Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/LEzP6IGwAFJzSICxHoP5gBSoBqg.roa
File: LEzP6IGwAFJzSICxHoP5gBSoBqg.roa (raw, json)
Hash identifier: MPVT029N42iVOgbAjb0Fw5nL4XtkQ8QeN13M35MJCTw=
Subject key identifier: 2C:4C:CF:E8:81:B0:00:52:73:48:80:B1:1E:83:F9:80:14:A8:06:A8
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 01826E367F7692676640C4C4366ED238E9E4
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/LEzP6IGwAFJzSICxHoP5gBSoBqg.roa
Signing time: Fri 05 Aug 2022 13:34:01 +0000
ROA not before: Fri 05 Aug 2022 13:34:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 91.194.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6e:36:7f:76:92:67:66:40:c4:c4:36:6e:d2:38:e9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Aug 5 13:34:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c4ccfe881b00052734880b11e83f98014a806a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:63:ad:99:08:05:88:d3:ca:0f:42:53:bc:c4:
03:ac:68:78:87:50:fd:8f:e7:8e:52:62:dc:2c:93:
72:b1:20:ff:95:73:1d:ac:0f:65:20:cb:46:19:8e:
99:ac:d6:fa:73:7a:cd:7d:16:70:10:c2:31:69:79:
43:c5:73:33:29:15:7f:22:e2:89:6f:ba:90:bf:d1:
61:5a:3c:94:e3:9e:61:13:35:6b:56:e4:19:88:e4:
0e:9b:5d:51:ea:3f:a4:1a:9d:7d:d1:b1:f7:dd:cd:
fe:6f:47:7d:33:3e:9a:2b:52:2f:d8:65:f8:b5:92:
65:bc:b2:a4:64:ee:90:fa:18:5f:7e:43:b0:91:bf:
7b:b3:d7:ed:da:87:16:0d:93:e2:0b:b3:bd:c6:1c:
a1:11:e7:09:d1:97:5c:a3:f6:af:3e:bf:cd:3c:4f:
43:b2:2e:3e:b7:b4:7e:55:71:58:6f:4d:81:96:65:
18:ec:4c:07:ab:62:78:2a:97:14:06:83:e0:43:56:
43:6c:c8:5e:82:64:0a:eb:14:90:ec:1e:9e:6e:13:
bc:cd:86:a3:99:c6:7d:b7:d9:41:88:a0:51:de:3b:
b1:ce:63:b8:97:a6:a8:14:ee:d3:c1:be:88:40:98:
1c:32:2e:55:df:cf:0c:50:4b:45:cb:17:30:15:13:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4C:CF:E8:81:B0:00:52:73:48:80:B1:1E:83:F9:80:14:A8:06:A8
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/LEzP6IGwAFJzSICxHoP5gBSoBqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.237.0/24
Signature Algorithm: sha256WithRSAEncryption
78:88:9a:ae:a3:38:64:95:d3:bf:65:74:1c:18:01:84:48:58:
7f:da:5e:4e:eb:96:2b:ba:b0:55:8f:b5:a8:46:8d:6c:ee:1e:
e8:21:4a:83:52:6f:20:c1:fb:b6:1f:39:db:00:82:39:b2:17:
c1:fb:43:98:ad:91:97:55:8f:cc:f7:44:93:7c:d4:b0:5a:88:
56:53:fe:6e:ff:d8:e1:d3:8a:66:26:f5:ce:df:6d:4e:b0:36:
97:6c:9d:b2:aa:6a:95:ee:73:a4:a9:e4:72:96:9e:11:9a:d9:
82:4a:2f:97:1b:1b:51:94:a5:29:02:e8:8b:17:23:ee:dd:ee:
01:2b:81:7a:8d:f7:7d:83:0b:6c:ba:8e:64:2e:73:aa:b4:e7:
fd:51:8b:a1:bb:ba:4a:52:b5:fb:9c:a6:33:68:15:ae:55:4b:
d3:c6:d9:8d:09:cc:dc:1c:ed:f0:42:26:b1:54:bd:70:e2:36:
16:8a:e2:e6:3e:f0:85:82:36:f9:5b:0b:9c:71:c4:1e:dc:65:
9c:f8:51:8d:de:d0:6e:9e:78:95:4f:9b:a8:26:5c:a1:1a:42:
f7:84:d6:c9:b3:97:fe:89:5e:84:4c:c1:9f:9f:ef:df:48:7e:
04:a6:37:c9:4d:5c:36:21:be:68:3f:59:ab:54:bc:0c:da:86:
d8:14:d9:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJuNn92kmdmQMTENm7SOOnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzAzMTU4YWVkODExNjFkNGY1N2MxNzQyZDQ2MDgzNDE3
M2E3OWUwHhcNMjIwODA1MTMzNDAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzRjY2ZlODgxYjAwMDUyNzM0ODgwYjExZTgzZjk4MDE0YTgwNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WOtmQgFiNPKD0JTvMQDrGh4h1D9
j+eOUmLcLJNysSD/lXMdrA9lIMtGGY6ZrNb6c3rNfRZwEMIxaXlDxXMzKRV/IuKJ
b7qQv9FhWjyU455hEzVrVuQZiOQOm11R6j+kGp190bH33c3+b0d9Mz6aK1Iv2GX4
tZJlvLKkZO6Q+hhffkOwkb97s9ft2ocWDZPiC7O9xhyhEecJ0Zdco/avPr/NPE9D
si4+t7R+VXFYb02BlmUY7EwHq2J4KpcUBoPgQ1ZDbMhegmQK6xSQ7B6ebhO8zYaj
mcZ9t9lBiKBR3juxzmO4l6aoFO7Twb6IQJgcMi5V388MUEtFyxcwFRMB3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCxMz+iBsABSc0iAsR6D+YAUqAaoMB8GA1UdIwQY
MBaAFKPAMViu2BFh1PV8F0LUYINBc6eeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iNjY0MjktNGYyMC00YjkwLWE2Yjgt
NGMxMGUzMzYwNTc3LzEvTEV6UDZJR3dBRkp6U0lDeEhvUDVnQlNvQnFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iNjY0MjktNGYyMC00YjkwLWE2YjgtNGMxMGUzMzYwNTc3
LzEvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8LtMA0G
CSqGSIb3DQEBCwUAA4IBAQB4iJquozhkldO/ZXQcGAGESFh/2l5O65YrurBVj7Wo
Ro1s7h7oIUqDUm8gwfu2HznbAII5shfB+0OYrZGXVY/M90STfNSwWohWU/5u/9jh
04pmJvXO321OsDaXbJ2yqmqV7nOkqeRylp4RmtmCSi+XGxtRlKUpAuiLFyPu3e4B
K4F6jfd9gwtsuo5kLnOqtOf9UYuhu7pKUrX7nKYzaBWuVUvTxtmNCczcHO3wQiax
VL1w4jYWiuLmPvCFgjb5WwucccQe3GWc+FGN3tBunniVT5uoJlyhGkL3hNbJs5f+
iV6ETMGfn+/fSH4EpjfJTVw2Ib5oP1mrVLwM2obYFNn0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:22 2024 by rpki-client on console-ams.rpki-client.org