Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/LHbu4_-GkyCZThHL_kC9-rMI9iw.roa
File: LHbu4_-GkyCZThHL_kC9-rMI9iw.roa (raw, json)
Hash identifier: Z0o5D65lREk8QPJ5XfhHXSlVGH4XmQxQWEUb67QoveI=
Subject key identifier: 2C:76:EE:E3:FF:86:93:20:99:4E:11:CB:FE:40:BD:FA:B3:08:F6:2C
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 41F9AB7D
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/LHbu4_-GkyCZThHL_kC9-rMI9iw.roa
Signing time: Sat 01 Jan 2022 16:05:08 +0000
ROA not before: Sat 01 Jan 2022 16:05:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204169
IP address blocks: 213.59.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106881405 (0x41f9ab7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 16:05:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c76eee3ff869320994e11cbfe40bdfab308f62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:f6:8f:23:29:0f:d8:d2:1c:44:bf:82:2e:
62:9a:e2:56:24:03:1e:b3:74:e3:06:90:4f:a4:0c:
3b:f8:03:c6:d2:8b:dc:ec:7a:3f:18:d0:9d:ce:82:
fb:2d:c3:5c:52:b9:e8:a8:2b:0c:d5:2c:c9:cd:f5:
ce:48:9f:9a:74:b9:e2:d4:af:00:19:86:09:3a:b1:
50:18:74:7c:67:76:1e:fb:64:8c:5d:1a:9f:43:2f:
cb:fe:fd:b6:64:29:cd:dc:5f:af:8f:4e:e3:2a:65:
08:05:df:86:d7:e1:32:41:a2:02:7d:f9:0a:3f:27:
86:a2:1e:42:38:4e:70:73:08:58:52:cb:a5:d7:b1:
b5:13:53:d3:37:24:cb:44:e4:6a:66:1e:7b:ae:16:
06:9a:4d:e5:d9:65:bb:49:b1:3a:7a:c6:35:6e:f8:
30:52:2d:0b:38:72:62:cd:a2:22:80:78:5e:ef:82:
49:5a:b4:90:97:25:52:3b:45:02:19:c4:fb:10:11:
28:b1:e2:29:2f:04:81:5c:cb:4b:a8:87:cb:6f:f0:
3e:dd:10:66:68:ea:a9:a5:d4:3a:fd:94:60:8c:ae:
03:73:da:ee:c1:78:fd:e2:e5:1a:a4:83:84:43:4e:
50:7d:20:7d:24:49:bd:85:92:f8:d5:09:f1:b4:73:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:EE:E3:FF:86:93:20:99:4E:11:CB:FE:40:BD:FA:B3:08:F6:2C
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/LHbu4_-GkyCZThHL_kC9-rMI9iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.59.184.0/24
Signature Algorithm: sha256WithRSAEncryption
84:29:92:7f:c2:3b:59:c3:f1:ee:c0:77:cf:0a:55:29:cf:96:
cc:ba:39:82:ef:fb:2f:57:3c:92:d4:11:38:81:af:a8:1e:10:
66:f8:33:95:a5:4b:6c:82:d2:74:68:e0:64:a1:46:36:57:da:
3b:b4:75:4d:84:ea:fe:e4:c8:d6:40:49:35:84:ba:2b:ce:57:
9d:69:19:1c:8c:38:14:98:76:c6:5e:35:77:98:be:45:b0:75:
8c:8b:a7:e7:0c:5f:96:0a:e3:f0:8f:76:6a:00:18:2f:51:21:
1f:85:c6:29:f0:90:37:a1:b3:e4:a0:c4:9f:35:b1:aa:77:9e:
2d:15:48:47:60:0a:b3:87:28:3c:1a:83:fa:82:22:54:9d:f2:
52:87:85:b5:7f:61:90:d2:b1:a4:8b:59:82:43:d8:89:b0:6b:
a1:5d:99:d0:c3:03:69:72:85:fe:37:a9:60:a8:60:6e:a8:35:
0b:e6:72:2f:ef:c0:d3:e7:fa:a1:9a:d8:82:c6:d3:38:42:20:
5f:12:03:80:c8:df:e1:58:1d:84:14:35:f2:a5:b1:1a:f8:8c:
f1:5f:12:12:39:7f:fc:a7:a9:5f:ce:21:9d:ea:77:a3:f0:0e:
2e:b9:11:d4:22:77:74:74:15:02:fd:2b:b8:6f:79:61:dc:a2:
af:f2:1c:5d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEQfmrfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MmY0YjFjMGJmYmFkNDZiODExZWVlNTY4YTE4ZmJhYTE0YTlkNjg3MB4XDTIyMDEw
MTE2MDUwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmM3NmVlZTNmZjg2
OTMyMDk5NGUxMWNiZmU0MGJkZmFiMzA4ZjYyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKS+9o8jKQ/Y0hxEv4IuYpriViQDHrN04waQT6QMO/gDxtKL
3Ox6PxjQnc6C+y3DXFK56KgrDNUsyc31zkifmnS54tSvABmGCTqxUBh0fGd2Hvtk
jF0an0Mvy/79tmQpzdxfr49O4yplCAXfhtfhMkGiAn35Cj8nhqIeQjhOcHMIWFLL
pdextRNT0zcky0TkamYee64WBppN5dllu0mxOnrGNW74MFItCzhyYs2iIoB4Xu+C
SVq0kJclUjtFAhnE+xARKLHiKS8EgVzLS6iHy2/wPt0QZmjqqaXUOv2UYIyuA3Pa
7sF4/eLlGqSDhENOUH0gfSRJvYWS+NUJ8bRzx9UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQsdu7j/4aTIJlOEcv+QL36swj2LDAfBgNVHSMEGDAWgBSS9LHAv7rUa4Ee
7laKGPuqFKnWhzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2t2U3h3TC02MUd1Qkh1NVdpaGo3cWhTcDFvYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTIvNGY4NTE0LTJlMjAtNDkzNS05OTVjLWEwODRmNzZjOGUyYi8x
L0xIYnU0Xy1Ha3lDWlRoSExfa0M5LXJNSTlpdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIv
NGY4NTE0LTJlMjAtNDkzNS05OTVjLWEwODRmNzZjOGUyYi8xL2t2U3h3TC02MUd1
Qkh1NVdpaGo3cWhTcDFvYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANU7uDANBgkqhkiG9w0BAQsFAAOC
AQEAhCmSf8I7WcPx7sB3zwpVKc+WzLo5gu/7L1c8ktQROIGvqB4QZvgzlaVLbILS
dGjgZKFGNlfaO7R1TYTq/uTI1kBJNYS6K85XnWkZHIw4FJh2xl41d5i+RbB1jIun
5wxflgrj8I92agAYL1EhH4XGKfCQN6Gz5KDEnzWxqneeLRVIR2AKs4coPBqD+oIi
VJ3yUoeFtX9hkNKxpItZgkPYibBroV2Z0MMDaXKF/jepYKhgbqg1C+ZyL+/A0+f6
oZrYgsbTOEIgXxIDgMjf4VgdhBQ18qWxGviM8V8SEjl//KepX84hnep3o/AOLrkR
1CJ3dHQVAv0ruG95Ydyir/IcXQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:49 2024 by rpki-client on console-fra.rpki-client.org