Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LJaByGRLx_9tlTJulUri9QLNu3Y.roa
File: LJaByGRLx_9tlTJulUri9QLNu3Y.roa (raw, json)
Hash identifier: ygcp2bKy9lSN3GIAwu+N+QW0H//yMirjBgXXbw9vw9c=
Subject key identifier: 2C:96:81:C8:64:4B:C7:FF:6D:95:32:6E:95:4A:E2:F5:02:CD:BB:76
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0183171C45D9D90E109CFE3AEF14ABA7D4B0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LJaByGRLx_9tlTJulUri9QLNu3Y.roa
Signing time: Wed 07 Sep 2022 08:41:12 +0000
ROA not before: Wed 07 Sep 2022 08:41:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6079
IP address blocks: 193.233.108.0/22 maxlen: 24
193.233.118.0/23 maxlen: 23
193.233.116.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:1c:45:d9:d9:0e:10:9c:fe:3a:ef:14:ab:a7:d4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 7 08:41:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c9681c8644bc7ff6d95326e954ae2f502cdbb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:25:d8:27:91:1c:c1:d3:b1:94:2e:37:e4:
d9:e0:b1:c0:96:6b:e6:c3:34:74:33:5a:21:43:f2:
e3:e9:1b:48:5b:88:ea:44:ed:ee:e6:cb:eb:26:df:
10:08:bb:67:c9:c9:3c:41:3e:08:13:48:0e:43:ee:
4f:6b:b7:08:c7:75:76:19:2e:25:30:0f:af:90:b2:
db:35:1e:8b:63:4b:e5:63:7c:c4:a5:06:02:35:04:
6c:f9:2f:2a:20:21:5a:09:e9:41:ab:02:d1:91:85:
c6:d8:de:61:60:c7:19:e6:37:02:6c:7b:e1:be:a0:
ea:ad:3b:71:39:1f:63:84:ec:1b:a7:7a:89:58:99:
be:e4:f8:93:b3:97:aa:e8:bd:63:4b:f1:45:b7:63:
02:17:0a:b8:3d:38:60:ee:5b:6d:4d:0c:3e:f2:89:
63:5f:2d:74:6e:74:57:8e:27:1c:a1:34:a6:0d:fa:
05:ad:7f:22:b8:30:fe:59:48:f7:38:72:a2:82:62:
64:dc:39:8e:8d:cb:05:9a:67:81:f2:ec:5f:a6:36:
98:6e:ac:69:cd:aa:44:8b:23:a5:e2:c8:f0:fa:e6:
31:8e:5d:c8:1d:92:f8:1c:3c:c3:8c:8d:3d:db:1e:
2d:e6:ee:30:b3:e6:ca:2b:ef:6e:26:73:07:a1:0d:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:96:81:C8:64:4B:C7:FF:6D:95:32:6E:95:4A:E2:F5:02:CD:BB:76
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LJaByGRLx_9tlTJulUri9QLNu3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.108.0/22
193.233.116.0/22
Signature Algorithm: sha256WithRSAEncryption
39:1e:40:ba:53:34:41:3c:7a:d1:82:bb:46:88:d3:33:1f:ca:
1c:f9:3d:7f:8d:b7:49:ce:29:93:02:31:2a:17:c0:b2:bd:80:
0f:0f:87:a0:e0:98:48:31:b1:c9:7b:e6:f7:7c:a3:a3:8a:18:
7d:60:5a:07:d5:f9:d2:ff:17:c4:78:a7:6e:ca:18:2c:dc:ee:
8e:cf:78:37:43:95:56:65:f0:d0:c4:6a:7b:67:1b:ef:11:6f:
19:28:2d:ca:f6:01:bc:16:a0:c4:33:76:aa:45:37:6b:b6:e6:
a9:4d:9f:c5:72:1a:07:1a:b9:9a:f2:6e:95:cc:f5:6e:a8:79:
64:af:0e:ff:64:fa:e0:87:f3:81:3c:e0:5e:f1:dc:59:90:ea:
32:47:b3:cb:a6:32:ad:f5:a9:0b:40:c3:8f:a6:1f:98:c3:b1:
50:87:2f:fc:d4:dc:1d:b2:2a:d9:bd:3a:b7:1c:d5:16:14:00:
9b:16:ee:3e:23:60:de:ab:cc:05:b4:d4:00:e2:a8:a3:c0:e4:
9c:e4:2c:5d:25:97:9a:3f:0b:83:a4:b4:3a:3a:b6:cd:d8:a7:
50:11:e4:a1:9a:33:af:7f:04:74:0f:f9:b7:32:fc:2d:af:e3:
a8:2e:c0:94:24:db:a9:eb:3d:a4:34:01:24:b4:a6:e3:ed:80:
77:94:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org