Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/lx_ZsdUovzlLFgJz_m-N1PFIYtA.roa
File: lx_ZsdUovzlLFgJz_m-N1PFIYtA.roa (raw, json)
Hash identifier: 76bL4WlWcM8CvprQ7OfeUHmq9/JRu5ORHypTNpdD76A=
Subject key identifier: 97:1F:D9:B1:D5:28:BF:39:4B:16:02:73:FE:6F:8D:D4:F1:48:62:D0
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 018330960EC5C3C3D0964FE61C0A65E1C9BE
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/lx_ZsdUovzlLFgJz_m-N1PFIYtA.roa
Signing time: Mon 12 Sep 2022 07:24:43 +0000
ROA not before: Mon 12 Sep 2022 07:24:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25512
IP address blocks: 85.209.124.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:30:96:0e:c5:c3:c3:d0:96:4f:e6:1c:0a:65:e1:c9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Sep 12 07:24:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=971fd9b1d528bf394b160273fe6f8dd4f14862d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:41:5d:4e:0d:0a:75:b3:a7:2b:31:fd:de:7f:
9f:ca:46:f0:b1:7f:38:f1:77:1d:69:54:9a:ea:10:
91:f7:ef:4a:f5:4c:9a:ec:33:31:f7:ad:af:54:de:
1f:d7:88:56:73:5a:af:62:3a:26:b0:60:15:d7:c0:
ef:ce:54:11:67:35:85:73:48:ee:f9:cb:c5:df:ff:
db:27:ce:50:c2:6b:c5:4b:43:ab:89:4a:02:75:c7:
bc:09:61:46:de:8c:cf:e9:08:df:04:68:05:1a:c4:
73:3c:d9:bd:ab:4c:7c:0a:10:55:82:ea:81:95:50:
b0:db:e9:c7:e0:43:42:f9:b8:cb:08:30:32:a3:2e:
fc:b5:1c:29:27:89:83:9e:ee:76:1f:52:a4:47:b5:
dc:17:f6:19:f5:2c:fc:bb:52:34:79:89:cc:1d:34:
b0:ab:7d:da:17:9a:e5:ee:1f:33:3d:4a:51:d8:4e:
1a:40:13:e3:54:52:4d:93:8c:84:df:4a:3d:7f:3b:
d2:cf:e6:1e:80:b0:01:c0:d0:2f:84:19:39:80:29:
67:3d:91:80:ed:78:1d:52:f3:89:9a:86:e9:12:35:
1d:ab:8b:63:8e:fa:06:5a:39:e3:5f:9d:23:ec:17:
ee:03:84:ee:b0:d8:4e:c7:67:b7:d8:bb:e6:39:e5:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1F:D9:B1:D5:28:BF:39:4B:16:02:73:FE:6F:8D:D4:F1:48:62:D0
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/lx_ZsdUovzlLFgJz_m-N1PFIYtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.124.0/23
Signature Algorithm: sha256WithRSAEncryption
68:b6:ba:17:31:b1:28:b8:27:50:19:b6:cc:b2:76:71:1b:2c:
a6:dd:7a:04:b9:91:14:3f:ba:bf:45:7b:f1:a2:ff:1b:a0:37:
d9:28:a3:ed:00:59:a4:49:6f:c3:5b:42:78:55:fc:e0:c1:1b:
d8:5d:ba:85:c8:b8:f2:bb:70:5b:ab:f3:fe:cb:53:ca:64:dc:
e0:b3:de:c6:8c:c0:71:ca:3f:01:91:f3:d7:b9:b5:6a:f9:97:
97:41:fd:81:b1:6a:f2:05:3c:2f:b3:00:1f:00:cc:af:77:ef:
b4:49:63:db:84:5b:ed:20:21:5b:90:ee:5a:75:6c:53:5f:dd:
15:04:6c:dd:89:c3:c1:f8:53:91:83:89:fd:b0:8d:00:a2:81:
fb:ec:03:f9:20:0a:21:54:a8:43:2a:fc:88:93:2f:a5:c5:9c:
6d:92:0b:ea:83:ac:69:29:54:ff:4a:1a:a0:3e:ee:f3:c1:84:
b4:52:f3:a6:00:02:2d:75:e9:21:a9:d5:4d:88:71:8c:d2:01:
5f:8f:b8:8e:df:f0:7e:89:e4:6d:9f:17:2b:32:d6:9e:31:f7:
e7:d3:34:63:da:bc:d0:15:dc:7d:99:84:2f:4a:55:d2:9d:47:
ea:84:a8:5d:ea:db:3c:42:38:2e:ec:03:8d:76:be:92:e5:29:
53:44:11:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:10 2024 by rpki-client on console-ams.rpki-client.org