Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/lbXk5cEuyEDqy4SixfLwi3DCWjo.roa
File: lbXk5cEuyEDqy4SixfLwi3DCWjo.roa (raw, json)
Hash identifier: JxSsEaorZavHqPxK6Y6j5jf6TkZ/eVwcmZuu+ZhtSKo=
Subject key identifier: 95:B5:E4:E5:C1:2E:C8:40:EA:CB:84:A2:C5:F2:F0:8B:70:C2:5A:3A
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 04382AC6
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/lbXk5cEuyEDqy4SixfLwi3DCWjo.roa
Signing time: Mon 28 Feb 2022 13:55:35 +0000
ROA not before: Mon 28 Feb 2022 13:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201381
IP address blocks: 85.91.107.0/24 maxlen: 24
84.47.167.0/24 maxlen: 24
85.91.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70789830 (0x4382ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Feb 28 13:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95b5e4e5c12ec840eacb84a2c5f2f08b70c25a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:a2:0d:b2:c0:4b:c7:b5:69:be:2b:ee:c0:
6f:42:a7:8e:a1:5a:66:59:b3:14:2d:c2:a5:16:4f:
98:cb:13:4f:f8:47:b9:b4:67:a4:1a:ff:52:35:e2:
4c:18:a5:93:7b:9b:70:a3:b0:9a:53:2e:2f:50:3a:
59:8e:81:e9:ef:98:0c:77:61:08:97:33:f9:96:5b:
67:f8:67:b2:5c:a2:e9:c2:9b:60:92:40:10:24:c1:
c8:90:39:f2:0d:48:ab:46:2a:1c:9a:eb:14:01:2d:
14:08:fa:24:ab:7f:a8:b8:32:1a:03:1b:13:90:56:
fc:68:b4:45:84:75:70:98:3a:2d:dc:1b:a2:fd:c3:
0e:a7:c4:2e:f3:20:52:38:95:be:39:6a:d0:a4:39:
c5:b2:bc:33:3d:4a:36:c5:91:26:00:da:d0:9e:b7:
63:95:17:36:d6:93:4f:72:fb:2f:c9:66:6d:35:91:
93:a8:3a:a2:d4:9b:1c:0c:a1:74:e0:73:34:ef:a4:
b8:6c:3d:48:ee:63:99:0e:d1:d4:b9:0a:5d:33:99:
b6:60:18:77:12:84:32:a3:ff:0f:82:f4:63:38:3e:
37:99:56:55:4d:24:db:5b:d5:03:db:4a:11:14:07:
8a:bb:55:cc:97:58:eb:ac:25:ac:af:fe:5e:e9:35:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B5:E4:E5:C1:2E:C8:40:EA:CB:84:A2:C5:F2:F0:8B:70:C2:5A:3A
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/lbXk5cEuyEDqy4SixfLwi3DCWjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.167.0/24
85.91.107.0/24
85.91.123.0/24
Signature Algorithm: sha256WithRSAEncryption
93:98:61:d5:b5:6a:33:af:5f:27:7f:6d:11:8d:4c:9c:51:32:
f3:c2:e3:58:25:06:7a:5b:bb:44:18:72:ea:15:f1:d2:a1:50:
a9:98:c8:37:19:2f:00:b4:ed:80:e6:f6:3c:ee:63:fb:89:81:
bc:02:89:27:10:fd:c5:1d:91:df:8a:23:3e:d5:f9:88:b4:b4:
c4:89:18:2e:f0:bf:c6:1b:ac:61:16:cb:27:f1:7c:c2:0d:3b:
3f:4e:65:5e:54:23:fd:af:47:6e:a8:a2:76:b0:8e:22:22:7e:
e2:de:52:87:9b:87:10:65:25:3b:83:7c:9d:25:bb:ab:4c:14:
69:62:d9:f4:73:e5:f3:21:0b:d5:5d:12:a7:44:ad:c1:aa:f0:
cd:fe:09:0d:eb:e7:3a:32:bc:e5:d8:6c:db:f0:95:0f:68:b4:
a0:6e:34:b5:e9:d1:e1:fa:d1:eb:d1:28:41:51:ec:65:f0:a8:
5e:8b:b7:6b:d8:0b:c7:1e:fa:71:86:c3:bf:79:3b:72:21:bc:
16:83:8a:7f:10:c7:a1:3d:f2:ba:62:66:a7:d4:10:0c:26:a9:
16:0a:cb:1c:7f:d9:59:77:88:91:81:f6:e8:b3:24:39:26:e4:
d3:d7:c7:a0:d0:a8:eb:33:c7:1b:b8:8a:41:df:27:c2:60:7e:
76:71:68:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org