Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/LEO1KR3G8u4g01FiK982OtiTUic.roa
File: LEO1KR3G8u4g01FiK982OtiTUic.roa (raw, json)
Hash identifier: H2V4IoD6LSNvm9apvNhyAG5ZExU4zkwGpaKYe4pXWlg=
Subject key identifier: 2C:43:B5:29:1D:C6:F2:EE:20:D3:51:62:2B:DF:36:3A:D8:93:52:27
Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial: 044813FF
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/LEO1KR3G8u4g01FiK982OtiTUic.roa
Signing time: Sat 01 Jan 2022 05:00:59 +0000
ROA not before: Sat 01 Jan 2022 05:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.135.128.0/24 maxlen: 24
195.191.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71832575 (0x44813ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Validity
Not Before: Jan 1 05:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c43b5291dc6f2ee20d351622bdf363ad8935227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:18:af:cd:b2:f2:36:e4:45:e1:05:e2:8c:
b9:72:ab:e2:e5:70:36:78:4e:b6:3b:ce:8e:0d:2d:
a5:b4:1b:02:ac:13:66:e0:5d:08:66:05:26:f5:a0:
67:80:ba:66:46:0c:15:69:5d:7b:30:e2:7f:cb:0c:
3c:ea:d9:72:40:97:9e:2a:57:e0:db:da:cb:24:f3:
e6:f0:46:b4:73:f7:9e:b4:57:bb:22:96:ff:cf:98:
c8:3a:7f:4b:70:2f:19:02:00:af:2c:7b:96:f4:57:
71:46:08:6e:b0:1b:6d:7b:ba:18:2f:08:17:3a:24:
1c:34:c6:0c:6c:cb:52:07:35:bb:21:c5:d9:be:24:
d6:39:70:f9:fe:ef:1e:16:d5:eb:f1:1d:56:df:98:
df:52:78:f6:b1:ad:78:85:fc:13:73:c6:80:cf:8e:
54:e1:91:9f:a3:0b:1d:ec:22:f8:ca:18:39:4d:c1:
d4:81:71:ff:66:c5:97:ce:bb:08:06:ea:15:2c:39:
5d:6a:95:9c:46:ab:90:d5:e2:14:ab:6f:a5:26:ee:
8d:4c:0f:91:0d:6a:0e:8b:8d:9b:1c:ce:78:78:ff:
e0:12:70:b1:31:dc:3b:4f:58:1e:0c:70:a0:04:d7:
57:3b:a8:b7:11:12:3f:dc:96:c3:8d:40:80:fd:9a:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:43:B5:29:1D:C6:F2:EE:20:D3:51:62:2B:DF:36:3A:D8:93:52:27
X509v3 Authority Key Identifier:
keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/LEO1KR3G8u4g01FiK982OtiTUic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.128.0/24
195.191.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1e:ba:7a:28:60:82:d2:61:d7:76:27:7c:56:16:62:58:03:
74:05:f4:7f:28:0b:b2:b4:d4:78:f3:21:e1:61:f9:62:bc:e8:
8c:8e:79:7e:88:1f:39:9a:d9:56:66:ed:94:8c:e6:fa:9b:d1:
1f:a3:d8:ac:a4:42:57:9e:20:b9:2c:30:5a:73:6e:4d:8b:2e:
59:28:24:98:aa:71:de:78:7f:e2:a4:2f:73:ab:77:17:b0:13:
39:02:a6:fd:b9:f9:64:06:6d:02:85:59:9a:43:40:bf:19:44:
1e:82:18:73:ab:81:3b:eb:3b:58:84:29:46:dc:ff:0c:64:c8:
5a:1b:ff:0c:62:73:ed:26:8d:b1:a1:16:f3:22:c6:4b:6c:7e:
47:ac:22:e4:85:1c:7d:27:72:e4:67:6e:ce:09:95:de:4b:ce:
0d:ca:5e:87:46:2f:50:12:5a:7e:1d:c9:35:b1:e1:5c:f8:fe:
52:df:b6:b1:df:f4:02:75:6e:d7:b1:e7:bc:bb:08:c8:f6:b5:
86:5a:09:b7:4c:09:b7:6f:6a:e8:a4:df:52:b0:59:99:18:10:
97:5b:91:c1:ea:fa:b0:b2:ef:05:48:29:66:5b:2d:b1:c0:bf:
c6:1e:03:be:28:87:6c:ae:cb:fb:99:e4:8a:f7:9b:b8:86:86:
0b:43:b5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org