Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/LzT7FO6CqZHhph5cbCHdsWJUJiA.roa
File: LzT7FO6CqZHhph5cbCHdsWJUJiA.roa (raw, json)
Hash identifier: q5BL2vWjsWBkunwGn9LQXTEP9QMffN+c7/yy3VrlEBk=
Subject key identifier: 2F:34:FB:14:EE:82:A9:91:E1:A6:1E:5C:6C:21:DD:B1:62:54:26:20
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018533F1402651DEC5DD356429D2C6A18E5F
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/LzT7FO6CqZHhph5cbCHdsWJUJiA.roa
Signing time: Wed 21 Dec 2022 09:08:46 +0000
ROA not before: Wed 21 Dec 2022 09:08:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50129
IP address blocks: 185.209.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:f1:40:26:51:de:c5:dd:35:64:29:d2:c6:a1:8e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 21 09:08:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f34fb14ee82a991e1a61e5c6c21ddb162542620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:61:76:7b:48:63:1d:cf:8e:bd:90:62:2a:
e6:90:63:6d:d3:e9:8d:9e:26:ae:0b:f5:4b:20:77:
05:54:d6:9b:98:5c:3a:ed:95:57:64:b8:37:ad:5d:
72:44:be:1a:09:ea:eb:12:90:38:b0:bb:a5:93:e2:
4d:f0:ea:8f:0c:38:c6:5f:c9:3c:40:a2:c5:20:80:
99:34:0f:34:02:68:7e:ae:f6:ce:23:11:11:fd:26:
45:21:9d:a1:a9:51:02:b0:b6:6e:d5:a5:96:48:f4:
cb:01:26:8b:0d:41:63:82:f8:75:7b:a7:6f:66:17:
4b:9e:d7:27:be:2c:b1:88:b5:73:b2:1e:d1:c1:23:
49:94:32:64:23:15:6b:a0:91:e0:45:5c:35:73:7b:
ee:94:6c:ae:d1:b5:97:2c:08:3f:41:75:ec:1d:36:
e4:52:6f:a6:e3:51:33:64:36:2f:3d:aa:b5:9a:af:
87:f6:8c:a4:82:0e:22:c9:ff:28:21:2a:e4:7f:c1:
1e:4e:d8:d4:c2:88:0f:82:c2:24:e2:db:21:8d:f9:
24:33:0f:51:73:22:60:ea:fa:34:e2:47:42:e4:15:
ad:d0:78:04:1e:38:3c:08:18:79:f0:cf:91:f8:ba:
19:6b:8c:48:1b:0f:0e:7d:e4:8b:84:cd:0c:82:ad:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:34:FB:14:EE:82:A9:91:E1:A6:1E:5C:6C:21:DD:B1:62:54:26:20
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/LzT7FO6CqZHhph5cbCHdsWJUJiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:7e:b7:48:a5:15:99:f0:9a:a0:e9:80:b0:e1:f5:ee:30:7b:
88:d8:3b:2b:68:d0:a9:a6:9f:36:f6:63:c3:46:da:41:0b:93:
a3:79:cb:a5:de:8c:a1:79:d9:82:1c:9b:31:6f:e5:e0:30:16:
f7:df:15:2d:65:03:bc:0a:dd:86:47:a3:af:9e:af:9d:50:bf:
18:29:66:c4:b9:6d:e2:ba:3a:0e:37:e3:4f:f2:36:ee:53:9a:
04:16:35:8f:dd:ae:a8:09:43:52:a7:bf:b0:98:67:df:cb:de:
dd:87:a2:0c:bd:b7:f7:d5:71:6b:8a:d4:ba:a7:ed:52:5a:1b:
76:8a:16:88:83:4e:f7:27:25:90:10:a9:da:c7:65:76:25:1d:
13:fd:07:53:d6:19:0b:e8:2d:55:94:54:15:2b:cd:b5:3f:be:
87:ad:21:f8:ed:99:10:ff:41:97:e1:3d:ac:28:76:25:66:4f:
ec:57:7f:aa:31:a0:27:e5:db:fa:1b:07:c0:b5:6f:73:e7:33:
28:10:d3:48:12:a3:e4:bc:86:ac:80:84:fc:c2:1d:97:0c:89:
40:23:f6:48:78:19:d4:50:bc:e8:5e:6d:a4:98:ca:9c:ff:1f:
72:9c:95:9b:94:ce:fc:db:e2:28:30:f0:35:9a:0a:e6:28:4e:
ea:e1:8b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org