Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/lfiP3rOk36yPEKPOh7Oi1weSzAE.roa
File: lfiP3rOk36yPEKPOh7Oi1weSzAE.roa (raw, json)
Hash identifier: S8PeJScW2cj7kWqCZCfyMgwQVRR/IBSzahqfmsobCg8=
Subject key identifier: 95:F8:8F:DE:B3:A4:DF:AC:8F:10:A3:CE:87:B3:A2:D7:07:92:CC:01
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 486999B2
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/lfiP3rOk36yPEKPOh7Oi1weSzAE.roa
Signing time: Sat 01 Jan 2022 03:00:28 +0000
ROA not before: Sat 01 Jan 2022 03:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 146.185.235.0/24 maxlen: 24
5.188.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214880178 (0x486999b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95f88fdeb3a4dfac8f10a3ce87b3a2d70792cc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:b1:3b:8b:0c:06:59:29:c0:32:6b:f7:ba:
69:9a:e0:24:57:82:27:7a:a3:92:4f:48:89:7b:dd:
30:21:af:1f:ba:d3:9e:72:2e:82:cd:0d:d2:a0:87:
ec:62:42:0b:8c:55:55:56:07:cf:ad:09:03:a4:e5:
04:fa:e0:e8:8d:ef:0a:d4:51:8b:07:a5:c6:45:e7:
b8:b3:b1:b1:f5:3c:5d:13:b9:68:3e:03:f2:fc:00:
82:f7:65:cf:f7:37:92:44:cf:86:f4:0d:e9:6a:32:
c9:24:0e:55:08:b0:f4:a4:0b:0c:2d:32:55:77:a0:
88:42:00:6e:18:69:e9:46:8d:16:8e:3d:7c:f1:6b:
49:9d:83:1f:f9:c2:0d:5a:33:c4:5a:a7:6e:05:9e:
a4:a4:9c:d5:cd:0c:10:8e:39:aa:b6:ee:d8:e6:c8:
c5:31:8e:8e:70:13:1d:07:72:7b:0a:fd:ea:d9:0c:
b6:1b:a8:df:8d:a6:a9:7c:12:0f:3d:f2:12:52:d6:
a3:7a:93:11:a7:7a:78:be:a0:3c:00:42:b3:53:88:
d5:d5:f3:53:44:63:3a:c5:45:36:44:52:5a:8e:34:
ec:b5:a1:fb:af:cf:ba:d5:64:2c:55:53:4b:12:23:
1d:1e:75:c9:63:71:aa:67:f8:c4:0f:03:21:c0:84:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F8:8F:DE:B3:A4:DF:AC:8F:10:A3:CE:87:B3:A2:D7:07:92:CC:01
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/lfiP3rOk36yPEKPOh7Oi1weSzAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.232.0/24
146.185.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:bf:46:24:fb:4f:af:23:eb:9f:c7:ab:b9:a6:83:06:23:27:
87:96:be:ad:48:ee:d7:0a:f3:89:95:a3:f8:a8:4f:8e:fd:bd:
6b:20:ed:1f:58:16:5c:64:5f:ed:35:3c:fb:7c:a4:96:ec:88:
d9:9f:e1:cf:68:cb:b7:da:37:58:ca:0d:49:f6:69:ed:b8:b6:
75:bb:4c:83:41:f7:60:48:62:6f:95:b5:78:b6:1c:5e:49:b1:
a8:84:d0:14:3c:13:17:a6:88:11:9b:93:21:91:37:f4:50:b4:
23:ba:6f:de:26:40:8d:7c:f2:4a:50:53:2f:50:d6:b0:07:76:
e7:90:24:9c:9f:22:4d:79:51:a0:72:32:90:e2:a5:77:55:67:
bf:4d:4f:ec:e1:3d:72:38:8f:69:1c:93:1c:ee:06:05:74:35:
cf:ec:29:27:28:82:dc:4e:5c:e0:a3:86:02:88:d5:e0:e1:8b:
e8:2b:e6:23:a3:6e:83:92:9e:44:eb:83:06:22:ea:c4:00:a0:
f0:42:fa:1a:31:71:2d:24:40:fd:e3:df:6f:d3:5d:e6:41:33:
3a:fd:4d:31:6a:b6:b3:09:3b:24:1d:56:74:b2:a8:3f:40:aa:
9a:a2:d2:ed:ca:af:16:64:9e:2c:ef:b7:8c:0c:8f:fd:9b:00:
a1:a2:32:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org