Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/LYseoVARHmg8I8SWwL5OaJTohyA.roa
File: LYseoVARHmg8I8SWwL5OaJTohyA.roa (raw, json)
Hash identifier: 1ZvtqC3ITIHFiiobgQx2dczbYg2FdTiLQx3MC4Omhx8=
Subject key identifier: 2D:8B:1E:A1:50:11:1E:68:3C:23:C4:96:C0:BE:4E:68:94:E8:87:20
Certificate issuer: /CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Certificate serial: 039206C0
Authority key identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/LYseoVARHmg8I8SWwL5OaJTohyA.roa
Signing time: Sat 01 Jan 2022 11:03:26 +0000
ROA not before: Sat 01 Jan 2022 11:03:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8788
IP address blocks: 91.205.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59901632 (0x39206c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Validity
Not Before: Jan 1 11:03:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d8b1ea150111e683c23c496c0be4e6894e88720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:c1:00:f4:fe:a4:86:0f:b8:f0:61:f9:73:
e2:9f:2f:95:6c:4e:35:dc:e9:c8:f5:16:bd:9e:9b:
92:b2:71:a7:82:e8:c4:94:31:1a:f7:4d:d8:26:f0:
48:2f:d2:b6:ee:e8:5c:fd:8a:2d:13:99:f1:e7:ac:
42:48:31:90:6c:24:a7:f5:7a:c2:70:b7:30:51:b4:
8d:1e:55:b6:fe:5f:c4:f2:9b:65:a3:e7:39:5c:e2:
56:3e:8d:72:79:2f:94:d0:33:1c:e1:02:61:9c:a3:
09:a8:ad:70:d9:df:5b:c3:e0:38:20:0b:6a:03:70:
8e:f3:89:e0:53:92:8b:49:7d:33:25:f7:9e:06:c8:
d0:8f:15:7a:10:63:e9:cb:08:9e:2a:95:dc:19:37:
24:b9:59:dc:5f:fa:b7:8c:fc:16:b7:f3:2b:a2:de:
85:86:1f:54:c1:60:86:73:95:5e:10:b9:a9:02:71:
ef:4e:ad:59:8f:68:5a:26:73:7a:06:58:b6:53:6c:
d6:92:af:63:1c:1a:47:ad:e2:52:71:3c:3f:f1:98:
1c:c2:2e:5c:99:ea:72:51:54:80:f0:51:be:34:49:
40:34:d1:a0:57:5d:b0:cc:9c:40:6b:46:c9:10:48:
24:ad:dd:04:eb:d2:7d:1b:13:39:86:5d:0e:ce:8f:
4e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8B:1E:A1:50:11:1E:68:3C:23:C4:96:C0:BE:4E:68:94:E8:87:20
X509v3 Authority Key Identifier:
keyid:C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/LYseoVARHmg8I8SWwL5OaJTohyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:6b:0e:fe:79:be:0e:3b:aa:e4:6e:62:a1:01:37:7b:44:76:
db:e3:a0:2c:4c:09:ec:e2:8c:bf:aa:3b:ba:c4:b1:de:66:8e:
ed:c9:37:c3:5a:67:8b:84:cd:e7:0c:6f:7d:1b:f7:db:a7:4b:
10:a0:27:56:0a:a1:2e:b7:e2:95:2f:61:41:d9:df:ad:e8:6e:
9c:95:04:ca:b6:df:7c:be:fd:4f:54:f5:bd:c7:d0:7f:37:7f:
a3:f5:c7:6c:95:d7:f6:f1:fa:1d:ff:a6:aa:14:60:fe:0f:8e:
9a:e8:29:00:8a:5c:97:eb:16:b1:db:4a:d9:cf:65:11:3d:ab:
7b:f0:cf:87:60:97:d4:42:51:9b:0e:fd:4c:ba:b1:bd:e1:ba:
cc:85:08:29:3b:da:47:5f:74:19:79:72:d3:db:a9:b6:eb:3d:
66:51:62:4e:8e:e2:a2:b3:9a:df:2a:7f:d6:ef:e1:95:f0:ea:
62:a8:af:05:dc:5a:06:d5:ef:05:58:3c:db:01:a9:71:d9:b3:
09:9e:11:b1:ca:c1:be:4c:eb:2d:1f:b1:d6:9d:82:de:21:60:
30:69:95:8f:bc:99:28:7f:e2:3b:ff:dd:d4:f7:67:c6:de:b1:
66:a7:88:e3:f3:6d:15:e7:6b:b7:19:9c:09:69:49:60:4b:e7:
a9:c9:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:57 2024 by rpki-client on console-fra.rpki-client.org