Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/l3ILrHskoGUuWZvcPtB_uGOTN9Y.roa
File: l3ILrHskoGUuWZvcPtB_uGOTN9Y.roa (raw, json)
Hash identifier: jqKPxWDbAQ8mtBPtH/68z3C2wxf5ol67QniUinqZPao=
Subject key identifier: 97:72:0B:AC:7B:24:A0:65:2E:59:9B:DC:3E:D0:7F:B8:63:93:37:D6
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 3944DE80
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/l3ILrHskoGUuWZvcPtB_uGOTN9Y.roa
Signing time: Sat 01 Jan 2022 03:53:04 +0000
ROA not before: Sat 01 Jan 2022 03:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20551
IP address blocks: 195.251.8.0/21 maxlen: 21
194.177.216.0/24 maxlen: 24
2001:648:2590::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960814720 (0x3944de80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97720bac7b24a0652e599bdc3ed07fb8639337d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:3a:0e:34:1f:a3:ea:6d:55:b2:55:9a:50:
e6:82:2e:23:46:b6:e8:6a:00:ed:1e:71:0d:7f:10:
ac:5e:af:14:66:6b:03:b0:19:ff:6f:06:a5:7b:b6:
14:be:91:31:74:a7:b6:95:b7:e3:c3:e0:d1:e1:21:
22:3d:32:39:ec:73:9a:ad:77:b8:28:fe:bc:02:da:
bf:c4:71:a6:24:ca:ad:25:e4:9d:dd:fb:fd:6a:e1:
8b:59:04:6b:ce:5c:63:97:2b:2f:91:70:b1:77:c9:
db:c1:60:50:02:0a:38:ff:21:bd:a0:6c:1c:82:68:
48:3d:e8:2c:a8:1d:7e:b2:b3:a6:2d:08:54:6c:cd:
9d:67:96:1b:85:ca:9e:b1:05:72:87:21:82:30:16:
f3:e6:76:17:62:a3:58:5a:1c:2b:fe:98:fe:a7:0e:
5e:3a:78:65:c0:7a:f2:45:d4:71:ca:5b:ec:5f:f7:
53:b1:0e:9c:2e:f6:34:86:7b:c7:a7:57:03:f6:86:
bb:d7:cf:4a:11:ad:18:24:ef:e2:c3:05:4a:41:9d:
84:e4:b5:ff:f8:ee:29:66:a7:62:4d:4f:c1:c0:3c:
61:fc:d9:b2:31:bd:9b:6a:bc:d9:6f:99:12:0f:81:
2f:ef:67:e4:4c:cf:a0:ea:59:cf:60:92:fb:60:d0:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:72:0B:AC:7B:24:A0:65:2E:59:9B:DC:3E:D0:7F:B8:63:93:37:D6
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/l3ILrHskoGUuWZvcPtB_uGOTN9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.216.0/24
195.251.8.0/21
IPv6:
2001:648:2590::/48
Signature Algorithm: sha256WithRSAEncryption
58:18:8e:e3:9a:80:00:1a:dd:7d:b7:6f:45:5b:1a:8a:09:6e:
f6:9b:a8:09:cd:eb:51:41:4e:97:21:8b:ba:dd:90:50:9b:af:
a4:c8:33:d9:dd:4f:20:a8:c4:71:55:c1:2a:90:cf:73:10:1f:
ff:79:12:ad:32:a7:ca:5c:a9:da:a9:b1:fa:bd:67:6b:21:c4:
22:e9:75:69:11:b9:5c:e9:2d:90:4e:e3:c4:cb:69:93:e5:3a:
ab:ea:f8:cd:ad:2e:b8:07:5b:5b:41:74:b1:4d:21:07:f1:dc:
f2:eb:07:7e:63:83:f2:2d:59:15:1e:ae:51:bd:be:f9:b7:2d:
74:69:8f:28:02:df:2e:37:8c:63:37:6e:e7:87:5d:5a:5a:30:
3c:79:c4:42:12:30:e5:6b:99:2b:37:4f:29:49:7f:1f:7d:49:
43:b2:85:51:e7:3d:86:e5:1e:39:be:69:f2:37:bd:9c:c1:f2:
ee:25:e0:ed:71:0f:f9:c7:3e:10:39:ad:31:95:79:ac:6f:47:
5c:1d:9f:d9:5b:b6:2f:a8:63:c4:bc:04:17:45:f4:49:67:33:
1a:77:1a:2f:fb:80:08:ad:a8:4c:ab:ae:83:a6:41:c3:77:2e:
3f:f5:4b:64:21:c5:d7:9b:70:0a:5a:d9:f1:ae:67:2b:e6:84:
ee:f5:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org