Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LjqbjyYNC2FekGveYJ_MC_deJHE.roa
File: LjqbjyYNC2FekGveYJ_MC_deJHE.roa (raw, json)
Hash identifier: ggX+t5/X5FJ31zLcbFaJnsqdon2TJaKcSQF5jR6ioQk=
Subject key identifier: 2E:3A:9B:8F:26:0D:0B:61:5E:90:6B:DE:60:9F:CC:0B:F7:5E:24:71
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018499E64661FCC21AAD26E5BCEC410D55C8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LjqbjyYNC2FekGveYJ_MC_deJHE.roa
Signing time: Mon 21 Nov 2022 11:15:16 +0000
ROA not before: Mon 21 Nov 2022 11:15:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204035
IP address blocks: 46.243.76.0/22 maxlen: 22
193.42.60.0/22 maxlen: 22
77.83.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:e6:46:61:fc:c2:1a:ad:26:e5:bc:ec:41:0d:55:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Nov 21 11:15:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e3a9b8f260d0b615e906bde609fcc0bf75e2471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:6a:5f:b8:09:cf:25:3a:e1:9d:6d:bc:56:
03:6a:91:65:23:9f:a3:76:b5:66:32:21:d1:3e:70:
65:21:3a:44:79:ee:9e:d0:f5:a8:7c:ee:cc:bf:d9:
59:6c:fa:df:26:de:20:a4:fd:d4:41:38:1a:fe:c3:
13:6c:31:fb:90:36:b2:c2:bb:73:0f:8c:34:98:71:
37:b7:e0:4c:5a:63:40:80:41:22:ba:9a:cb:fa:bd:
f1:bd:1d:3c:b7:36:fa:0c:8a:4f:d7:7c:f4:fa:d2:
b7:a1:36:bb:6e:c2:18:18:6f:ac:83:05:8e:96:bd:
58:8c:29:c5:13:ea:9a:6d:fa:b6:f4:79:a7:dc:f8:
09:6e:03:9f:90:f0:ec:82:34:e9:d0:5d:9b:2a:df:
32:67:5a:a2:7f:46:41:23:e6:04:11:70:83:96:53:
81:51:ed:68:1f:fb:fc:c1:d3:14:51:3b:e6:25:da:
76:2a:40:83:f4:db:e5:5d:c2:4a:9c:d8:a7:7d:4c:
2b:44:70:37:2b:6b:c2:55:aa:8d:d9:50:0c:89:fd:
1d:c7:2c:d2:49:c3:ae:2f:9a:a5:82:0c:b5:a9:09:
63:9b:71:4a:cd:59:2f:a3:97:91:69:bd:f1:b3:7d:
52:dd:a5:ca:38:2d:99:f8:f2:45:02:82:0a:36:2c:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3A:9B:8F:26:0D:0B:61:5E:90:6B:DE:60:9F:CC:0B:F7:5E:24:71
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LjqbjyYNC2FekGveYJ_MC_deJHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.76.0/22
77.83.32.0/22
193.42.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:22:d0:8f:06:07:29:0b:83:31:f9:e2:35:ff:23:ba:a3:f5:
4f:0f:15:8b:ea:8b:23:91:51:0c:e6:b7:ad:d2:9e:21:3e:ef:
66:51:a3:15:4d:47:90:33:25:76:5a:58:06:08:90:7a:ac:fe:
d0:e2:34:77:e5:b5:f6:5c:6f:f4:64:d0:b1:65:7c:0d:dc:4c:
fc:73:63:e2:c0:91:c1:75:5f:7d:ee:c7:73:57:c4:6e:52:1a:
39:da:7a:95:e6:95:ed:60:56:e5:4e:01:9e:46:b3:65:55:90:
c3:5c:16:42:a9:cc:8c:95:e3:f2:be:21:dc:64:15:f7:af:26:
17:77:7a:db:a9:df:1b:69:35:f9:c9:07:33:f2:1e:cf:00:42:
d2:3b:10:8e:f9:5e:5d:ed:8d:ff:33:d0:cc:f5:cc:93:63:5f:
16:26:5e:5a:44:30:05:94:fc:1e:d0:79:d0:ec:b8:a8:1b:2f:
68:be:54:5c:4f:80:3a:df:d7:56:c7:ec:de:5b:6a:00:29:bd:
0f:6d:fc:05:51:a4:15:64:a8:64:70:af:f2:a4:7c:93:fc:61:
40:68:34:1c:a5:12:ae:fb:b7:d0:15:ef:27:42:45:56:84:07:
ef:92:1d:26:e3:82:36:00:07:69:d7:5f:61:8d:5f:97:fd:d1:
7e:39:30:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org