Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/l9hPxuG9ibXj6cadBhtWP1vlEsY.roa
File: l9hPxuG9ibXj6cadBhtWP1vlEsY.roa (raw, json)
Hash identifier: sxZnk9U523YnQC37gd9gU9WRCy3FEL5VEYcARdkvy1Q=
Subject key identifier: 97:D8:4F:C6:E1:BD:89:B5:E3:E9:C6:9D:06:1B:56:3F:5B:E5:12:C6
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 09A8A244
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/l9hPxuG9ibXj6cadBhtWP1vlEsY.roa
Signing time: Sat 01 Jan 2022 04:55:56 +0000
ROA not before: Sat 01 Jan 2022 04:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47915
IP address blocks: 85.204.118.0/24 maxlen: 24
86.104.211.0/24 maxlen: 24
89.39.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162046532 (0x9a8a244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jan 1 04:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97d84fc6e1bd89b5e3e9c69d061b563f5be512c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:60:cc:9f:a2:12:f9:b1:a4:aa:36:92:c9:
f2:53:d1:fe:dd:6b:9a:2a:61:89:a0:20:0b:11:44:
85:75:0b:9b:2b:b5:5a:e9:8c:e4:d2:4a:f7:9c:ae:
67:17:71:2c:f4:2f:a4:22:83:e8:0d:6a:52:9e:00:
b9:07:6a:37:33:05:be:46:ed:29:a7:36:76:7a:3f:
d4:d6:df:08:1c:c1:a8:c7:b5:41:d2:0e:27:40:5b:
a3:bb:44:f0:ca:f1:1c:f3:07:f9:d8:8a:c9:73:2a:
6c:c0:8f:eb:2e:ef:db:e3:d0:47:d2:e8:db:a6:02:
fd:60:67:d7:b3:7d:06:93:20:81:a3:41:92:25:c5:
59:19:b4:ce:f6:9d:2e:85:d7:63:da:7d:24:e9:af:
b6:67:40:54:bc:a6:98:8a:3b:0d:f7:25:93:65:7a:
df:86:d8:7b:10:75:e3:3f:5a:3f:31:cc:4e:d1:b1:
f0:76:85:bd:65:3d:78:7a:bb:16:b2:cd:09:55:73:
c3:e8:69:44:6c:a4:62:e3:18:f8:c9:92:3f:15:9f:
42:0d:f6:1b:ed:98:93:63:72:d5:64:95:a0:30:07:
e9:31:35:1d:ff:0d:9c:a8:e3:f5:d0:ee:72:f5:49:
63:d5:35:1c:31:c2:30:1b:cd:6c:63:16:fa:c8:b7:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:4F:C6:E1:BD:89:B5:E3:E9:C6:9D:06:1B:56:3F:5B:E5:12:C6
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/l9hPxuG9ibXj6cadBhtWP1vlEsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.118.0/24
86.104.211.0/24
89.39.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:59:c7:c0:92:e9:29:e3:0f:4a:2e:d3:84:54:be:82:43:bb:
b9:f7:6d:74:f7:a1:1d:ef:b6:b2:e5:c0:46:ea:ed:7b:82:08:
7b:7c:de:bd:d5:50:a0:cd:60:fb:2a:f7:b0:8e:b2:23:f2:22:
fe:80:2e:8a:81:ac:08:1d:76:56:ff:59:5d:49:ee:0f:c3:0e:
6a:10:7f:39:5c:03:f4:79:d5:18:08:9f:d5:29:8a:1d:06:ca:
28:d8:6c:30:6e:74:9b:0e:56:35:25:16:a6:9b:47:56:39:cb:
74:42:d0:83:70:a6:8f:cf:76:c5:57:6d:51:f0:55:18:25:dc:
bc:b7:09:49:df:a8:3b:83:c5:d4:bf:3a:bf:38:f3:29:a5:3b:
92:c6:fe:d9:57:76:10:9a:3e:f6:ce:4a:72:4f:38:3a:81:99:
85:8f:cd:19:7e:50:90:7f:9c:e4:4d:4e:62:bd:cf:58:2a:7a:
09:e3:3f:35:7e:21:fd:2a:28:b2:7f:8d:76:82:f3:2d:06:1f:
4e:52:ff:c5:7a:a0:d3:e4:b2:e8:f6:66:6f:a0:0a:36:f6:60:
c8:1d:9b:0d:5b:40:2d:da:81:11:95:42:87:0c:d1:56:8e:e3:
f2:5e:bd:db:fa:d4:6d:12:6f:6d:3e:8e:4d:a0:27:8a:1e:5a:
f4:5f:f8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:22 2023 by rpki-client on console-ams.rpki-client.org