Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/lkNYWCps5_FFd8l0jrslZiFL_sE.roa
File: lkNYWCps5_FFd8l0jrslZiFL_sE.roa (raw, json)
Hash identifier: wvJPUhvj8SMxPF5Ev+754vXiRzzzpsI77bRythHeEOQ=
Subject key identifier: 96:43:58:58:2A:6C:E7:F1:45:77:C9:74:8E:BB:25:66:21:4B:FE:C1
Certificate issuer: /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial: 091D8711
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/lkNYWCps5_FFd8l0jrslZiFL_sE.roa
Signing time: Sat 01 Jan 2022 10:01:25 +0000
ROA not before: Sat 01 Jan 2022 10:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29236
IP address blocks: 194.55.159.0/24 maxlen: 24
2001:67c:2d28::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152930065 (0x91d8711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Validity
Not Before: Jan 1 10:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=964358582a6ce7f14577c9748ebb2566214bfec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:23:1c:f1:ec:7b:6a:a2:9b:f3:cd:05:a6:
bf:93:4b:00:a2:20:ad:1a:d0:2c:2a:c0:55:00:6b:
f7:aa:de:bb:05:a1:cb:27:42:4f:04:75:d7:8a:01:
7d:06:7c:c9:e2:3e:dc:26:97:9c:50:93:d8:54:93:
01:bd:e8:a1:47:03:6f:df:22:de:bb:68:05:1d:69:
07:39:49:3b:2a:3d:c1:ed:06:93:dc:8b:e6:5b:bc:
ae:ca:b1:6c:8a:3d:c0:80:36:db:34:23:90:5f:d7:
a6:57:5d:84:3b:d5:18:81:be:c3:db:95:8c:6c:b3:
77:b9:b3:8e:ad:a0:6b:3c:08:1c:05:89:e0:54:66:
2f:b0:1c:6c:a4:f4:43:ec:18:dd:28:d7:92:27:16:
16:89:52:f6:71:8f:f3:99:02:12:89:cb:6a:19:ee:
01:f6:88:a4:e0:ad:ca:a7:26:61:f5:02:d2:4b:16:
88:39:fd:ea:d1:15:5a:c1:cd:5f:98:33:88:d0:f7:
02:40:5d:1c:8c:07:2e:88:20:92:61:0b:5c:98:33:
5c:d0:1e:cb:9c:7f:11:4a:47:14:22:51:f3:64:f4:
fa:46:ce:3e:62:92:61:ab:8d:1e:03:a5:69:58:e7:
d8:08:bd:e5:cb:a4:8c:3c:c1:3c:b3:3c:84:a2:ac:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:43:58:58:2A:6C:E7:F1:45:77:C9:74:8E:BB:25:66:21:4B:FE:C1
X509v3 Authority Key Identifier:
keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/lkNYWCps5_FFd8l0jrslZiFL_sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.159.0/24
IPv6:
2001:67c:2d28::/48
Signature Algorithm: sha256WithRSAEncryption
a9:7c:40:0b:bc:15:ed:98:9f:0c:4d:de:a1:c6:04:cd:7d:2f:
5b:73:50:15:3f:a0:ef:8f:6d:1a:e2:d7:3d:bd:84:45:4b:1e:
53:01:3a:8f:cc:a7:f1:6e:11:6a:ca:0f:95:ef:88:e7:84:69:
a5:f6:7c:f0:e4:1e:df:f3:17:53:5c:d7:70:c6:70:47:f6:5c:
b6:e1:38:5a:4e:9e:4c:3b:85:29:99:37:bf:4b:1f:27:cf:bb:
45:3b:80:87:d3:84:1b:a7:e0:c1:b6:83:d1:e2:5f:b9:30:27:
fa:a0:55:7d:c2:3d:32:be:1e:c7:95:d4:6e:3d:40:92:29:06:
86:dd:c5:ea:00:e3:e7:08:6f:eb:8c:ac:07:33:86:47:a9:45:
31:0c:77:7d:04:bb:02:ac:12:f1:ff:c6:06:7d:49:fb:f3:bb:
06:35:cf:24:fc:0d:6e:b2:bf:16:55:6f:54:39:d1:b0:af:24:
66:c7:c5:64:92:b6:f6:52:e0:82:2a:3a:ba:40:2a:d4:20:7a:
65:75:ca:fe:6b:6c:48:64:2d:70:8e:b8:c9:0e:5d:d2:27:c3:
1d:63:37:bd:e7:77:2c:2c:04:e9:4b:7d:61:b4:63:3e:d4:c7:
04:75:51:4e:ba:b3:db:17:92:0b:b4:e2:ba:71:22:34:ca:b5:
75:4f:a9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:33 2024 by rpki-client on console-fra.rpki-client.org