Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/LQwJ-6dUE8l4G-cwHgXRhxqUqas.roa
File: LQwJ-6dUE8l4G-cwHgXRhxqUqas.roa (raw, json)
Hash identifier: /WwaoeKyK2gmY7V9JDojl/pafwQPE0q6Q2xmu65Xi1A=
Subject key identifier: 2D:0C:09:FB:A7:54:13:C9:78:1B:E7:30:1E:05:D1:87:1A:94:A9:AB
Certificate issuer: /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Certificate serial: 0184EB6512135E7D0C15EF1A4B6D2B5B4A3F
Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/LQwJ-6dUE8l4G-cwHgXRhxqUqas.roa
Signing time: Wed 07 Dec 2022 07:03:00 +0000
ROA not before: Wed 07 Dec 2022 07:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50090
IP address blocks: 217.74.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:65:12:13:5e:7d:0c:15:ef:1a:4b:6d:2b:5b:4a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Validity
Not Before: Dec 7 07:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d0c09fba75413c9781be7301e05d1871a94a9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:38:f1:dc:d5:79:0b:1a:fd:99:cd:92:86:11:
5f:ac:27:07:66:05:08:9f:73:0a:93:95:2c:76:24:
21:9e:b0:3f:50:45:96:65:a4:46:7e:af:b6:b5:05:
75:f5:11:53:5f:ac:8c:ab:ab:f2:36:7a:a9:ac:d8:
e7:d3:0f:a8:72:9c:77:07:5e:15:9a:32:39:a4:92:
ea:fc:49:62:de:d5:58:27:bb:3e:b3:4c:dc:a7:fa:
9b:f9:ea:f9:b3:fb:16:c3:ad:ee:c7:e8:95:fa:1c:
1a:e4:97:e8:df:e0:56:3c:62:98:f7:94:f4:d4:b5:
bb:30:5e:de:a4:ce:1d:f3:33:d0:a8:fc:f9:8f:a1:
f5:d9:a8:fe:d3:75:2b:d4:94:05:5e:8e:7f:a7:1d:
b2:07:4e:d7:21:a9:4e:98:76:3e:10:f0:34:1b:ad:
46:fe:cf:93:6e:8e:12:5c:25:9a:fa:b4:16:fb:a9:
af:22:a4:71:19:a9:2e:fe:c5:90:f9:94:fd:3c:d0:
ae:44:8b:92:8e:26:be:41:3f:d9:a9:1c:d6:0a:0f:
a8:22:f7:08:70:de:d7:55:42:67:e3:cf:dc:ff:ca:
b3:62:ea:64:60:4a:3b:7e:13:96:2c:93:cb:6d:ef:
58:a0:d8:b6:15:39:ac:90:35:8a:a7:4f:46:0c:1d:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0C:09:FB:A7:54:13:C9:78:1B:E7:30:1E:05:D1:87:1A:94:A9:AB
X509v3 Authority Key Identifier:
keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/LQwJ-6dUE8l4G-cwHgXRhxqUqas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.74.28.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a9:87:71:0d:48:f4:e4:3c:20:6f:ae:77:f2:ef:a0:d9:4b:
d3:ba:c7:51:4a:c7:67:fc:da:53:bd:cd:36:6e:38:80:5b:87:
7c:c2:b4:fb:da:99:d1:e8:d0:bc:8a:4a:6d:3e:8e:51:e1:35:
ab:61:45:58:0f:d3:cb:e4:e3:ca:07:9a:75:95:d7:0b:8c:ea:
7c:b3:3a:73:f4:28:b0:20:88:31:21:fd:0f:d1:75:ed:65:9a:
c0:14:58:ca:d5:3c:c8:04:3a:a7:1f:80:1c:44:fb:ac:b0:92:
af:1c:b6:ca:72:0f:24:1f:70:b5:c4:ce:18:5e:fa:c7:76:be:
2c:9d:5c:5b:46:47:eb:ab:1b:58:b4:3f:26:b4:4f:92:e8:68:
07:2b:f3:90:b2:e5:a2:4c:9c:96:aa:c8:b6:ff:95:15:c6:7b:
ce:31:80:c8:5c:a9:37:ea:fe:7d:08:1c:18:f3:c6:15:87:bb:
80:a6:5e:9e:e5:8a:86:e8:93:af:8b:c8:fa:e0:b8:6f:37:b5:
3b:3b:8f:03:e6:b4:0f:22:23:e1:22:b8:b8:bf:b2:33:84:b7:
56:8a:e6:b6:1a:95:49:c0:2e:6c:18:63:99:ef:19:97:78:a1:
c4:d7:4b:61:f7:c8:5e:9c:3a:ba:cd:4a:17:a4:a3:16:b8:7e:
ee:de:a1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:17 2023 by rpki-client on console-fra.rpki-client.org