Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/LhyyNtrs96-_F4fSUGawA9ErqGU.roa
File: LhyyNtrs96-_F4fSUGawA9ErqGU.roa (raw, json)
Hash identifier: kFe4AdmXQ+lmV5RTX7Slh/wwwtspfL/THJzHG8UhOQ0=
Subject key identifier: 2E:1C:B2:36:DA:EC:F7:AF:BF:17:87:D2:50:66:B0:03:D1:2B:A8:65
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 0181DD91
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/LhyyNtrs96-_F4fSUGawA9ErqGU.roa
Signing time: Sat 01 Jan 2022 05:53:01 +0000
ROA not before: Sat 01 Jan 2022 05:53:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57395
IP address blocks: 194.26.16.0/24 maxlen: 24
2a11:9400::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25288081 (0x181dd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Jan 1 05:53:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e1cb236daecf7afbf1787d25066b003d12ba865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:04:ec:37:fb:f2:31:98:09:61:36:c6:52:
a8:c4:8c:49:2d:4e:b7:6c:63:54:a6:cd:ad:7c:bf:
de:11:d7:72:0c:ec:df:eb:43:86:55:b0:02:67:c3:
bf:e6:58:a9:8e:da:53:04:ad:fc:07:8c:2c:36:68:
98:1f:25:33:f3:d3:f7:4d:1b:4c:af:c8:6e:7b:49:
1e:42:25:7b:a6:e9:8c:a6:5a:9f:0d:ef:69:f4:77:
9c:2b:41:c7:3f:34:ce:0d:34:f2:18:87:cc:45:b7:
3f:19:ba:dc:77:53:99:d5:0b:b0:97:3f:ab:d9:0b:
60:f4:ac:32:de:dc:6b:a5:14:61:0b:40:d6:40:b5:
8b:8b:ca:e4:2c:93:0c:8e:76:26:41:2c:3e:88:44:
51:61:85:e5:1a:04:06:d2:82:92:66:01:22:87:71:
af:a7:65:0f:38:66:ef:80:19:69:11:bc:d8:7e:2f:
ea:8a:28:89:27:0b:77:8d:62:94:24:b6:77:2a:b5:
06:69:93:56:2d:22:b9:06:c8:93:1e:87:25:7f:6c:
3b:c3:d0:6a:27:63:28:5f:2c:6e:1d:ac:97:74:fc:
08:ad:40:83:4d:28:4b:21:36:91:6a:82:65:ae:c3:
0e:86:25:cb:36:8f:b5:de:71:90:7a:98:64:cb:5b:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1C:B2:36:DA:EC:F7:AF:BF:17:87:D2:50:66:B0:03:D1:2B:A8:65
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/LhyyNtrs96-_F4fSUGawA9ErqGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.16.0/24
IPv6:
2a11:9400::/32
Signature Algorithm: sha256WithRSAEncryption
60:d3:0c:d7:e1:fb:94:7b:90:fe:e3:8b:58:fa:3d:f2:00:e4:
2b:a2:21:ea:76:e7:7d:f9:1f:68:43:63:4c:bc:9a:f5:eb:cd:
ae:2c:84:bb:c6:84:14:aa:3a:23:bd:4a:5b:40:78:3c:0c:26:
82:b3:20:e0:cd:5a:92:1e:43:a0:11:dd:90:90:84:5d:5a:4c:
5c:a5:6e:fe:60:95:9e:f8:c2:94:80:72:9d:60:c0:7b:ae:fc:
ba:02:8d:39:cb:8c:27:96:fd:1a:e4:94:23:8f:b4:c0:4b:b5:
12:7d:a2:f4:12:02:d5:d4:dc:c2:78:e4:0b:81:12:77:37:44:
14:b4:af:c6:45:0b:58:98:15:eb:5b:1e:cb:17:66:5b:cb:6a:
d9:e5:dd:94:c6:97:47:9e:82:54:00:5f:d3:00:61:ea:dd:7b:
55:53:f8:e8:de:47:8e:b3:35:8c:31:c7:9c:ad:43:7d:b4:d6:
e4:81:99:b5:5a:89:55:ef:08:4e:5c:d9:c2:70:54:1f:18:1a:
2f:f0:82:0a:3c:9a:b6:a6:30:58:b1:45:2a:97:41:b4:cc:9d:
99:4c:9b:82:20:f2:e9:95:c1:93:e5:10:62:e5:ba:cb:c7:af:
a4:d8:2a:5c:d5:a5:04:d3:d6:1e:40:be:0a:4a:2b:5f:4a:d6:
9e:5c:b9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:25 2024 by rpki-client on console-fra.rpki-client.org