Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Lxh3YzaDQsJmlgj40fTbbMH2H-0.roa
File: Lxh3YzaDQsJmlgj40fTbbMH2H-0.roa (raw, json)
Hash identifier: h7XCNEQIHC8Q8abRdgBXe5uRGaxevuqN+fGx/NuEq4w=
Subject key identifier: 2F:18:77:63:36:83:42:C2:66:96:08:F8:D1:F4:DB:6C:C1:F6:1F:ED
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0185076BA46C7EF70E67A23E29C592153B18
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Lxh3YzaDQsJmlgj40fTbbMH2H-0.roa
Signing time: Mon 12 Dec 2022 17:39:33 +0000
ROA not before: Mon 12 Dec 2022 17:39:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38337
IP address blocks: 85.158.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:6b:a4:6c:7e:f7:0e:67:a2:3e:29:c5:92:15:3b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Dec 12 17:39:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f187763368342c2669608f8d1f4db6cc1f61fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:ee:85:4b:16:f1:44:d4:07:6b:05:62:7c:
c0:92:4a:c2:d6:fc:c5:6d:95:bb:a6:59:8e:7f:a3:
0e:49:1f:e8:d1:e5:65:3e:0d:65:21:03:47:53:e0:
f0:ee:45:49:d6:00:49:89:d8:5c:29:c8:e8:6d:e2:
eb:86:43:ba:15:be:e9:02:e8:8a:c6:28:c0:63:ab:
52:71:0b:fd:92:41:e9:c4:f1:d7:cd:c4:60:36:56:
d4:3d:b5:74:1c:0b:e9:a3:18:56:97:ec:f5:43:c2:
07:34:8f:5d:6c:11:92:66:24:a2:d5:a9:14:cd:1b:
13:59:fe:ef:90:f4:a6:8b:83:5a:8b:44:f9:b1:03:
d7:67:64:33:69:fe:c4:98:30:53:70:69:0f:a6:15:
42:c7:58:e0:5e:51:5b:8c:c0:d2:bd:82:fd:d3:00:
45:8b:ea:91:47:19:60:2e:d7:85:13:3f:68:04:68:
79:48:c5:34:49:93:58:45:e2:97:6e:25:15:86:76:
4d:79:27:9a:46:70:10:be:a0:d1:e9:b6:9f:36:e8:
da:05:4b:01:11:d5:3c:3b:45:a8:ae:c9:27:9b:b3:
c8:05:e0:b5:d8:61:00:94:af:18:f0:ee:de:5b:da:
54:f2:16:97:a9:8d:8e:6c:a7:1f:9a:12:e0:79:84:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:18:77:63:36:83:42:C2:66:96:08:F8:D1:F4:DB:6C:C1:F6:1F:ED
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Lxh3YzaDQsJmlgj40fTbbMH2H-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.149.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:99:73:8d:d7:92:50:16:35:16:f1:b3:2a:19:6f:8e:e8:fc:
69:95:8c:43:0c:df:aa:80:8b:00:b1:64:a1:24:06:7a:d0:32:
0f:0c:e5:db:c0:ed:42:c6:6f:a7:7b:7a:13:d7:41:bf:f4:8e:
f8:d3:61:89:46:89:13:2e:2d:1f:6c:94:c8:dc:41:93:ed:a8:
1e:fd:5a:39:55:11:de:45:8e:b6:3d:a2:2e:5a:41:46:4a:30:
e0:74:56:9b:f4:7f:9b:a3:0e:0b:a9:6c:c5:5a:77:a1:02:c5:
3e:cb:12:a0:1b:d2:c6:70:03:ba:cd:7a:a5:ed:e9:df:37:42:
d3:d9:d7:f8:97:98:64:55:58:80:fb:4a:57:0b:e6:c0:c8:09:
92:d5:90:ac:a9:13:0a:ff:46:7e:a5:96:9a:ca:c6:dd:2c:d3:
c9:81:91:8f:8e:c5:38:6a:d6:cf:b1:ac:d6:ab:d2:f0:d0:19:
ef:41:f9:fe:cb:96:0f:1d:95:f5:da:e3:71:56:b8:3d:1b:24:
ec:79:3a:1c:3b:8d:a0:cb:43:e2:21:f9:19:c7:0b:30:52:c1:
b4:5a:96:b7:20:3d:0d:b6:77:bc:82:2a:da:b7:33:0d:4a:4f:
de:06:95:27:8c:9e:53:1c:3f:0f:31:b3:e5:17:84:84:26:90:
9f:1a:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org