Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/lpdDTSI8H6J70cwgeJrFrbistFc.roa
File: lpdDTSI8H6J70cwgeJrFrbistFc.roa (raw, json)
Hash identifier: eQ806WSU2B2BLYTP2Ze3jMAHJhPKZFovFqyElpdBrqw=
Subject key identifier: 96:97:43:4D:22:3C:1F:A2:7B:D1:CC:20:78:9A:C5:AD:B8:AC:B4:57
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 02CCD2D7
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/lpdDTSI8H6J70cwgeJrFrbistFc.roa
Signing time: Sat 01 Jan 2022 09:54:21 +0000
ROA not before: Sat 01 Jan 2022 09:54:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.255.4.0/22 maxlen: 24
31.43.164.0/22 maxlen: 24
195.34.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46977751 (0x2ccd2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 09:54:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9697434d223c1fa27bd1cc20789ac5adb8acb457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:ea:4c:fa:8f:06:29:61:77:59:cd:96:d8:
2e:df:76:62:1a:d1:4c:d4:35:8f:b0:9a:bb:5f:b7:
87:39:9e:81:cf:e9:9b:5d:53:95:bc:fe:8d:93:86:
db:3d:98:0b:1b:8a:22:57:d8:51:9f:66:6d:9a:6a:
ec:29:5e:d2:91:2e:7c:25:48:a2:aa:66:97:10:72:
cd:21:76:46:84:63:09:27:98:0d:99:e3:eb:65:7e:
f5:9f:75:7a:e5:e6:8c:f9:02:0e:e5:6b:0f:ca:32:
0c:7f:24:8c:85:9a:df:2d:58:76:0d:01:f0:d9:da:
2e:23:c6:c4:44:90:d3:94:0e:c6:d7:b1:54:39:9d:
ea:5a:e0:30:1e:a6:83:ec:e9:f8:7e:82:bb:da:2a:
ac:2b:c2:14:04:4a:f6:4c:9d:12:fa:d7:7c:b6:be:
c1:03:4f:cd:df:cc:d5:a1:9a:bb:f2:96:5f:3e:34:
c5:46:20:07:3d:4b:27:dd:6f:29:a1:17:3f:be:3a:
06:39:1a:b5:e7:e5:aa:7a:ae:70:17:1f:e4:bf:9f:
f8:ad:d9:de:57:36:26:fd:a4:67:f9:e2:22:35:34:
4a:0e:c2:e4:b7:15:f5:32:4f:6d:c5:14:90:71:4b:
c9:8a:97:fe:94:1f:13:4f:1b:c6:d5:8f:35:79:93:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:97:43:4D:22:3C:1F:A2:7B:D1:CC:20:78:9A:C5:AD:B8:AC:B4:57
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/lpdDTSI8H6J70cwgeJrFrbistFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.164.0/22
185.255.4.0/22
195.34.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:33:14:51:cd:8b:e9:86:b1:b4:b6:ae:5b:f4:30:42:06:30:
66:f7:18:b3:b4:9d:2b:34:a5:da:aa:30:5e:fd:fb:d0:7d:18:
40:c5:62:e9:b7:a2:41:3d:eb:3d:87:21:c1:5a:b6:59:94:68:
73:25:a0:f0:05:0d:0f:6c:31:0d:04:4e:de:c0:27:9b:f5:32:
17:9f:9c:22:20:43:f4:45:87:43:bb:30:d7:07:82:9b:2d:c0:
f2:27:ae:58:92:8d:3e:92:ab:0a:c8:53:41:58:b1:6b:ea:3b:
7a:01:da:3b:1b:94:a7:cf:c6:72:51:e5:2a:fc:8f:2f:43:40:
4d:60:87:88:31:7a:8b:13:d4:7f:2d:6f:34:82:29:8d:74:5f:
75:63:3b:f2:84:8b:bd:bb:b7:86:a4:26:fe:64:d3:fc:76:72:
41:d0:87:35:6c:6e:df:a8:94:d5:26:6e:0b:35:6e:9b:1c:ee:
8e:0a:5b:47:a2:5a:af:2a:b4:8d:0b:43:6a:96:7d:6f:fa:01:
b2:d2:e0:67:93:39:8b:68:22:41:8b:80:cb:f2:06:31:b4:84:
91:ee:84:a2:ed:14:d8:c9:d7:54:a1:f9:e9:16:67:17:09:de:
d8:31:0e:f6:d4:9c:69:0d:a2:32:63:e1:f9:7d:66:3a:65:11:
f4:cf:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-fra.rpki-client.org