Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/LWuwSSdVPmdXktrwqc9pdp4IhVA.roa
File: LWuwSSdVPmdXktrwqc9pdp4IhVA.roa (raw, json)
Hash identifier: Q54PbWQ+KF2guUcr1Vx/7R1Sg8/NxrF4IkEEizXGgNQ=
Subject key identifier: 2D:6B:B0:49:27:55:3E:67:57:92:DA:F0:A9:CF:69:76:9E:08:85:50
Certificate issuer: /CN=cf10ad912ef942aacb4d10add39903c6e9fbb03a
Certificate serial: 1F23E4
Authority key identifier: CF:10:AD:91:2E:F9:42:AA:CB:4D:10:AD:D3:99:03:C6:E9:FB:B0:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/LWuwSSdVPmdXktrwqc9pdp4IhVA.roa
Signing time: Sat 01 Jan 2022 01:02:16 +0000
ROA not before: Sat 01 Jan 2022 01:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212598
IP address blocks: 194.31.64.0/24 maxlen: 24
194.31.59.0/24 maxlen: 24
194.31.79.0/24 maxlen: 24
194.31.87.0/24 maxlen: 24
2a0f:a440::/29 maxlen: 29
2a12:1dc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040804 (0x1f23e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf10ad912ef942aacb4d10add39903c6e9fbb03a
Validity
Not Before: Jan 1 01:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d6bb04927553e675792daf0a9cf69769e088550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e5:54:d0:11:36:d2:46:c2:e7:fd:bc:c6:46:
a8:e1:6d:86:16:42:48:55:de:63:d1:a2:ba:ae:e1:
8c:2b:fc:fe:29:3e:44:be:d5:65:76:3c:41:c4:55:
51:a4:54:f7:11:e2:23:07:2b:eb:d1:4f:4f:28:89:
46:fb:9f:b5:c0:2b:47:1a:1a:98:53:94:c2:89:55:
b1:df:2b:08:ac:79:0b:90:ab:d4:0a:1b:16:f3:d1:
27:73:e9:7b:ee:ed:84:23:3a:05:0c:a2:32:53:da:
bd:21:39:69:9d:c1:d8:8b:a8:bd:0a:90:1f:d2:fd:
d8:01:b0:a2:d4:dc:61:03:f5:91:3f:08:7e:5e:51:
e6:cf:c2:e8:d1:76:42:11:66:7e:84:0c:a9:0e:3b:
91:43:02:14:13:ba:a5:6b:9b:00:55:89:8a:dd:32:
3b:85:63:35:ea:90:38:b8:7c:78:c3:58:39:6f:35:
46:8d:91:55:a7:72:ab:75:33:58:d7:48:ec:e7:55:
98:05:84:b7:3f:9b:95:d1:0d:71:d5:4e:74:f8:9a:
37:2a:0f:38:6c:57:b1:a5:9f:a1:6b:5d:70:37:35:
b7:c4:8a:82:a4:bd:4b:e7:6e:8e:f5:3c:bc:d0:80:
1a:f6:43:f2:33:e5:e0:7a:06:5d:1d:0a:20:41:d1:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6B:B0:49:27:55:3E:67:57:92:DA:F0:A9:CF:69:76:9E:08:85:50
X509v3 Authority Key Identifier:
keyid:CF:10:AD:91:2E:F9:42:AA:CB:4D:10:AD:D3:99:03:C6:E9:FB:B0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/LWuwSSdVPmdXktrwqc9pdp4IhVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.59.0/24
194.31.64.0/24
194.31.79.0/24
194.31.87.0/24
IPv6:
2a0f:a440::/29
2a12:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
97:a1:9d:16:e2:6d:a1:ab:b7:71:4e:24:c8:6d:13:e5:b5:4f:
e9:50:48:25:10:d7:e4:81:20:29:e9:b4:45:12:85:87:07:ba:
10:4f:5e:64:af:b2:d4:3d:5a:98:00:e6:fe:0a:0b:9b:18:56:
9e:bf:23:db:80:be:2e:dd:2d:f3:27:50:15:dc:28:e6:46:df:
f5:a3:d9:50:7a:f4:42:13:02:11:ba:f9:89:ee:11:64:34:db:
fb:aa:9b:da:4d:e9:bb:8c:b4:60:ba:bd:be:b3:1a:ad:fc:40:
43:ac:b5:18:32:72:b0:6a:5c:32:56:53:2b:2a:7a:eb:54:3c:
eb:7f:08:7d:0d:c9:c1:59:7e:23:7f:30:59:39:f3:ea:d4:d2:
d1:8b:fe:f4:e8:86:7d:32:cc:cc:76:77:cc:69:4c:72:4f:2e:
cc:d7:bb:6b:1a:cf:e6:f5:39:97:41:05:7d:78:d7:0c:66:f7:
30:a3:b6:00:e1:40:78:14:b5:98:1a:a4:86:94:f7:05:79:90:
cf:1c:f6:85:68:30:cd:c2:c7:45:fa:2e:8e:dc:c6:39:2a:ed:
ff:b4:58:da:e6:28:68:7f:e7:9e:18:96:ed:88:40:2a:af:3c:
98:f1:a3:fa:1c:9f:49:76:ad:28:cd:65:cb:7e:44:03:d1:98:
e7:f3:83:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:17 2024 by rpki-client on console-fra.rpki-client.org