Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/LyGk4x7UhNM0z-mvM-Jp-LS55j0.roa
File: LyGk4x7UhNM0z-mvM-Jp-LS55j0.roa (raw, json)
Hash identifier: vtUwGn+9uASYRK567LibCUvEjIh6H0dSRqlpXFgxr6s=
Subject key identifier: 2F:21:A4:E3:1E:D4:84:D3:34:CF:E9:AF:33:E2:69:F8:B4:B9:E6:3D
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A89E86F
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/LyGk4x7UhNM0z-mvM-Jp-LS55j0.roa
Signing time: Sat 01 Jan 2022 16:07:17 +0000
ROA not before: Sat 01 Jan 2022 16:07:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202160
IP address blocks: 85.187.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176810095 (0xa89e86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f21a4e31ed484d334cfe9af33e269f8b4b9e63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:e2:1a:25:e3:d6:9c:09:ea:1b:5f:86:08:
7c:34:0e:ab:cc:e3:ae:d7:36:2c:f9:99:61:6b:62:
1a:90:54:3a:85:d6:ac:95:10:3c:49:52:eb:b6:b2:
02:de:d1:84:75:ff:d4:0f:ea:27:2b:51:65:89:8c:
68:98:96:66:33:89:2d:e2:cd:cf:36:b7:61:ea:56:
c0:1c:4a:89:19:cb:77:3e:9e:5d:9a:b6:08:38:31:
cb:65:6e:d7:b8:c4:0d:68:48:c7:f3:8b:1b:0a:30:
ce:87:93:b6:13:d2:8a:02:38:df:9f:29:69:c1:52:
91:2e:ea:18:ba:63:4a:e6:43:30:d3:57:22:a3:d5:
78:94:2e:54:b9:01:45:67:cf:cc:3f:4a:12:2d:8f:
42:af:7b:63:38:ea:c7:d7:e7:8c:55:89:9a:b1:0a:
90:a4:79:e9:af:03:40:85:ef:1a:4a:c3:f5:7f:63:
17:3f:c2:d5:b0:b8:67:a4:69:d2:11:8b:3e:4a:c3:
6e:76:d0:2c:46:f1:80:3d:0c:98:5e:dd:03:58:24:
14:92:0a:5b:0d:37:00:1f:a4:02:02:cb:f6:f2:32:
53:58:e3:31:1e:1a:f6:0d:5c:eb:89:c9:e2:87:68:
e6:05:0d:67:c7:a9:6f:05:bf:1f:74:c3:e3:23:dd:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:21:A4:E3:1E:D4:84:D3:34:CF:E9:AF:33:E2:69:F8:B4:B9:E6:3D
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/LyGk4x7UhNM0z-mvM-Jp-LS55j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.13.0/24
Signature Algorithm: sha256WithRSAEncryption
32:29:34:b6:53:d0:a9:b8:dd:4d:16:b9:99:2b:27:d2:30:a7:
f5:61:50:65:8b:70:11:7b:f6:ec:12:b4:cd:f9:ba:9a:08:a8:
a1:ca:1b:6c:30:50:29:6e:27:84:f9:a7:62:e6:16:d4:7a:3b:
9c:eb:37:e3:e8:a4:02:08:60:81:99:66:af:53:5a:77:dd:6e:
82:e5:a1:f8:cd:25:c5:28:b2:83:c7:4e:a3:d9:9a:83:7f:2f:
da:68:7e:da:62:ae:56:53:88:62:84:a6:25:90:64:c9:75:1a:
df:8a:de:44:31:32:b6:49:3f:01:5a:30:d9:79:48:6c:ea:ed:
77:e4:27:24:94:d3:32:8e:2c:1a:63:75:d8:32:ec:e4:19:ee:
d4:b2:d2:95:4b:e0:4b:cc:ff:a9:f9:d7:1d:47:86:ce:10:11:
ea:91:d9:46:db:64:7a:c8:4b:98:46:fa:64:62:80:49:b2:7b:
80:90:a6:8b:bb:42:7f:e1:8c:10:f0:b9:24:3b:a5:f0:46:d3:
91:99:d3:08:67:03:da:de:43:4a:0a:ac:18:8b:cb:82:af:cc:
83:5c:cf:10:1b:96:55:8a:8d:58:fa:4e:c1:91:cc:fc:e0:9e:
7c:00:82:bf:73:49:fd:8d:03:67:8f:43:cf:46:5a:ca:23:e6:
23:51:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org