Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/LuXIdKyS4Pd93X3GQuH6PxGkVT0.roa
File: LuXIdKyS4Pd93X3GQuH6PxGkVT0.roa (raw, json)
Hash identifier: S4WOfDVyrV6rWTRlugbWudKnf4mPv9Tm4MA0OlDAPKM=
Subject key identifier: 2E:E5:C8:74:AC:92:E0:F7:7D:DD:7D:C6:42:E1:FA:3F:11:A4:55:3D
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B685F3B
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/LuXIdKyS4Pd93X3GQuH6PxGkVT0.roa
Signing time: Sat 01 Jan 2022 08:58:43 +0000
ROA not before: Sat 01 Jan 2022 08:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61418
IP address blocks: 195.87.95.0/24 maxlen: 24
195.87.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191389499 (0xb685f3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ee5c874ac92e0f77ddd7dc642e1fa3f11a4553d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:c7:1b:8b:fc:eb:78:75:f8:e5:b6:a2:70:
45:37:fe:44:60:64:20:5e:85:da:80:e1:3f:76:5d:
f8:36:18:c6:dd:09:30:ac:83:a7:ed:23:7b:71:31:
69:c5:77:ef:9e:76:e8:e6:e6:91:b8:e6:33:cd:05:
79:87:7e:15:8e:3e:1d:f2:35:95:44:74:0b:85:18:
f3:2d:69:0a:2b:3d:20:6c:ed:e4:5e:d3:53:88:5f:
e1:66:0e:9d:a8:2c:bf:0d:dd:7d:c1:10:98:ea:95:
c9:59:18:49:b6:ee:65:fd:81:5d:cd:63:3c:66:e3:
98:a8:05:fc:5e:f9:f4:da:d1:d4:6d:42:e2:98:bd:
5f:2b:a5:ea:81:63:1e:37:85:52:d6:da:7a:16:06:
d2:1f:66:d6:87:42:90:31:96:7d:a6:9e:32:8c:58:
0d:10:d0:15:3d:9e:e5:87:9a:d7:a0:ca:72:e8:a3:
62:f4:43:a2:04:17:e0:d6:9b:8b:04:85:4f:33:71:
6a:4a:eb:df:8d:c3:c8:99:9f:6d:da:40:37:bc:92:
24:f1:79:2c:02:05:3f:d4:c1:c5:56:ce:65:23:b1:
56:83:4b:0d:93:0e:76:36:b6:2a:c1:e6:a9:a6:f4:
5a:d2:57:a4:ed:65:72:8b:f7:77:19:8d:3b:fc:55:
90:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E5:C8:74:AC:92:E0:F7:7D:DD:7D:C6:42:E1:FA:3F:11:A4:55:3D
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/LuXIdKyS4Pd93X3GQuH6PxGkVT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.87.95.0/24
195.87.125.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ed:ae:05:4c:5b:42:eb:73:30:11:39:af:7a:8f:ad:16:b8:
4a:b9:67:2b:51:35:bf:1c:cc:b2:08:a0:01:79:b9:b6:4a:72:
42:8a:ff:13:cf:75:d5:f5:27:86:0c:58:22:63:ec:7a:7b:56:
d2:6d:3b:ed:c5:5c:fc:81:c3:68:43:78:81:9c:d3:1e:e2:d2:
c5:17:a8:8a:35:1e:1a:46:8c:01:2d:c4:d5:c1:ab:45:8e:d0:
6c:cf:fb:d1:33:11:23:7f:aa:f5:e6:51:45:0f:58:d0:47:61:
85:a6:30:0d:fa:3a:3f:8e:d0:f5:6d:54:77:a8:59:b3:19:be:
b7:12:7c:19:4b:86:81:c9:09:57:ef:52:eb:5a:fb:57:05:d5:
99:f6:26:95:7b:a3:30:46:eb:21:2c:ec:2d:47:47:a4:7c:d8:
98:bd:05:6b:83:f9:af:4c:03:dc:5a:c5:d7:a6:d5:c9:03:fa:
96:44:94:d7:e6:2c:a2:a5:b1:12:3a:a2:e1:ef:0e:f5:e0:53:
b6:44:1c:25:23:12:d2:28:3c:de:90:ea:8a:7d:c9:8d:5f:d7:
10:e4:8e:8c:c6:19:22:d8:49:4f:29:ef:de:2c:5a:d7:9d:10:
a0:51:cd:da:95:4f:43:a0:5a:2d:fa:e4:af:18:e5:2a:7e:3a:
eb:4d:e8:54
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEC2hfOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NjhmZTM1Y2M5NjI2MzNhMjc1N2FmMTBhMGU2ZThhYjZkMDFmNGM5MB4XDTIyMDEw
MTA4NTg0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmVlNWM4NzRhYzky
ZTBmNzdkZGQ3ZGM2NDJlMWZhM2YxMWE0NTUzZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALCsxxuL/Ot4dfjltqJwRTf+RGBkIF6F2oDhP3Zd+DYYxt0J
MKyDp+0je3ExacV375526ObmkbjmM80FeYd+FY4+HfI1lUR0C4UY8y1pCis9IGzt
5F7TU4hf4WYOnagsvw3dfcEQmOqVyVkYSbbuZf2BXc1jPGbjmKgF/F759NrR1G1C
4pi9Xyul6oFjHjeFUtbaehYG0h9m1odCkDGWfaaeMoxYDRDQFT2e5Yea16DKcuij
YvRDogQX4NabiwSFTzNxakrr343DyJmfbdpAN7ySJPF5LAIFP9TBxVbOZSOxVoNL
DZMOdja2KsHmqab0WtJXpO1lcov3dxmNO/xVkPcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQu5ch0rJLg933dfcZC4fo/EaRVPTAfBgNVHSMEGDAWgBRWj+NcyWJjOidX
rxCg5uirbQH0yTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZvX2pYTWxpWXpvblY2OFFvT2JvcTIwQjlNay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvMzdlYmU2LThiZmUtNGMxZi1hMTgzLTgzZDY0OGY3OTc0Ni8x
L0x1WElkS3lTNFBkOTNYM0dRdUg2UHhHa1ZUMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
MzdlYmU2LThiZmUtNGMxZi1hMTgzLTgzZDY0OGY3OTc0Ni8xL1ZvX2pYTWxpWXpv
blY2OFFvT2JvcTIwQjlNay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMNXXwMEAMNXfTANBgkqhkiG9w0B
AQsFAAOCAQEAQ+2uBUxbQutzMBE5r3qPrRa4SrlnK1E1vxzMsgigAXm5tkpyQor/
E8911fUnhgxYImPsentW0m077cVc/IHDaEN4gZzTHuLSxReoijUeGkaMAS3E1cGr
RY7QbM/70TMRI3+q9eZRRQ9Y0EdhhaYwDfo6P47Q9W1Ud6hZsxm+txJ8GUuGgckJ
V+9S61r7VwXVmfYmlXujMEbrISzsLUdHpHzYmL0Fa4P5r0wD3FrF16bVyQP6lkSU
1+YsoqWxEjqi4e8O9eBTtkQcJSMS0ig83pDqin3JjV/XEOSOjMYZIthJTynv3ixa
150QoFHN2pVPQ6BaLfrkrxjlKn46603oVA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org