Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IlcQ9fZbdZjRwJW6v6mdTJlxnOA.roa
File: IlcQ9fZbdZjRwJW6v6mdTJlxnOA.roa (raw, json)
Hash identifier: Fm+5LjFDRJnUyoGDRlC9mfdhyGLVwSpJTOJ2DeNzKaM=
Subject key identifier: 22:57:10:F5:F6:5B:75:98:D1:C0:95:BA:BF:A9:9D:4C:99:71:9C:E0
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 03142395
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IlcQ9fZbdZjRwJW6v6mdTJlxnOA.roa
Signing time: Sat 01 Jan 2022 16:04:12 +0000
ROA not before: Sat 01 Jan 2022 16:04:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 193.109.85.0/24 maxlen: 24
84.252.72.0/24 maxlen: 24
2a0f:7b81::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51651477 (0x3142395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=225710f5f65b7598d1c095babfa99d4c99719ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ad:ef:93:c3:95:d5:9b:72:7f:84:ae:f1:fa:
c6:52:80:37:1b:9a:7c:e5:fe:16:60:55:a0:80:4e:
3e:a2:49:cf:70:09:ed:f8:20:e4:ba:ce:1f:32:de:
76:9b:70:b8:2d:68:70:2b:94:82:00:20:a8:f9:71:
7e:6a:b6:31:64:6e:f8:cd:a6:9e:28:ef:7d:c8:65:
e1:2a:0e:34:76:f0:d5:6c:68:06:44:0b:d1:d0:05:
45:b8:63:52:64:a9:b2:84:8f:04:cb:b7:58:a8:e5:
57:8c:d3:9e:05:aa:6e:f0:a6:63:91:4f:78:13:e3:
f2:52:1f:a1:f9:d5:56:fa:a7:7d:29:62:d6:ce:26:
a0:c5:aa:7b:61:07:07:52:52:f2:37:8d:d9:bc:37:
07:7a:c3:a4:a9:e0:ba:af:ed:72:68:f3:2b:f4:9e:
81:db:58:16:cd:bc:c4:c9:cb:74:af:6d:ea:a5:98:
f2:e8:16:96:d9:5c:67:b2:95:c6:2a:f0:72:5e:2d:
41:61:37:14:bb:eb:64:81:fa:6d:4a:5f:a0:e0:16:
d9:3b:3d:bb:80:a3:29:21:75:16:0d:5d:c1:d6:9c:
e9:d7:7c:a7:b0:4d:a2:2d:af:78:d4:5a:33:ef:7c:
cd:60:36:61:4d:a3:91:72:73:65:51:e2:a2:6c:3c:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:57:10:F5:F6:5B:75:98:D1:C0:95:BA:BF:A9:9D:4C:99:71:9C:E0
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IlcQ9fZbdZjRwJW6v6mdTJlxnOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.72.0/24
193.109.85.0/24
IPv6:
2a0f:7b81::/48
Signature Algorithm: sha256WithRSAEncryption
42:af:41:7c:21:dc:94:89:08:cb:65:36:7c:2f:5c:79:f1:33:
79:67:b8:b6:de:e7:19:ac:22:3d:0a:cf:c5:72:7b:97:82:3c:
3e:71:66:3d:14:65:e0:4c:e4:2c:09:bd:3a:12:7b:f3:1a:16:
03:bc:ff:30:6f:b9:e0:fb:f0:c1:6a:ce:1c:72:6d:95:e8:6b:
78:99:10:56:2c:81:c1:ec:4a:20:a5:cc:f4:fe:49:9c:28:7a:
41:7b:ba:1f:27:7d:92:35:5b:9c:81:3e:b5:f3:66:a0:d5:ab:
c5:9b:98:a1:69:da:74:bc:2c:34:33:a0:11:9f:9c:a4:4f:61:
6d:fd:07:5a:20:52:33:ab:e9:c6:d8:b7:82:ed:08:97:b3:8f:
ec:2a:ae:07:cf:ec:f8:b0:05:13:61:90:bd:66:f9:27:98:a9:
22:73:86:e1:57:af:ea:26:21:06:a0:28:b9:a4:aa:41:69:18:
4d:1c:1b:e6:01:41:04:38:d7:a2:42:5c:52:06:5e:7d:67:f1:
a4:02:a7:bc:5a:94:47:1c:b2:b9:ab:9a:53:87:0a:69:7b:97:
b0:fd:4d:66:b1:b8:a2:f7:56:55:26:6b:0f:de:73:99:85:0e:
7c:8c:0c:a2:b3:da:68:e0:8d:64:bc:a2:00:d1:13:3e:a5:03:
57:c7:29:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:29 2023 by rpki-client on console-ams.rpki-client.org