Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/lFcJiEeZwYKLfE_NcVI054YI99I.roa
File: lFcJiEeZwYKLfE_NcVI054YI99I.roa (raw, json)
Hash identifier: 66446fE2CsvXxSb8kAeNc2h5q8hDeF/bngf4GLZ7o+M=
Subject key identifier: 94:57:09:88:47:99:C1:82:8B:7C:4F:CD:71:52:34:E7:86:08:F7:D2
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 01837E7F816EC11B6FF6B0B9596AD35C504C
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/lFcJiEeZwYKLfE_NcVI054YI99I.roa
Signing time: Tue 27 Sep 2022 10:30:28 +0000
ROA not before: Tue 27 Sep 2022 10:30:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206366
IP address blocks: 185.188.148.0/22 maxlen: 24
45.142.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:7f:81:6e:c1:1b:6f:f6:b0:b9:59:6a:d3:5c:50:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Sep 27 10:30:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=945709884799c1828b7c4fcd715234e78608f7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a4:2a:90:2e:0c:b7:da:65:00:b4:88:01:66:
eb:6b:a7:e2:8f:32:38:18:89:f7:ca:c0:e8:2f:1b:
b7:f4:23:ad:df:29:99:9c:dd:26:09:29:51:61:e9:
02:ee:e5:46:d6:9f:98:a7:0a:6a:76:62:b4:62:d3:
bf:bf:80:17:9a:ef:c4:3d:6f:9c:05:fa:67:2f:79:
c6:5d:73:e5:86:c2:e1:f9:c4:5b:1f:c5:be:d3:fa:
f4:5b:42:e2:32:84:33:62:37:09:bd:7a:32:9e:12:
b2:b5:59:1e:b7:22:7a:94:1d:35:9a:a9:c9:5b:2c:
4b:15:1c:04:ad:cf:ea:59:b8:eb:a7:de:39:d4:5a:
68:80:3c:4d:56:f4:99:cd:8a:a1:77:3b:9a:80:de:
55:bb:83:ba:c6:84:1e:73:9e:9c:31:46:04:b4:04:
d7:a4:44:da:2c:b9:ec:1f:c3:46:a7:8b:d9:68:fd:
06:ed:a3:4f:8e:84:ae:9d:e3:e1:e2:72:09:e1:f5:
a0:86:e3:10:55:7b:77:68:50:02:c7:9e:eb:d3:cc:
2e:f2:84:a1:8f:08:1d:39:bc:63:03:e7:e6:79:eb:
03:9f:58:6e:d5:6a:41:7c:80:b3:30:23:ae:c2:0a:
18:d3:4c:61:49:4d:8c:f3:58:d4:a8:38:53:0d:a2:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:09:88:47:99:C1:82:8B:7C:4F:CD:71:52:34:E7:86:08:F7:D2
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/lFcJiEeZwYKLfE_NcVI054YI99I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.68.0/22
185.188.148.0/22
Signature Algorithm: sha256WithRSAEncryption
00:17:80:9e:49:6f:cb:02:60:b7:f2:ce:47:b1:f4:a2:de:ee:
0b:91:25:5f:93:3b:70:d4:8d:42:a1:9d:81:39:c9:85:3b:d1:
e7:88:7a:ad:c7:c4:4f:1d:3b:55:dc:1d:73:c5:9d:01:ab:58:
17:a3:c4:02:9a:89:97:92:fc:57:27:24:f4:32:7e:3e:f0:97:
60:c6:d1:7d:9e:50:f1:e2:3d:80:a4:d7:e9:ce:9d:d8:59:08:
9d:ee:dd:ba:cb:21:80:58:69:9a:1a:55:46:c6:24:4e:09:33:
60:d2:71:52:16:1a:c5:eb:fe:10:dc:6d:c0:08:2f:00:2b:9b:
5e:ec:b0:0a:c2:3b:fe:48:d4:7e:cd:b4:52:00:22:02:ab:33:
3c:ab:9a:64:f9:76:06:6c:5d:4d:9a:ca:5a:0e:f8:f4:b9:30:
d8:fb:34:3b:bb:c3:3f:c0:70:df:ba:5c:d8:d5:ed:c4:9e:2a:
ed:36:f7:66:fa:e3:73:48:91:dd:3d:7d:b8:23:67:af:db:8b:
0f:63:f9:df:96:d3:e2:24:89:78:87:8d:c2:dc:ad:f9:22:d6:
1e:7b:c2:ac:97:7e:f5:78:78:16:dc:65:25:8a:88:af:03:08:
1a:14:17:f5:2a:07:16:b7:e4:52:1a:ed:ac:19:60:db:7c:d5:
70:c9:6b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:35 2023 by rpki-client on console-ams.rpki-client.org