Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lZczk2nsU6Q0b1nsUesPJIrt6KM.roa
File: lZczk2nsU6Q0b1nsUesPJIrt6KM.roa (raw, json)
Hash identifier: jmBRw2TOOQllGDRfSlUqSqnZ9fVBbBE7bKzsDmkErGg=
Subject key identifier: 95:97:33:93:69:EC:53:A4:34:6F:59:EC:51:EB:0F:24:8A:ED:E8:A3
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0B30CFDA
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lZczk2nsU6Q0b1nsUesPJIrt6KM.roa
Signing time: Sat 07 May 2022 05:36:31 +0000
ROA not before: Sat 07 May 2022 05:36:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137951
IP address blocks: 213.176.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187748314 (0xb30cfda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 7 05:36:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9597339369ec53a4346f59ec51eb0f248aede8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:a6:be:94:4e:67:2a:43:80:e9:42:18:ed:
ca:ca:db:a8:86:8c:83:09:92:2f:03:42:3d:8e:37:
72:f6:fd:63:31:28:91:37:1a:08:a0:27:55:11:9b:
c3:53:2d:eb:4e:5a:4a:09:ba:86:cf:48:92:76:87:
70:81:99:db:f1:b4:20:e3:fb:e7:43:c9:69:35:5c:
ed:3f:88:c4:58:cb:3d:fe:56:ea:94:2a:2c:0d:b7:
17:6d:19:8a:14:26:ac:a0:ef:a7:1f:40:ff:5d:be:
49:06:a7:77:af:37:3f:65:71:2f:6b:5b:1a:cc:c6:
1b:ee:17:70:7c:3f:6b:9b:df:d4:3e:d9:cc:7d:6f:
0a:82:2c:46:60:53:8f:3f:44:4f:26:eb:51:81:7b:
2f:24:bb:1a:32:16:d2:ef:d6:fd:63:ab:0c:83:d8:
b9:0f:06:7c:81:cb:c4:4b:1a:e6:e6:4b:40:81:be:
20:59:d6:22:80:eb:db:78:9f:f4:f3:87:d6:12:a1:
a2:0f:8e:99:af:00:71:26:d5:4d:53:68:8b:cc:11:
3e:f1:52:3c:b1:a0:4f:99:18:22:52:21:7a:e6:44:
a5:51:2e:00:e5:47:ad:eb:1e:d8:2b:c8:02:d8:56:
6f:bb:05:b6:e1:fd:f3:16:63:d8:fb:7a:65:cf:8a:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:97:33:93:69:EC:53:A4:34:6F:59:EC:51:EB:0F:24:8A:ED:E8:A3
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/lZczk2nsU6Q0b1nsUesPJIrt6KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.91.0/24
Signature Algorithm: sha256WithRSAEncryption
99:82:3d:18:c5:4b:3c:8b:53:11:ac:0c:10:7f:ff:aa:5e:d3:
ff:4e:8e:50:9f:5d:01:91:8f:75:f2:4e:27:f1:82:13:5d:a1:
65:38:fb:78:87:eb:2f:0b:c8:8e:51:0b:58:4a:85:18:0d:0a:
51:ec:54:fb:cc:c8:33:b5:62:d6:ec:9d:a3:94:b7:32:5a:24:
cc:64:25:72:f6:fc:5f:bf:f5:b4:99:44:9e:b5:38:d2:39:0e:
4a:7c:7c:63:b0:d3:da:95:e4:55:66:bb:13:e0:87:3c:c8:b3:
76:d6:65:2c:c8:46:ad:a9:50:78:55:d4:fd:a8:cf:a7:81:0e:
a3:ae:f7:1d:00:7f:5a:07:79:58:2f:88:06:cb:aa:f5:a8:b8:
be:44:e8:7e:89:89:ac:45:28:54:99:dd:92:67:16:dd:03:5a:
fd:80:80:c5:b1:cd:a2:de:c2:0d:ff:30:fe:18:5d:f2:01:34:
0b:3a:97:3b:b1:0a:94:ae:9e:b3:2b:c9:fd:84:80:ad:06:33:
08:a8:59:3b:6f:78:48:a0:7c:63:47:07:64:f7:1d:02:ee:67:
21:ba:d8:ad:be:4f:c6:8b:c0:08:d1:16:d3:6a:c2:3a:56:61:
2c:99:b2:82:74:57:26:cc:9b:21:2e:5d:55:88:6f:cc:81:eb:
ef:31:a8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:35 2023 by rpki-client on console-fra.rpki-client.org