Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lAwVfi5YqlA_imUy-PBtQFINjjs.roa
File: lAwVfi5YqlA_imUy-PBtQFINjjs.roa (raw, json)
Hash identifier: Ze61iXP5FqZS1LG+4lnIIenfLkrpq57+3U5TmEwkTLI=
Subject key identifier: 94:0C:15:7E:2E:58:AA:50:3F:8A:65:32:F8:F0:6D:40:52:0D:8E:3B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17F2DA45
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lAwVfi5YqlA_imUy-PBtQFINjjs.roa
Signing time: Sat 01 Jan 2022 04:54:51 +0000
ROA not before: Sat 01 Jan 2022 04:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212396
IP address blocks: 45.85.194.0/24 maxlen: 32
79.143.61.0/24 maxlen: 32
185.226.72.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401791557 (0x17f2da45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=940c157e2e58aa503f8a6532f8f06d40520d8e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:8f:f7:68:8b:3f:3a:ae:24:f4:98:37:35:
bf:60:54:d1:be:b5:af:00:8f:30:b0:69:82:ad:19:
93:5f:2b:9f:7a:4a:09:56:7d:d5:63:91:3d:b9:f2:
c2:1e:4b:f0:5a:69:1c:07:6c:62:96:cf:8f:fc:83:
9a:e9:62:c0:cd:d4:94:32:a1:f5:7a:72:1e:1f:42:
73:c1:ff:5e:38:90:30:ec:2f:10:f3:b1:5f:56:4d:
d4:bc:86:dd:5c:a0:a4:f0:0b:4e:00:27:f4:3f:2e:
a1:63:6d:48:14:ca:73:1f:e8:bd:a4:e9:f0:af:24:
fa:8b:63:27:16:0f:87:5b:d7:64:0d:be:60:ca:c6:
b4:c1:48:15:06:79:09:6b:70:73:66:a2:e6:15:a2:
9c:61:85:fb:eb:e3:e1:c4:ab:40:f5:6b:cf:3f:1a:
1e:9c:2c:f5:e0:ae:ac:c0:86:86:e5:ea:91:5b:cb:
c6:ed:e9:de:42:c7:f9:12:eb:6a:68:9f:44:60:1b:
d2:bc:a7:6c:d8:5d:c2:26:29:ec:09:6b:cd:22:21:
b2:1c:bf:3b:26:5b:df:e7:06:48:9a:c2:cf:82:99:
eb:2b:7d:c6:22:4a:80:af:c9:28:72:64:74:61:46:
c5:26:20:55:6a:0d:35:7f:2f:6b:52:f3:f8:58:56:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0C:15:7E:2E:58:AA:50:3F:8A:65:32:F8:F0:6D:40:52:0D:8E:3B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/lAwVfi5YqlA_imUy-PBtQFINjjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.194.0/24
79.143.61.0/24
185.226.72.0/24
Signature Algorithm: sha256WithRSAEncryption
be:23:b1:20:da:0d:36:4d:db:99:7d:9b:01:df:1a:56:18:3b:
3d:41:61:d4:88:19:41:49:5f:9b:16:9b:f8:14:79:92:36:3e:
be:9a:12:55:6f:65:6a:86:de:c9:0b:85:44:f5:56:d3:ad:af:
fd:df:14:40:0a:2a:20:3b:45:da:d3:62:d8:8e:b8:1c:a4:ef:
11:7e:64:dd:e1:c6:26:46:b0:59:d5:7d:48:3b:99:3c:69:24:
4b:9d:21:01:ea:05:a7:1a:51:92:f3:7d:6f:c0:8e:a5:8b:23:
13:81:9b:90:49:9e:43:98:aa:17:a4:9e:bc:14:83:a5:cb:a1:
12:48:84:6a:4a:8d:d1:f7:5e:0a:cf:3e:0b:71:c1:4c:f4:85:
cc:0b:c4:33:8b:5e:32:1a:d9:f9:f0:80:35:96:c3:ac:de:1e:
39:f1:6b:d0:4e:38:23:30:7c:05:70:ca:8a:6c:52:a4:cc:9c:
96:0b:0e:42:ae:53:df:e6:61:8f:9b:f6:a6:3c:61:2e:40:54:
c1:a8:e1:55:42:a5:25:e3:cd:83:94:e5:53:b4:ce:d6:a5:40:
62:6b:2b:b7:38:4f:f7:54:51:7f:fd:8b:b6:2a:13:7b:bd:90:
d5:d6:3d:5f:7c:aa:bf:16:42:20:cf:62:d9:d4:15:94:03:bb:
0f:57:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org