Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/lvS7LMcVgQRzqtCP9ux1Io0NDaQ.roa
File: lvS7LMcVgQRzqtCP9ux1Io0NDaQ.roa (raw, json)
Hash identifier: 9ont0SdmioABCov0mRgcwyt9TkLiT9hBT6465oiaaJQ=
Subject key identifier: 96:F4:BB:2C:C7:15:81:04:73:AA:D0:8F:F6:EC:75:22:8D:0D:0D:A4
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 0351BBB5
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/lvS7LMcVgQRzqtCP9ux1Io0NDaQ.roa
Signing time: Thu 23 Jun 2022 04:57:32 +0000
ROA not before: Thu 23 Jun 2022 04:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 11426
IP address blocks: 141.98.240.0/24 maxlen: 24
141.98.241.0/24 maxlen: 24
193.31.72.0/24 maxlen: 24
193.31.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55688117 (0x351bbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jun 23 04:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96f4bb2cc715810473aad08ff6ec75228d0d0da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6d:7d:34:1b:7f:d9:a9:37:28:22:80:86:02:
37:5e:9f:4a:b2:aa:40:7a:cf:54:8d:da:e5:2c:97:
69:d1:78:14:53:ec:80:de:b0:cc:b4:75:6d:00:81:
c7:16:b9:c0:f0:b0:46:4e:4a:2d:2d:e9:c2:6a:cd:
be:2a:30:f9:4d:eb:e2:3a:12:de:39:dd:10:9d:e4:
e7:8e:31:9c:4d:93:56:be:98:6a:33:61:24:38:b8:
d5:a3:4c:86:16:01:2d:82:ed:ba:55:69:bf:10:29:
5b:28:2c:2d:d8:ab:40:54:b0:39:28:5e:d1:c4:bb:
c3:17:77:cf:45:55:eb:47:bf:13:d7:fa:04:58:1b:
60:a4:90:4c:ad:f6:21:46:04:68:19:f5:40:4c:e7:
aa:45:46:dc:9c:c6:5c:a2:de:b7:b6:e7:81:9c:ed:
c3:51:b4:5c:74:48:e1:93:75:e6:e8:1b:6b:f0:1a:
93:ea:f0:9b:12:09:0b:a9:66:27:ef:20:2e:7f:f5:
58:e9:2d:cb:f7:f7:b1:d6:83:4a:61:9f:05:91:10:
9e:c8:ec:51:c7:3e:d7:22:3b:d5:34:32:b6:b3:b1:
9b:0c:d6:6a:30:76:42:ac:56:5e:f9:87:e9:08:60:
a5:75:6c:da:69:61:52:ab:86:4a:f8:61:b1:ab:86:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F4:BB:2C:C7:15:81:04:73:AA:D0:8F:F6:EC:75:22:8D:0D:0D:A4
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/lvS7LMcVgQRzqtCP9ux1Io0NDaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.240.0/23
193.31.72.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:be:5b:93:21:8a:0f:19:96:40:50:dd:c2:9a:22:36:89:f0:
1d:d4:7a:91:0a:7c:0b:36:bf:b9:77:0c:14:33:eb:48:15:35:
c3:d7:ee:57:ee:d3:fc:aa:d9:4e:d8:80:0c:da:94:94:7f:57:
18:c7:83:d9:ac:d2:77:6b:a5:b2:1a:f0:35:4e:7d:8d:bd:b8:
f0:cb:78:2b:0e:8e:11:72:b9:83:4d:bd:35:5e:6a:e1:05:92:
5c:57:a7:77:33:47:1b:60:8c:18:d1:dc:44:30:78:b0:9e:c1:
8e:b7:d2:e9:94:b0:80:9e:ff:02:70:ca:e8:91:06:d2:22:d3:
06:73:71:da:b4:ef:4f:fd:3b:3a:93:93:82:86:2d:8c:a8:18:
b6:39:01:03:54:7a:91:1c:45:eb:49:b5:ee:c4:ba:31:2f:b8:
b5:7f:ad:fb:c0:8f:db:dc:f0:8c:dd:b1:aa:ea:4f:ac:e8:f4:
01:2f:73:92:a1:67:39:df:55:3b:14:cb:f1:ad:e2:48:05:18:
1b:96:23:43:b4:d6:9f:22:84:40:c5:83:4f:6e:a1:f1:3e:9a:
fb:a8:5e:7a:f9:6c:43:b4:6a:28:e3:ed:82:2f:c1:c5:9c:6d:
06:4d:5a:ed:ec:90:3e:77:b1:2f:62:dc:2d:52:11:ab:e0:5c:
a2:17:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org