Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/liQNsBon-_RN5HseYdPEVgPXPYw.roa
File: liQNsBon-_RN5HseYdPEVgPXPYw.roa (raw, json)
Hash identifier: Lbk6akVBC4/OXkxsijxoZzibXcLGbR6N4+8ykogRhFA=
Subject key identifier: 96:24:0D:B0:1A:27:FB:F4:4D:E4:7B:1E:61:D3:C4:56:03:D7:3D:8C
Certificate issuer: /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial: 0182D53220A360C80E7ABC373E592049229B
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/liQNsBon-_RN5HseYdPEVgPXPYw.roa
Signing time: Thu 25 Aug 2022 13:30:08 +0000
ROA not before: Thu 25 Aug 2022 13:30:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14061
IP address blocks: 141.0.170.0/24 maxlen: 24
141.0.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:32:20:a3:60:c8:0e:7a:bc:37:3e:59:20:49:22:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Validity
Not Before: Aug 25 13:30:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96240db01a27fbf44de47b1e61d3c45603d73d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:d2:35:87:db:96:96:60:2c:35:1a:ac:65:
ec:b5:c0:59:00:ee:e4:d1:e4:2c:1d:18:e6:4a:a9:
4c:aa:69:26:ba:db:96:c8:e0:82:6d:a0:87:67:8e:
6c:0c:4c:57:d9:e0:a5:70:92:c1:18:54:71:fb:70:
9e:83:50:42:69:48:66:41:66:e1:f8:d0:7c:44:79:
e9:0c:55:6d:dd:a9:b0:10:00:f2:4c:a8:b9:0d:d6:
4e:c1:8b:9f:40:e9:aa:e4:30:9f:83:f7:f4:50:e5:
68:83:96:79:f8:74:cf:35:d5:bb:35:92:93:19:33:
93:78:08:03:82:42:9d:29:79:2b:88:b7:4c:f2:14:
cb:0c:22:27:26:17:78:ab:48:2c:8e:cc:84:71:7a:
63:69:c0:df:52:3a:e9:6b:6d:09:cb:f6:58:32:b2:
86:bb:55:ee:47:86:ee:5a:5b:73:16:58:f0:98:cc:
56:11:0c:b4:88:69:18:c0:0f:32:7c:e2:08:c4:54:
41:90:62:8b:00:16:98:1a:0b:c4:d7:11:ed:e7:f1:
3c:86:c2:3a:68:fb:e7:9e:74:ff:a9:55:6d:10:37:
cf:d1:8e:15:32:42:36:cc:9c:34:d0:85:62:4b:5e:
8f:c5:2e:3f:0a:17:9d:10:75:61:14:ea:1b:4b:d9:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:24:0D:B0:1A:27:FB:F4:4D:E4:7B:1E:61:D3:C4:56:03:D7:3D:8C
X509v3 Authority Key Identifier:
keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/liQNsBon-_RN5HseYdPEVgPXPYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.169.0-141.0.170.255
Signature Algorithm: sha256WithRSAEncryption
93:e8:ce:fe:f6:7f:cb:66:11:5c:78:75:78:63:08:91:07:54:
0e:8a:5c:65:ad:b8:9b:45:73:f5:09:4b:ee:d4:65:dc:87:ea:
d9:f4:b3:33:90:25:ea:28:1b:07:4d:84:dc:30:e0:99:51:6f:
c7:21:9a:47:82:98:34:e4:24:2c:3c:1c:68:ce:8d:14:fa:4a:
e2:8d:7d:ae:f4:8b:ae:49:92:b7:a6:e6:a1:3b:ab:0c:d6:09:
62:f3:e3:9e:5d:70:bb:64:34:91:64:cf:9c:3e:48:e1:ad:5e:
b7:9f:c7:1f:63:d8:ed:4c:d8:6e:5a:26:a6:ba:2f:98:a0:e7:
00:f6:1e:21:9b:0d:41:8b:8d:2d:ca:0b:b1:2a:3d:f7:89:6a:
1b:ea:1b:3b:78:99:fc:53:cc:9b:c2:bf:58:34:c4:60:b9:a8:
29:1a:85:8a:ab:6c:29:37:fc:4b:1d:9e:db:db:42:2f:ee:19:
cf:76:e1:54:0a:72:2b:8b:a2:69:e7:ad:56:ca:f1:be:3c:39:
ef:20:e5:60:21:72:1e:37:a8:06:e6:f8:7f:52:dd:a3:32:3c:
93:28:c2:a5:cd:5e:f2:f4:ac:07:86:3c:dd:67:cb:2e:b8:ff:
d7:86:c4:8e:5c:87:90:24:21:01:09:22:9a:ba:bf:da:31:cc:
ca:cd:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:16 2024 by rpki-client on console-ams.rpki-client.org