Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/LuQM5FGiKAYeCxnXIliCjDQxVok.roa
File: LuQM5FGiKAYeCxnXIliCjDQxVok.roa (raw, json)
Hash identifier: 89ry7j2WXz3JdY5AN7SU+NSCo7mPmofis9Nueq4SPE0=
Subject key identifier: 2E:E4:0C:E4:51:A2:28:06:1E:0B:19:D7:22:58:82:8C:34:31:56:89
Certificate issuer: /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial: 02862457
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/LuQM5FGiKAYeCxnXIliCjDQxVok.roa
Signing time: Sat 01 Jan 2022 13:54:38 +0000
ROA not before: Sat 01 Jan 2022 13:54:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48748
IP address blocks: 193.107.132.0/22 maxlen: 22
91.214.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42345559 (0x2862457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Validity
Not Before: Jan 1 13:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ee40ce451a228061e0b19d72258828c34315689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:b6:f0:9c:5b:9f:c2:4a:80:e4:b9:3b:7b:
b5:2e:3e:0e:46:27:28:39:18:7e:87:79:a5:41:81:
ee:ad:47:3f:63:e0:db:3f:dc:c0:a0:63:01:3a:50:
c2:6c:83:ef:d7:81:aa:6e:93:46:f6:5a:ca:94:81:
27:92:52:e3:0d:f5:61:7f:cc:e1:36:6a:3c:1e:1d:
08:b7:af:d5:06:2b:37:eb:bd:95:b9:3b:8a:8c:92:
07:24:7d:77:f6:2e:b6:8d:f2:21:89:01:dc:63:91:
2b:e7:8f:62:17:4a:ee:83:94:aa:f6:ae:2a:bd:23:
ee:80:6e:d7:c6:4d:02:ba:57:77:1c:35:c7:22:db:
5e:73:60:8d:00:80:f5:fc:c6:a2:1d:54:6b:21:76:
a0:02:9c:06:5c:a8:85:c1:61:e2:a2:48:e1:ab:d4:
64:7a:af:ae:c9:72:56:c7:4a:e3:b7:64:7f:5c:02:
98:ac:01:2d:b4:02:ea:16:c9:87:fc:45:c8:75:9a:
db:91:b7:3e:3e:ee:cf:6b:8f:11:7f:19:67:55:9a:
94:19:7e:ef:72:ae:44:45:05:35:c1:a6:6a:70:49:
43:a2:94:d4:f1:29:fd:68:56:f1:76:a9:94:f0:e0:
83:32:0c:23:82:9f:02:72:3e:a3:ca:38:23:75:74:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E4:0C:E4:51:A2:28:06:1E:0B:19:D7:22:58:82:8C:34:31:56:89
X509v3 Authority Key Identifier:
keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/LuQM5FGiKAYeCxnXIliCjDQxVok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.132.0/22
193.107.132.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:05:e8:fc:5c:98:50:a5:d8:b7:1d:68:00:1c:c0:78:e6:3d:
48:4e:00:6e:13:7d:f2:80:07:de:61:93:05:2d:05:b2:a4:fd:
b1:0c:29:3b:2a:2d:7b:be:39:d4:dd:6b:33:37:21:49:96:25:
e9:6f:ee:dc:78:9f:84:c7:5a:08:b5:b8:3a:07:0c:a1:cc:f2:
9d:f4:bb:c2:bb:82:0f:17:00:9c:78:0e:a5:b9:4d:c5:3e:7e:
16:62:2d:66:e3:ab:dc:56:b5:dc:9b:4d:c7:9c:ae:fa:0f:c8:
67:ba:7c:89:11:c0:1d:71:b8:3a:89:91:6b:01:4e:38:fc:0e:
e7:81:d4:67:74:17:df:c0:e6:e0:25:1a:f0:3f:a1:46:47:a3:
b1:1b:73:b9:99:2e:00:9c:bf:5c:74:81:80:e7:6f:e5:13:e3:
4e:fe:61:48:59:07:f3:dd:6c:fa:c5:e9:01:4b:aa:78:e1:32:
af:79:56:e5:bf:bf:bf:ec:67:b1:2f:2e:e9:f6:24:19:85:9f:
6a:2d:28:89:80:35:36:f7:12:08:e4:36:dd:69:76:02:08:c7:
e1:68:e8:b4:2c:76:91:bc:3e:ba:7d:5a:ee:e5:38:60:d8:c4:
38:2d:b1:06:9a:59:26:cc:c4:89:54:96:df:fd:ad:8c:f7:11:
31:fe:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:35 2024 by rpki-client on console-ams.rpki-client.org