Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/lZmXmK-k1LH-V1nFP41ociC-2JM.roa
File: lZmXmK-k1LH-V1nFP41ociC-2JM.roa (raw, json)
Hash identifier: PESXckgKOHaPQgbSryPm+5BlHN9BV6uIbO+BbXizybM=
Subject key identifier: 95:99:97:98:AF:A4:D4:B1:FE:57:59:C5:3F:8D:68:72:20:BE:D8:93
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 018EAA69
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/lZmXmK-k1LH-V1nFP41ociC-2JM.roa
Signing time: Sat 01 Jan 2022 05:52:56 +0000
ROA not before: Sat 01 Jan 2022 05:52:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 194.180.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26126953 (0x18eaa69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 05:52:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95999798afa4d4b1fe5759c53f8d687220bed893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:dd:c8:4e:53:b9:6f:c0:98:56:ee:d2:67:
8e:1b:c6:92:51:a4:6c:72:06:3b:52:43:71:85:ea:
58:93:d7:ce:e2:70:76:72:80:60:e7:90:76:3b:a5:
1e:aa:40:2e:c5:21:43:d9:e0:bf:c7:2c:6b:c5:69:
15:b7:06:9f:cd:2f:1f:d9:7c:95:57:ea:5f:48:e7:
bb:ac:d5:2b:12:22:7a:31:68:60:bb:9f:d0:31:82:
09:2d:3f:9c:dc:a7:ea:ad:b4:64:fe:ec:c3:92:98:
d7:99:77:07:4e:91:a6:cf:0e:b1:ab:37:1f:ff:54:
5d:33:2f:41:5a:68:05:96:4b:46:1a:58:c8:3b:62:
5f:1b:39:d7:45:20:99:67:a1:72:a8:f3:f9:13:95:
42:f7:e4:ac:42:5e:d9:2a:61:88:71:03:f0:1b:46:
ea:f7:a5:dd:9b:46:31:88:48:0e:db:d5:35:04:62:
a9:35:ad:34:ab:14:24:4c:3e:78:49:62:8a:01:fb:
20:c0:52:dd:98:90:c2:60:c6:6c:56:58:e7:a1:a2:
96:be:ef:cc:73:80:11:fe:40:5a:71:7b:c8:58:cd:
5f:d5:f4:a8:b1:c2:8d:b1:a9:42:fe:c8:00:0e:3b:
d9:f7:1f:e6:f0:26:ac:a0:f7:4f:a0:5c:6b:37:0d:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:99:97:98:AF:A4:D4:B1:FE:57:59:C5:3F:8D:68:72:20:BE:D8:93
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/lZmXmK-k1LH-V1nFP41ociC-2JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.208.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f1:ea:ff:29:f0:61:a4:a6:9e:05:be:98:fe:df:85:a3:3b:
e6:a7:d4:1d:ce:54:af:d4:35:8e:84:a6:8b:f8:94:2e:40:a3:
b3:f7:1d:0b:2d:15:18:88:29:89:8e:df:df:be:f1:f8:e5:4f:
71:f9:98:c5:e2:0c:c8:2d:f3:f3:16:8e:0c:e9:7e:e6:01:ca:
c2:53:6f:68:4e:6c:ca:cd:d5:9e:70:b8:21:d3:e3:fd:d6:28:
b1:e7:91:fd:d9:d4:a1:ed:69:e6:ee:15:74:e1:2a:ec:13:e5:
b1:9b:51:74:82:fc:9e:3a:a7:65:54:f1:3e:94:43:9e:3d:93:
b0:07:4c:f7:7f:be:cc:16:f4:6d:6c:e5:0c:9b:cf:2f:8e:7b:
33:c0:78:d9:a0:14:ea:81:67:30:ab:1d:71:74:7c:f7:aa:dd:
25:e1:cc:4f:46:44:09:6f:14:1b:24:17:87:45:f9:91:8e:5d:
b8:68:65:c6:8e:33:f3:4e:64:1d:68:cf:e2:62:83:4a:e4:81:
e2:34:08:87:cc:8a:b4:12:85:6b:92:7a:e7:29:62:4e:02:e8:
ce:3e:08:6d:3f:2a:5c:b4:a6:98:f2:7f:73:59:57:05:00:c1:
a9:4b:0e:fa:e9:e5:fd:52:9d:b5:73:c4:30:ec:4a:ef:b5:1c:
cd:3c:1b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org