Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LxmZAFpEilCTST58QHLTxGRhelc.roa
File: LxmZAFpEilCTST58QHLTxGRhelc.roa (raw, json)
Hash identifier: 52l2ksNjt6/viBMpgs4x8c8HZ0dp7UaYK5vh9Vq4FDg=
Subject key identifier: 2F:19:99:00:5A:44:8A:50:93:49:3E:7C:40:72:D3:C4:64:61:7A:57
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 043ACEC8
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LxmZAFpEilCTST58QHLTxGRhelc.roa
Signing time: Sat 01 Jan 2022 12:05:05 +0000
ROA not before: Sat 01 Jan 2022 12:05:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206422
IP address blocks: 193.233.150.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70962888 (0x43acec8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 12:05:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f1999005a448a5093493e7c4072d3c464617a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:1a:1e:49:35:1c:6b:5b:8c:28:2e:80:76:
69:c8:b2:10:76:81:42:50:2e:d9:08:24:d0:39:39:
ff:19:5f:67:a0:d0:24:41:5f:a3:4c:91:87:b8:08:
bc:ee:f7:01:7f:5c:10:b6:7b:bd:5d:6e:96:ef:9b:
7c:52:3c:8e:e6:a5:3c:96:43:3d:03:69:36:05:ef:
da:64:c0:1a:ae:24:bd:47:4d:b7:bb:ed:40:b5:26:
ae:58:1d:86:de:0a:69:6a:b1:a7:16:04:07:6b:10:
7f:b7:d5:22:cf:03:c3:ff:19:f4:b3:7a:ce:84:7f:
09:6b:b2:f1:03:0d:1c:22:43:18:7e:26:92:71:69:
91:b0:9c:d8:c9:c8:3f:cd:ea:09:48:56:d5:8d:73:
b4:10:18:44:b9:fa:19:51:ef:7c:21:08:9d:cf:54:
7e:c4:3a:84:bf:63:c8:ee:14:2b:b3:6a:07:9a:09:
91:8e:89:c9:e5:90:e0:51:14:cd:3f:2d:19:ed:05:
03:c5:3d:92:3e:8e:d6:10:99:d5:63:08:84:8d:2d:
a6:a6:63:34:8f:a1:b4:21:3a:b1:97:dd:34:f5:74:
5e:ee:20:69:49:b7:cb:39:3d:e9:f1:62:05:29:98:
a1:0d:c4:9f:10:b5:40:a5:e3:1b:61:19:98:7c:25:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:19:99:00:5A:44:8A:50:93:49:3E:7C:40:72:D3:C4:64:61:7A:57
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/LxmZAFpEilCTST58QHLTxGRhelc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.150.0/23
Signature Algorithm: sha256WithRSAEncryption
39:4b:0c:16:2d:2f:c5:ec:c2:2f:76:3a:3c:05:6c:cb:d6:f3:
e1:c7:15:5e:41:89:66:0e:f5:5e:49:d9:36:c7:a6:ec:0c:d2:
22:00:3d:c8:dc:fb:2f:99:b2:de:ff:91:34:36:aa:70:79:50:
c2:cf:a0:c1:ca:17:ea:13:39:f9:92:13:5f:95:e0:c5:1f:78:
07:e0:09:52:19:c0:25:da:92:c2:80:7f:bf:44:16:9d:6d:cd:
9a:89:d6:c3:ee:62:2d:10:16:53:b3:ae:00:02:24:12:36:c9:
b9:d0:50:2f:c1:65:be:6a:6c:ff:9e:4a:cb:39:1b:dd:2f:47:
34:ae:a6:94:67:30:62:f1:02:85:8a:f9:fb:e6:18:04:d5:93:
0c:5b:66:4d:8d:7d:91:35:16:40:7b:45:54:d2:a1:75:dd:6e:
39:70:ff:78:5b:60:f8:0c:b2:f2:0a:d2:de:2c:bc:15:bf:4c:
55:fe:40:97:08:ed:b8:a2:cc:50:c3:7b:52:3b:0c:fe:c5:2c:
92:63:15:a5:a7:05:43:18:93:70:76:d5:5f:0d:08:6d:75:7c:
0b:ad:1b:51:1b:62:0b:8c:81:2c:4d:7a:a0:69:27:7d:e5:a3:
50:43:50:ac:37:8a:1a:5c:37:6a:00:45:6e:a1:79:1c:3f:8b:
b6:8c:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:32 2024 by rpki-client on console-ams.rpki-client.org