Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/LBMWluG5OgNDm9DYU1OU0dIh8lE.roa
File: LBMWluG5OgNDm9DYU1OU0dIh8lE.roa (raw, json)
Hash identifier: Ffu0KyX4UHdOxXP/DR99eynQMxO38QHzQHonQP5pcJw=
Subject key identifier: 2C:13:16:96:E1:B9:3A:03:43:9B:D0:D8:53:53:94:D1:D2:21:F2:51
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 085225F6
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/LBMWluG5OgNDm9DYU1OU0dIh8lE.roa
Signing time: Wed 11 May 2022 20:29:02 +0000
ROA not before: Wed 11 May 2022 20:29:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61060
IP address blocks: 91.244.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139601398 (0x85225f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: May 11 20:29:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c131696e1b93a03439bd0d8535394d1d221f251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:d7:97:08:74:5c:e8:85:59:84:8b:12:5e:
03:29:4b:36:a3:35:b9:7e:6d:73:b7:6f:dc:dd:40:
3c:52:e8:d5:10:ed:e1:43:8c:32:cb:9b:52:be:e5:
5a:aa:80:fd:cd:6a:21:65:f0:99:59:5f:55:89:bb:
18:56:bb:c0:56:06:60:ba:03:a6:a6:0e:ec:7b:2c:
f9:3a:f0:37:75:d0:c7:53:3b:a7:fa:df:a2:26:d6:
3d:30:55:c3:85:e7:9b:5e:18:ac:a2:92:1c:00:50:
27:77:16:3c:d8:f8:e2:70:9f:c1:be:12:c4:13:53:
77:23:e4:7a:44:c6:ed:66:5a:68:f5:b0:9d:a1:40:
8d:3e:af:5b:fb:19:38:b1:10:ce:61:a5:03:5b:a8:
84:50:75:2e:6a:4f:0b:98:da:22:9e:84:f1:8f:13:
10:2e:ff:2d:65:78:3b:57:07:39:80:5e:74:cf:7f:
dc:8d:66:a7:e8:31:bf:f5:22:2e:a3:ce:cd:4d:ac:
e4:95:3b:8d:bb:52:29:78:ec:a9:e0:f3:77:4d:51:
ff:ff:b8:50:b7:dc:35:c8:f9:3a:cc:9e:32:29:c1:
21:f9:51:60:3b:5d:3a:15:50:8b:9f:12:3e:c6:3d:
e3:56:11:6c:a2:12:19:52:38:f2:c5:55:fe:ba:8f:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:16:96:E1:B9:3A:03:43:9B:D0:D8:53:53:94:D1:D2:21:F2:51
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/LBMWluG5OgNDm9DYU1OU0dIh8lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.224.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c7:85:cd:27:d5:87:76:0c:c3:62:3b:92:fe:b6:90:5d:bd:
b6:01:3e:29:9e:ae:ec:ea:0f:3c:b5:36:32:fd:73:81:cd:b2:
62:ef:02:02:a4:b3:3d:28:bd:aa:eb:a9:26:f1:d3:4f:7b:dd:
87:2b:29:3d:2c:05:6e:b0:81:6d:e2:55:8a:ec:72:17:94:29:
db:df:bd:a3:d9:b6:41:97:b0:57:86:7c:5f:cc:c3:24:2d:94:
a6:c6:f6:96:ee:55:9b:16:09:45:38:0d:43:b3:e7:3c:be:4c:
3f:fd:ec:a7:d5:33:f2:56:61:db:47:45:a4:93:ad:10:75:60:
81:1b:ab:aa:8d:6f:a7:b1:9f:de:4e:d1:34:66:c4:45:40:d2:
8b:f6:c6:82:82:96:55:fc:cc:c9:c0:a0:d4:b3:a1:43:74:30:
7a:0e:a7:f0:69:3e:ef:d7:56:66:6e:02:bf:35:c6:e6:17:10:
59:c1:4f:1a:91:c4:14:f7:57:fd:a6:de:fd:2c:ff:60:d5:cc:
5a:3c:14:39:0b:98:24:db:8d:1e:05:e7:7f:05:89:e1:b1:0f:
ab:74:e7:5d:4f:65:1c:53:d2:fe:b2:06:c2:e0:4c:e4:d5:db:
1b:ee:b3:67:54:26:07:27:44:38:98:56:33:fa:98:55:9a:70:
3d:91:12:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org