Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/L3g_5GImy6itMPpeP7JxtusJAuM.roa
File: L3g_5GImy6itMPpeP7JxtusJAuM.roa (raw, json)
Hash identifier: KNhhQamYttfMB2yaPS3XqsiSvSZlsc07ywU3TrR4COE=
Subject key identifier: 2F:78:3F:E4:62:26:CB:A8:AD:30:FA:5E:3F:B2:71:B6:EB:09:02:E3
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 08C00636
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/L3g_5GImy6itMPpeP7JxtusJAuM.roa
Signing time: Mon 04 Apr 2022 18:16:47 +0000
ROA not before: Mon 04 Apr 2022 18:16:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203936
IP address blocks: 185.238.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146802230 (0x8c00636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Apr 4 18:16:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f783fe46226cba8ad30fa5e3fb271b6eb0902e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:d3:a1:c6:52:0e:8c:57:cf:76:fd:b6:ea:
b3:cf:5b:ca:a4:b8:17:ca:52:f6:86:31:c9:91:a7:
05:64:19:45:09:b4:59:bd:77:0e:9b:4a:5a:7c:54:
88:c4:c4:1c:5a:7f:a3:89:54:70:51:30:c1:9c:62:
eb:b7:a3:10:83:ef:b3:8e:42:27:87:db:5e:e1:c4:
cb:c3:57:43:2a:49:11:13:79:bf:cf:c8:41:5c:ea:
9e:75:87:8f:d1:9b:93:62:b6:95:da:56:a9:9d:d1:
95:45:9e:3b:e1:9f:7e:89:40:0b:e3:ad:b9:20:e8:
94:79:f1:cc:97:b5:4e:33:f6:4e:3f:dc:ad:4f:4a:
23:56:c9:88:7a:a3:fe:80:a7:66:6d:a2:18:93:12:
6f:8f:27:fd:f7:3b:f0:85:14:8d:fd:55:a8:2f:f7:
77:06:f6:13:12:de:65:17:70:51:02:f4:82:81:2d:
e3:7f:53:9e:b9:e1:0e:1b:a3:74:75:0a:ad:88:ee:
2a:42:8d:3a:d6:a5:2d:34:75:df:6d:db:34:13:0c:
f5:03:bd:0b:a4:43:a4:ab:60:b6:11:d8:ae:c6:43:
cc:26:95:53:72:09:48:14:c7:f4:09:39:4b:9b:a7:
fa:c3:88:d5:c6:0b:5b:fb:8b:98:79:19:01:4d:2a:
0e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:78:3F:E4:62:26:CB:A8:AD:30:FA:5E:3F:B2:71:B6:EB:09:02:E3
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/L3g_5GImy6itMPpeP7JxtusJAuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.87.0/24
Signature Algorithm: sha256WithRSAEncryption
22:16:9e:8c:75:75:bf:3e:ed:62:f3:1f:33:5c:fc:4d:c2:f8:
99:b7:9f:c2:fd:6b:00:c9:51:f7:82:d8:04:5a:02:b3:89:1b:
96:69:74:f0:8b:5d:66:e6:1f:a5:e0:7e:ed:9d:da:37:47:fc:
ee:d8:94:7a:b7:74:85:00:83:60:aa:09:f3:0f:45:2c:3b:09:
6b:c8:61:4b:59:38:4f:7b:6b:7c:40:23:ed:01:a4:8b:b6:80:
7c:9c:e1:97:c7:c3:6b:9c:43:d9:71:50:09:65:e1:0d:14:a0:
da:f4:2d:38:f8:69:5a:4c:52:b9:8a:a2:d1:de:a7:84:16:84:
41:1f:a3:43:c4:9b:7d:24:ab:1c:84:fd:af:e7:48:fa:b8:c1:
38:30:df:75:1c:1c:e7:18:6e:34:d7:2c:05:76:96:c7:3a:60:
6a:a6:61:9f:9f:ba:c3:6b:54:c6:02:7d:cb:2c:c6:50:31:c7:
d0:59:35:41:c7:4d:7f:2e:6b:f0:c2:5c:12:66:94:de:b6:d5:
59:bf:aa:85:85:a4:88:f2:93:68:c5:fb:6f:32:39:28:9d:c0:
02:1b:ca:58:c6:e3:f6:66:97:48:2b:31:fc:15:ee:b0:4c:9a:
78:fe:59:7a:1e:22:5d:4a:74:fa:5c:50:02:05:ab:44:75:b8:
f5:9a:14:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net