Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/lzZJIfKikJ_NefE5l6E9y3mZRa0.roa
File: lzZJIfKikJ_NefE5l6E9y3mZRa0.roa (raw, json)
Hash identifier: o5oiVNveJCYU37CHdjUqtZW5xQgopR+95vm+AAi5hiQ=
Subject key identifier: 97:36:49:21:F2:A2:90:9F:CD:79:F1:39:97:A1:3D:CB:79:99:45:AD
Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial: 01768A
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/lzZJIfKikJ_NefE5l6E9y3mZRa0.roa
Signing time: Thu 31 Mar 2022 19:53:41 +0000
ROA not before: Thu 31 Mar 2022 19:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60764
IP address blocks: 86.62.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95882 (0x1768a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Validity
Not Before: Mar 31 19:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97364921f2a2909fcd79f13997a13dcb799945ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:3c:c6:13:94:16:7a:9b:d0:c6:05:e2:64:
19:f1:16:75:1f:94:ef:28:cc:d4:1e:a8:eb:60:f3:
a7:74:9d:4d:42:f8:be:13:d4:8d:81:de:b2:9c:ca:
9d:a1:11:c6:23:14:d3:59:8f:cb:d7:ed:d8:f6:d8:
42:e0:ac:cc:84:95:c1:52:fc:a2:d1:be:63:7b:1a:
aa:2e:1f:69:7e:d1:59:9b:ad:e1:5c:81:7a:02:17:
20:15:d6:42:94:fc:90:da:4d:12:15:fd:1d:fa:17:
60:70:77:94:98:b5:31:d5:52:7c:fe:49:a2:28:25:
48:9e:fa:4c:e3:34:23:09:b2:db:01:64:cf:67:3d:
71:58:88:75:21:6a:d0:94:d3:43:e1:7b:32:2a:7b:
d6:3e:db:c0:24:25:3a:10:e3:60:b0:33:fb:1c:6f:
07:11:a3:e7:92:1b:3f:2e:a0:6d:76:19:5b:50:c2:
c5:fa:66:41:29:e3:88:26:69:ba:30:64:1e:c4:28:
93:09:8f:b3:fe:8c:2e:5a:86:c7:cc:ac:04:57:3e:
5b:d1:6e:e1:93:97:05:60:6f:ed:60:b9:d2:76:d4:
e7:b0:4e:a4:d8:08:f9:34:8c:55:11:38:ed:fe:78:
a4:a5:79:21:d9:ff:24:35:62:1d:a8:52:b8:64:ec:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:36:49:21:F2:A2:90:9F:CD:79:F1:39:97:A1:3D:CB:79:99:45:AD
X509v3 Authority Key Identifier:
keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/lzZJIfKikJ_NefE5l6E9y3mZRa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.15.0/24
Signature Algorithm: sha256WithRSAEncryption
53:64:42:0c:fe:dc:eb:4e:e1:98:35:7d:5f:b3:d8:41:74:cb:
60:94:16:b7:43:aa:73:e4:05:31:a3:ad:f6:70:ac:cb:fc:62:
cb:73:75:c4:53:b9:52:ad:81:37:7f:8b:ed:dc:89:e1:7d:0b:
4c:56:9c:e5:f7:ba:c5:1f:65:50:f6:4a:dd:be:22:7a:7c:12:
ba:82:f3:ac:7a:e3:c5:bb:c8:7d:47:50:5b:87:1f:f8:df:dc:
db:c6:cd:c6:47:33:4a:f5:8d:0c:30:3a:01:dd:64:88:78:21:
a1:c0:ff:b4:3a:5d:4b:fa:f6:d2:99:f0:35:94:4c:9f:f9:f6:
4e:80:ae:11:f7:9d:51:b4:f5:8c:0e:d0:75:ce:71:3a:34:fd:
98:36:41:98:23:e4:f1:fe:e9:82:da:d8:37:0f:a1:08:da:cb:
74:5b:de:cc:e6:0f:00:20:66:c9:35:da:bc:c1:58:84:a4:53:
f7:2f:14:a5:e3:86:65:72:ab:82:e3:a0:2e:dd:d2:29:a1:f5:
05:ed:f7:41:7b:29:d4:d8:25:ed:1e:f6:88:14:33:fe:34:8d:
3e:37:05:29:02:d0:73:ea:35:e7:60:db:d5:8f:69:91:67:26:
e2:2f:37:c3:53:75:37:1f:57:bd:2d:80:46:0c:51:fd:32:ff:
00:18:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:23 2024 by rpki-client on console-fra.rpki-client.org