Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/LT3wm6IgkAnSH4oISg3T8UFcWRM.roa
File: LT3wm6IgkAnSH4oISg3T8UFcWRM.roa (raw, json)
Hash identifier: t573cIx7PXSrwD202L3LLr3nwqL9eXJa+MOsnCvNGMY=
Subject key identifier: 2D:3D:F0:9B:A2:20:90:09:D2:1F:8A:08:4A:0D:D3:F1:41:5C:59:13
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 0302AD32
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/LT3wm6IgkAnSH4oISg3T8UFcWRM.roa
Signing time: Sat 01 Jan 2022 00:56:27 +0000
ROA not before: Sat 01 Jan 2022 00:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211331
IP address blocks: 91.220.10.0/24 maxlen: 24
185.119.10.0/24 maxlen: 24
185.119.10.0/23 maxlen: 23
185.119.11.0/24 maxlen: 24
2a10:80c0::/29 maxlen: 29
2a10:80c0:1000::/36 maxlen: 36
2a10:80c0::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50507058 (0x302ad32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Jan 1 00:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d3df09ba2209009d21f8a084a0dd3f1415c5913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:72:46:d3:ea:2b:5c:af:bc:2f:ba:30:12:
7a:f6:61:3f:21:4e:f4:b2:c1:11:7f:9d:23:f7:99:
9e:ce:4c:f1:22:b1:8a:58:d1:fe:e3:a0:ba:85:02:
0f:96:d5:f6:18:f4:3e:b9:2e:03:2d:43:53:07:b5:
29:bc:ba:86:60:15:d8:c5:d1:59:8e:8f:ce:8b:0a:
52:e0:b5:02:13:88:5a:66:4b:a8:93:f4:89:dd:f3:
39:c4:3e:d4:78:a6:ba:c3:ae:ca:0d:0d:d7:f9:95:
e6:4b:85:86:76:7d:f4:46:2a:dc:51:fc:67:15:e6:
c4:87:25:69:22:39:ff:a3:ca:32:05:41:09:d1:55:
0d:af:ee:70:00:ed:22:8a:b3:2f:d6:d5:8d:c3:56:
fa:75:7c:93:ae:9d:c3:0b:94:36:0a:cf:b2:08:45:
2b:34:76:12:38:d3:c2:4e:91:77:65:d1:b5:0d:92:
59:b5:10:5c:2e:fd:39:51:06:e7:c2:e9:1b:a3:45:
32:d6:da:0c:e5:79:00:d9:53:d2:34:d7:3a:6e:99:
8e:f1:54:0c:e2:28:b7:74:dd:0c:01:db:aa:d7:41:
3a:60:23:11:14:18:88:84:85:4a:71:c5:a1:f7:19:
29:b8:7d:38:4e:eb:5e:e5:aa:26:a6:b6:d9:d5:85:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3D:F0:9B:A2:20:90:09:D2:1F:8A:08:4A:0D:D3:F1:41:5C:59:13
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/LT3wm6IgkAnSH4oISg3T8UFcWRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.10.0/24
185.119.10.0/23
IPv6:
2a10:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
35:29:53:b6:49:46:88:0e:c4:84:4e:30:80:b4:47:80:13:fa:
65:b4:da:d2:cd:e7:f8:47:b5:26:6a:28:24:09:ae:e6:b9:17:
45:a0:e0:b5:b1:d3:e5:83:cb:f9:d2:82:8b:9d:bb:c3:3f:05:
d5:22:83:56:2f:eb:16:62:06:5a:88:43:ee:e0:fb:f4:88:51:
3d:74:68:30:f9:20:e6:00:0d:95:7f:36:e3:97:31:e3:d1:f8:
ce:4f:2a:fc:3e:a4:b0:be:6b:68:7d:d5:29:38:65:60:2c:14:
99:8a:7f:b4:b7:8b:84:61:48:ea:64:9c:51:65:d7:fb:45:42:
f6:f2:10:d9:8d:dd:d7:41:c1:c5:59:a2:ae:14:0f:cf:4d:74:
d3:a6:f7:2a:55:cc:ff:48:7e:d7:4e:74:98:ec:e1:d6:9b:22:
aa:fa:b0:18:66:77:25:62:9b:e1:87:e3:a6:04:cb:e6:52:df:
d7:5e:5c:2a:6c:87:62:c1:76:b7:76:2f:bf:f9:4b:fc:03:42:
b8:70:13:35:1e:d3:9e:8c:61:75:6e:68:f7:cb:0b:d9:29:bd:
06:26:f6:b2:1a:0a:98:89:de:57:e7:51:2a:6c:7c:1f:04:02:
ba:38:c6:ea:67:4d:8a:79:44:ed:18:7e:75:99:90:87:51:bb:
04:4b:07:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:37 2024 by rpki-client on console-ams.rpki-client.org