Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/LnhoYXwVWoPD_iFMKnnzGinmknc.roa
File: LnhoYXwVWoPD_iFMKnnzGinmknc.roa (raw, json)
Hash identifier: 9jN4F4gcVVcq76otQHrcbXZ5WMUsyNjXH5jtdHaOK3A=
Subject key identifier: 2E:78:68:61:7C:15:5A:83:C3:FE:21:4C:2A:79:F3:1A:29:E6:92:77
Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial: 027FA723
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/LnhoYXwVWoPD_iFMKnnzGinmknc.roa
Signing time: Sat 01 Jan 2022 13:02:50 +0000
ROA not before: Sat 01 Jan 2022 13:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211547
IP address blocks: 193.3.56.0/24 maxlen: 24
2a10:c5c1::/32 maxlen: 48
2a10:c5c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41920291 (0x27fa723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
Validity
Not Before: Jan 1 13:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e7868617c155a83c3fe214c2a79f31a29e69277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8b:8f:a1:1d:9d:73:41:b2:02:a6:46:07:3f:
1c:1f:b3:e4:77:37:28:18:fe:2f:45:5a:8b:83:5b:
01:67:7b:0b:05:62:b0:32:47:3f:b5:31:33:87:72:
be:a4:f6:24:b2:0a:1f:9a:fb:a1:69:8f:0d:f6:d5:
bd:93:e0:0b:fa:51:70:4e:fa:7c:89:c1:d8:f9:b7:
be:c9:9c:2a:08:c5:11:e5:3f:f1:a8:dc:6f:fc:f8:
8c:d9:e0:4f:b3:fb:7d:dc:5d:3a:e6:39:65:a4:3e:
22:bd:dd:16:b0:f7:59:c1:6c:0c:c4:5d:1b:3c:66:
74:45:9e:16:33:8a:cc:c6:62:ee:05:fb:52:49:f3:
55:1d:60:84:7d:da:de:cc:9f:68:ab:ce:f5:35:a0:
7f:ac:67:08:b6:22:e9:e4:f2:65:b8:9d:1e:b5:02:
b5:f6:b9:46:da:50:0e:38:3a:8c:ed:bd:43:6c:76:
4d:25:ac:8c:3e:3a:0b:77:68:81:93:ed:81:04:79:
1b:a2:49:ec:2c:d9:86:35:cd:fd:67:ff:ec:92:95:
46:15:0e:e7:ba:a9:de:70:91:9f:b4:18:fe:2c:80:
6c:62:ee:5e:10:63:46:76:17:c2:2a:62:28:ae:a7:
59:e1:c1:b3:4b:33:f3:a0:15:f6:0d:3e:f3:76:13:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:78:68:61:7C:15:5A:83:C3:FE:21:4C:2A:79:F3:1A:29:E6:92:77
X509v3 Authority Key Identifier:
keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/LnhoYXwVWoPD_iFMKnnzGinmknc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.56.0/24
IPv6:
2a10:c5c0::/31
Signature Algorithm: sha256WithRSAEncryption
ac:fe:e8:82:11:c2:33:87:59:e6:8f:22:83:fa:5e:35:cf:d7:
fa:3a:31:d3:8e:e6:5e:79:80:98:ba:11:d7:1b:8f:fb:be:d5:
1b:c8:3b:e5:1f:91:36:f6:2f:71:25:4b:ea:d8:54:63:e8:73:
ba:7c:70:4f:5b:1f:a1:64:72:d3:c9:2d:05:e8:18:6c:ae:b6:
6f:eb:15:dc:ba:27:1c:d0:77:bf:23:5f:3f:05:d8:6e:05:1f:
36:00:78:91:23:80:d9:6b:a2:2c:33:d1:f9:74:fe:46:69:db:
a4:0a:a6:fc:7f:7e:5e:ff:b3:24:24:f8:c4:f3:f9:b4:56:c8:
57:91:0f:37:81:c5:93:4d:f5:3c:c4:b6:d3:a8:58:da:ca:a1:
b5:6a:50:82:dd:3d:de:9c:f8:94:57:f4:d1:bc:85:f9:a1:2b:
66:a6:4e:a0:84:d2:b7:24:20:62:99:72:fe:59:fc:af:4c:06:
e6:c1:6f:2c:6a:b1:a3:9e:59:c3:7c:0c:3e:5f:0e:17:c9:a6:
8f:93:74:5e:cb:ba:46:5e:83:a2:9f:40:62:2d:08:c1:be:4e:
8f:b1:16:6a:c7:44:43:0d:d6:1b:fd:b8:68:22:16:5a:d4:d6:
b3:2c:a0:7d:da:55:48:a9:90:fb:10:87:df:27:87:93:0d:70:
8c:c5:7b:90
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAn+nIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTRmMGIyNzJlMjQzYWNmYWYzNjM0NjA5NGU1ODM5NWNjMTM4M2I0MB4XDTIyMDEw
MTEzMDI1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmU3ODY4NjE3YzE1
NWE4M2MzZmUyMTRjMmE3OWYzMWEyOWU2OTI3NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIaLj6EdnXNBsgKmRgc/HB+z5Hc3KBj+L0Vai4NbAWd7CwVi
sDJHP7UxM4dyvqT2JLIKH5r7oWmPDfbVvZPgC/pRcE76fInB2Pm3vsmcKgjFEeU/
8ajcb/z4jNngT7P7fdxdOuY5ZaQ+Ir3dFrD3WcFsDMRdGzxmdEWeFjOKzMZi7gX7
UknzVR1ghH3a3syfaKvO9TWgf6xnCLYi6eTyZbidHrUCtfa5RtpQDjg6jO29Q2x2
TSWsjD46C3dogZPtgQR5G6JJ7CzZhjXN/Wf/7JKVRhUO57qp3nCRn7QY/iyAbGLu
XhBjRnYXwipiKK6nWeHBs0sz86AV9g0+83YTW2MCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQueGhhfBVag8P+IUwqefMaKeaSdzAfBgNVHSMEGDAWgBQZTwsnLiQ6z682
NGCU5YOVzBODtDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVOExKeTRrT3Mtdk5qUmdsT1dEbGN3VGc3US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvYTUzZDM0LWMzZDYtNDlkYi1hYjdmLWE5Y2NlNTZhMDY2OC8x
L0xuaG9ZWHdWV29QRF9pRk1Lbm56R2lubWtuYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
YTUzZDM0LWMzZDYtNDlkYi1hYjdmLWE5Y2NlNTZhMDY2OC8xL0dVOExKeTRrT3Mt
dk5qUmdsT1dEbGN3VGc3US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAMEDODANBAIAAjAHAwUBKhDFwDAN
BgkqhkiG9w0BAQsFAAOCAQEArP7oghHCM4dZ5o8ig/peNc/X+jox047mXnmAmLoR
1xuP+77VG8g75R+RNvYvcSVL6thUY+hzunxwT1sfoWRy08ktBegYbK62b+sV3Lon
HNB3vyNfPwXYbgUfNgB4kSOA2WuiLDPR+XT+RmnbpAqm/H9+Xv+zJCT4xPP5tFbI
V5EPN4HFk031PMS206hY2sqhtWpQgt093pz4lFf00byF+aErZqZOoITStyQgYply
/ln8r0wG5sFvLGqxo55Zw3wMPl8OF8mmj5N0Xsu6Rl6Dop9AYi0Iwb5Oj7EWasdE
Qw3WG/24aCIWWtTWsyygfdpVSKmQ+xCH3yeHkw1wjMV7kA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:58 2023 by rpki-client on console-fra.rpki-client.org