Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/l_DFZHdflZlcploELL-rs-XYp-U.roa
File: l_DFZHdflZlcploELL-rs-XYp-U.roa (raw, json)
Hash identifier: DfxXrgtYTmA/NJhaCZV5twxUVasVmymVb/wGeRc7Blg=
Subject key identifier: 97:F0:C5:64:77:5F:95:99:5C:A6:5A:04:2C:BF:AB:B3:E5:D8:A7:E5
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 0183EF0B85E528BF4F2D55C8978148EAF728
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/l_DFZHdflZlcploELL-rs-XYp-U.roa
Signing time: Wed 19 Oct 2022 07:00:53 +0000
ROA not before: Wed 19 Oct 2022 07:00:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 37.143.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:0b:85:e5:28:bf:4f:2d:55:c8:97:81:48:ea:f7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Oct 19 07:00:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97f0c564775f95995ca65a042cbfabb3e5d8a7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:62:d5:9e:5f:61:88:d6:ac:8d:d6:d0:9c:
c5:f4:62:f4:30:dd:ca:aa:10:f5:dd:40:87:55:82:
ac:93:a6:18:98:c6:9e:05:a8:f7:18:2c:63:13:4b:
09:23:64:f2:a0:be:79:7d:e1:e7:02:6e:25:ec:92:
ac:8c:35:88:33:47:87:8c:c2:59:df:a3:fe:4b:33:
70:e0:30:73:f4:5d:e1:06:85:61:72:c7:a0:58:82:
d7:38:b0:cc:c0:de:bc:5f:98:cf:a5:46:2d:6b:7d:
4c:a1:32:9f:c5:8b:09:1a:72:d8:74:fc:80:eb:76:
0c:5a:2c:7b:ae:d0:a4:c7:9f:d6:6e:8a:67:82:20:
44:5c:70:05:41:e9:19:25:7f:d2:cb:9e:b7:37:9f:
b6:66:e9:f4:2d:55:97:cd:c5:2b:02:1d:da:00:e4:
4a:71:72:1f:47:1e:f7:86:f8:ea:fb:5d:e3:b7:46:
3f:27:e2:8e:6a:f2:1f:7f:01:b9:79:c3:7c:84:12:
33:7b:00:86:7d:cc:66:7b:42:49:c1:37:90:d4:70:
ac:9a:be:81:cd:67:46:34:35:da:52:76:b2:17:ac:
68:e5:36:19:fb:12:e9:1a:18:3d:09:1b:3e:a7:f8:
e8:08:bc:12:65:7b:a7:bb:f6:1a:80:61:91:20:01:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F0:C5:64:77:5F:95:99:5C:A6:5A:04:2C:BF:AB:B3:E5:D8:A7:E5
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/l_DFZHdflZlcploELL-rs-XYp-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/22
Signature Algorithm: sha256WithRSAEncryption
32:5f:a4:7d:53:e1:2e:6d:5e:30:f6:b0:eb:f9:d7:a1:36:51:
7f:68:6f:cf:a4:21:24:aa:3e:c2:0f:71:3c:dc:35:45:1c:6f:
09:0c:73:5d:2a:2f:62:fa:f8:d2:67:34:0a:d1:67:c7:08:fb:
de:6f:f3:10:0d:57:93:1e:6b:bd:84:bf:05:52:da:11:53:a1:
13:4d:83:ea:d8:75:49:0c:53:73:12:f1:bd:10:c9:23:32:fc:
df:2c:55:fc:df:59:72:3c:f5:0a:fd:92:fc:a6:80:ae:05:d4:
e8:1f:a4:72:73:5e:89:e3:e1:b0:c3:32:7c:be:2b:c5:b9:bc:
6b:64:71:13:52:ad:3b:58:c1:91:a6:b1:16:ac:1b:87:c6:e0:
7a:6e:4c:58:e5:5f:dc:67:7d:78:6a:c8:8a:3e:8c:66:3c:f9:
14:c7:cc:7d:b6:8a:c0:97:e7:0d:be:46:32:6d:4d:ce:a4:56:
59:a8:5e:4e:17:a9:a7:72:e4:fc:83:7a:5c:da:ac:90:01:d9:
dc:54:18:86:e5:a9:7c:02:ab:95:ac:90:0d:de:a8:55:83:83:
69:f1:0a:11:b8:12:86:d2:01:8b:56:2f:c0:e7:0b:8c:e3:93:
72:86:4c:13:90:3a:f7:ae:6e:04:8f:a3:a6:85:24:a0:6b:7f:
23:0a:53:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:50 2024 by rpki-client on console-ams.rpki-client.org