:AF:1B:B7:B5:66:F9:EA:CF:35:9F:C4:8C:57:FC:37:29:87
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/LTpFrxu3tWb56s81n8SMV_w3KYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.156.0/24
194.246.159.0/24
IPv6:
2001:67c:22ec::/48
Signature Algorithm: sha256WithRSAEncryption
4b:6c:56:80:a7:39:37:13:4c:35:d1:6e:ac:48:54:2c:92:91:
e0:40:8e:80:0e:cc:63:29:f2:2e:f2:f0:8c:86:af:05:05:9e:
68:e5:a1:1b:03:47:f8:21:1a:23:63:4c:08:20:d2:22:5b:d7:
a6:fa:e1:e5:68:a8:07:cd:b0:21:84:ec:34:fb:15:30:ed:b8:
b3:0b:d5:e3:90:f1:80:2a:43:18:de:95:4e:48:4c:3a:1c:27:
d0:39:cb:c5:da:be:e2:9e:a0:52:4a:b1:67:0d:92:ba:47:99:
00:56:54:72:39:e8:bd:94:67:24:8f:7f:1e:f6:49:3b:51:0e:
63:33:ad:ea:26:8d:39:70:40:c7:85:bb:3a:6d:da:a6:40:9a:
5c:a3:7b:5b:94:13:74:01:b5:be:c4:a8:55:ad:57:58:f9:ee:
85:43:3a:11:3c:57:b3:b8:a6:6a:10:31:cf:56:de:78:a8:d6:
b6:cf:78:cc:93:82:d9:b3:34:5d:8e:ec:fc:5a:da:03:2b:83:
c5:cd:c2:a2:f8:83:ca:b2:15:4f:03:c5:6a:37:01:1f:70:6d:
69:63:50:66:ff:df:6a:ba:d0:3b:aa:56:5c:3b:aa:67:43:75:
70:1a:22:8d:8f:9a:22:f2:34:b6:58:d7:f6:34:0c:94:93:7b:
aa:bc:de:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:15 2023 by rpki-client on console-ams.rpki-client.org