Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/llzJaq87wdPsm0eEdxov9XunKtw.roa
File: llzJaq87wdPsm0eEdxov9XunKtw.roa (raw, json)
Hash identifier: U0JD9u+Vdg2uCJgr4fmLVLif1AC7Tdp8mKL8/azaJ3Y=
Subject key identifier: 96:5C:C9:6A:AF:3B:C1:D3:EC:9B:47:84:77:1A:2F:F5:7B:A7:2A:DC
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B119FEB
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/llzJaq87wdPsm0eEdxov9XunKtw.roa
Signing time: Sat 01 Jan 2022 13:58:08 +0000
ROA not before: Sat 01 Jan 2022 13:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203613
IP address blocks: 193.192.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722575339 (0x2b119feb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=965cc96aaf3bc1d3ec9b4784771a2ff57ba72adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:14:c5:94:d4:7e:25:56:2d:15:d9:e2:55:
0d:9a:f3:cb:04:1c:25:43:71:a9:a4:3b:79:24:c7:
9c:3d:39:1f:a3:67:53:cf:b4:05:cf:31:92:44:3b:
14:0d:12:f4:c2:56:0f:cb:e5:26:e1:32:2f:d7:1a:
bd:ac:fc:3b:53:80:b9:b0:c8:27:d7:50:8a:80:64:
30:33:c9:5b:a5:ef:01:2f:be:53:4c:ae:23:2c:05:
d3:fe:72:bf:5b:57:6d:c8:5b:76:80:44:91:f3:66:
3d:83:d7:a0:24:f3:2c:fc:d3:f6:37:1a:72:f3:50:
97:da:b5:3c:32:f4:08:b6:af:f7:a6:45:7a:8e:a4:
42:2e:b8:c9:fd:44:17:d4:a9:2b:00:65:be:52:42:
96:01:b3:d4:a2:ff:c5:7e:2e:fd:7f:41:7d:46:7d:
9a:8f:3f:53:8d:d0:cb:28:c4:54:c1:7b:ca:4f:87:
a7:7f:30:f2:49:e0:42:9f:56:1c:ba:48:cd:65:f1:
09:3c:0d:1b:e9:b6:a8:9c:08:91:8b:c3:bc:74:75:
5e:fb:b0:86:9d:9d:ae:7b:dc:31:18:9a:47:58:a8:
a4:3c:1c:95:20:85:58:a6:32:08:b5:8e:c7:ab:9e:
1f:f1:04:1e:e5:f5:52:eb:08:4a:5e:aa:12:f1:48:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5C:C9:6A:AF:3B:C1:D3:EC:9B:47:84:77:1A:2F:F5:7B:A7:2A:DC
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/llzJaq87wdPsm0eEdxov9XunKtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.185.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e7:ec:95:00:b6:d7:34:0b:da:49:9b:51:a2:1a:1b:b4:57:
80:40:c8:2f:93:2a:3e:af:a6:3e:fa:29:0f:f2:b8:23:2c:12:
50:09:e1:68:83:ec:9e:06:47:29:19:bd:5a:55:32:15:b7:c0:
d1:31:02:68:66:4f:4c:d1:57:7e:57:53:7f:14:f4:73:c5:cc:
b0:bb:71:90:8e:bf:75:e3:69:f7:ed:4b:e8:c2:0b:74:05:ca:
1b:a9:7c:8b:df:f5:15:49:38:1c:4d:10:7e:a4:08:ab:2e:df:
82:51:73:77:95:4b:60:27:e1:33:cd:be:10:28:ab:95:a8:f9:
59:4b:3b:b6:46:b5:66:55:46:ef:a1:b2:35:a0:25:9d:6d:51:
9a:12:61:96:8d:95:33:84:ba:23:4b:83:d0:86:c4:95:6e:40:
05:59:70:d6:26:c2:29:ef:d1:8c:fc:7b:df:32:0e:41:16:02:
93:69:96:43:36:83:ca:da:77:98:33:23:94:e4:24:46:6b:9c:
b8:f0:aa:d4:46:f2:80:0d:d5:6e:d8:90:a5:99:28:dd:a2:42:
66:e5:16:c8:f6:e8:8f:fe:c3:22:31:73:c5:8c:36:7f:50:aa:
02:bf:d2:88:90:56:42:17:38:db:a3:e4:c4:8f:e5:42:a4:3e:
27:34:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org