Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/LBE6HMWKVMcF5u93_FjeF2bSEN8.roa
File: LBE6HMWKVMcF5u93_FjeF2bSEN8.roa (raw, json)
Hash identifier: NZ/NvuyfXHf4U0U3iG16kEDLQkKg6whl4NVypI3/kiM=
Subject key identifier: 2C:11:3A:1C:C5:8A:54:C7:05:E6:EF:77:FC:58:DE:17:66:D2:10:DF
Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial: 0978E5BE
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/LBE6HMWKVMcF5u93_FjeF2bSEN8.roa
Signing time: Sat 01 Jan 2022 08:04:35 +0000
ROA not before: Sat 01 Jan 2022 08:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56813
IP address blocks: 91.237.88.0/23 maxlen: 24
2001:67c:299c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158918078 (0x978e5be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Validity
Not Before: Jan 1 08:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c113a1cc58a54c705e6ef77fc58de1766d210df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:48:0a:c5:f2:5a:7d:c9:83:82:1e:f0:a6:9c:
b5:2f:79:da:17:c7:e1:16:ce:95:e9:92:1e:73:cd:
a2:da:de:b4:86:60:0c:92:54:75:86:59:50:e4:56:
8d:8f:c4:79:23:f1:8c:e6:d7:82:0a:4d:2d:10:36:
19:34:b1:ac:88:24:38:63:58:22:b7:1f:31:f0:80:
8e:68:5b:38:50:2a:7c:46:64:29:dd:a8:4b:b2:f9:
90:77:3a:49:40:74:d1:03:82:34:80:26:07:09:08:
38:6d:e6:08:08:7c:d2:e5:e1:1b:1f:9e:38:e3:45:
d5:ca:37:b1:27:09:3a:b2:38:95:3f:36:c6:67:6c:
f5:cb:31:a6:01:e5:49:84:48:1f:f7:67:bc:d8:08:
3d:b8:30:c1:19:d5:ab:d7:39:6a:65:20:fe:63:04:
f0:56:f5:fa:fd:f5:5d:ca:e4:98:2c:54:7c:a8:f4:
e7:97:91:29:9b:bf:2a:b3:9c:95:53:3c:9a:44:f5:
4c:a7:d7:91:e5:92:ed:fa:59:03:f0:6a:1b:cc:97:
07:77:39:96:4f:07:ce:0a:b6:e7:6f:e9:13:e0:5c:
0c:b8:1f:37:ac:36:8e:62:06:47:32:3f:4f:5c:93:
2c:15:54:da:21:e4:c9:31:f8:39:3d:28:ac:3b:b1:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:11:3A:1C:C5:8A:54:C7:05:E6:EF:77:FC:58:DE:17:66:D2:10:DF
X509v3 Authority Key Identifier:
keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/LBE6HMWKVMcF5u93_FjeF2bSEN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.88.0/23
IPv6:
2001:67c:299c::/48
Signature Algorithm: sha256WithRSAEncryption
b5:44:a8:24:2b:40:f9:83:04:f5:70:25:c6:98:32:22:f8:29:
94:b2:aa:eb:13:d3:b6:e3:f3:98:e3:47:6c:e9:fb:cd:2f:98:
de:51:7a:a4:da:d5:60:bb:b3:59:80:53:cb:fb:32:14:92:f0:
6f:0c:c6:3e:cc:5b:60:fa:c1:37:9d:11:6a:a8:01:14:13:5d:
0c:4c:63:69:5d:ef:cc:e4:2e:af:f6:cb:83:ed:16:60:1a:2b:
7e:bc:68:df:d0:e5:a4:b8:7e:37:d8:6c:c9:f5:80:8b:90:f9:
b1:20:3a:92:24:c7:ef:a7:98:a2:f0:8c:d3:0c:80:bd:ca:94:
86:90:ea:6a:71:2f:b2:a7:2a:65:1d:95:cb:89:30:bb:e1:ad:
d4:1f:01:e9:e6:01:2f:66:a2:ad:47:1d:79:c4:b2:74:d1:e7:
10:83:95:ba:45:79:52:17:dc:0f:4c:06:d6:11:59:d3:c8:d8:
0b:05:04:4a:2e:88:53:16:da:6a:f6:39:26:31:3b:7d:53:ea:
7d:9b:18:5d:f9:f5:08:db:94:b7:56:39:c5:0d:5f:db:7d:f9:
ba:06:9d:dd:be:c9:4d:ab:91:d5:9e:55:9c:5a:bf:84:45:2f:
ac:57:f0:3b:dc:e2:c0:d3:1f:6e:b3:4c:ed:45:3e:28:1c:23:
cd:ce:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:09 2024 by rpki-client on console-ams.rpki-client.org