Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/LqeBM7DEyJogGUHMvd5jbCMtKC4.roa
File: LqeBM7DEyJogGUHMvd5jbCMtKC4.roa (raw, json)
Hash identifier: sMBYx4At//zxPyQxZ+dB7Ks+Cu5XEtzFsQFGRpGHaGU=
Subject key identifier: 2E:A7:81:33:B0:C4:C8:9A:20:19:41:CC:BD:DE:63:6C:23:2D:28:2E
Certificate issuer: /CN=04725e10669a8f7bee3bbc104dae82570598006d
Certificate serial: D507C6
Authority key identifier: 04:72:5E:10:66:9A:8F:7B:EE:3B:BC:10:4D:AE:82:57:05:98:00:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHJeEGaaj3vuO7wQTa6CVwWYAG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/LqeBM7DEyJogGUHMvd5jbCMtKC4.roa
Signing time: Sat 01 Jan 2022 05:04:41 +0000
ROA not before: Sat 01 Jan 2022 05:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 188.244.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13961158 (0xd507c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04725e10669a8f7bee3bbc104dae82570598006d
Validity
Not Before: Jan 1 05:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ea78133b0c4c89a201941ccbdde636c232d282e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:6f:a4:c4:84:89:29:79:13:c6:8e:5d:64:
12:34:97:62:21:bc:a7:51:98:0c:c0:07:b9:25:ee:
38:0e:03:88:ca:a7:ef:68:47:b8:72:7b:ef:b0:20:
f0:1b:76:82:87:6f:4f:19:54:84:ba:a9:fa:50:c9:
98:b4:43:3c:38:57:be:ee:7c:41:36:54:b6:20:7d:
31:1a:19:4e:87:ed:68:8d:af:78:cd:7f:4d:f8:13:
6f:c4:ef:cb:cc:ab:2d:ab:a1:f5:a5:84:98:a6:72:
b8:22:31:42:5d:a4:95:46:3b:b2:db:fe:50:41:ec:
04:a2:dd:c4:c0:94:64:af:65:3a:b7:c9:26:ad:9e:
0b:0a:d8:09:2b:15:89:9c:db:ae:59:f5:46:6c:1b:
83:14:ac:d1:3b:42:ac:09:0c:f6:ee:79:4d:cc:2e:
be:26:7f:81:2d:38:06:8b:66:93:cb:cb:39:7f:b6:
a6:b6:a8:15:c7:17:d1:c8:f3:14:db:eb:29:b0:a3:
3f:6a:44:05:fd:95:05:d7:83:57:aa:4a:74:bc:99:
76:b2:60:ba:63:7e:9c:50:11:c2:8a:13:04:95:70:
74:cf:9a:f9:ee:bf:7f:2c:c7:6d:f2:ef:fc:55:e6:
55:3c:7e:9e:a1:8d:e9:8f:c3:ee:56:6c:bf:fc:b7:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A7:81:33:B0:C4:C8:9A:20:19:41:CC:BD:DE:63:6C:23:2D:28:2E
X509v3 Authority Key Identifier:
keyid:04:72:5E:10:66:9A:8F:7B:EE:3B:BC:10:4D:AE:82:57:05:98:00:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHJeEGaaj3vuO7wQTa6CVwWYAG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/LqeBM7DEyJogGUHMvd5jbCMtKC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/BHJeEGaaj3vuO7wQTa6CVwWYAG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.119.0/24
Signature Algorithm: sha256WithRSAEncryption
79:fb:96:c7:cc:ac:13:87:c6:36:c9:cb:15:26:fe:a4:7e:fd:
9b:99:ba:bb:cb:b4:8a:7e:12:2c:aa:e3:90:ba:d2:dd:99:33:
29:65:49:11:87:c7:4a:e9:4d:b9:d0:5b:da:92:5b:86:c4:67:
12:8b:32:49:60:2d:85:5e:a9:72:6f:cf:e3:a6:b9:52:07:a0:
3d:80:bc:99:47:14:88:71:f5:c5:7c:c5:c0:da:7d:29:d2:62:
89:fd:02:87:b2:62:c3:ef:92:cb:ea:dd:02:82:77:d4:48:0b:
05:16:30:ea:9e:0e:c7:08:b3:88:4a:6b:82:42:9a:f2:d3:48:
46:91:fa:5f:81:a4:88:fb:84:6a:0f:2f:80:02:48:b1:e2:a5:
c2:88:bd:45:b4:59:59:24:c3:41:43:c4:ff:4c:b8:59:31:74:
13:70:42:d7:de:dc:bd:c7:8a:3f:da:8e:12:16:5d:ea:53:50:
20:bd:0f:a4:3b:f6:cc:ee:f0:7b:a4:63:bd:63:8f:e6:54:45:
ef:db:45:89:73:c8:0e:f1:09:d1:76:8d:5c:05:93:4b:44:f2:
f1:aa:0e:2a:3e:f2:8c:2b:b5:e0:ab:cc:24:eb:96:32:b9:25:
5c:c9:be:05:e9:3d:a9:4f:97:9b:48:1e:78:88:bd:76:9d:09:
02:08:98:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:14 2023 by rpki-client on console-fra.rpki-client.org