Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/LjvBFnCpvi7NSTiu0mmy6Ro4RbI.roa
File: LjvBFnCpvi7NSTiu0mmy6Ro4RbI.roa (raw, json)
Hash identifier: BXgud9RZhvdg3pNmXCDMnhIxDko29f8ddAjl46VXjbU=
Subject key identifier: 2E:3B:C1:16:70:A9:BE:2E:CD:49:38:AE:D2:69:B2:E9:1A:38:45:B2
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 046F83FE
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/LjvBFnCpvi7NSTiu0mmy6Ro4RbI.roa
Signing time: Wed 01 Jun 2022 12:35:22 +0000
ROA not before: Wed 01 Jun 2022 12:35:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395886
IP address blocks: 193.227.121.0/24 maxlen: 24
45.153.8.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74417150 (0x46f83fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jun 1 12:35:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e3bc11670a9be2ecd4938aed269b2e91a3845b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:19:43:ec:07:bd:75:5c:7e:45:8e:7c:cc:
3c:5a:df:68:b7:1e:9c:1d:45:66:38:ec:5c:32:de:
b8:41:d6:17:b1:04:c6:19:d5:6c:b9:d6:91:cd:8a:
c0:27:1e:81:25:85:66:d8:ca:58:9d:9b:4b:5a:7f:
0f:b3:9b:aa:d7:d9:a3:9f:23:df:09:5d:a9:00:10:
13:15:39:74:ba:d6:78:33:b0:8a:b5:53:8c:b9:e7:
fd:a0:2e:e6:f6:05:df:12:88:dc:6f:bb:3d:88:35:
2d:ff:af:3f:36:0d:d2:bc:96:7e:50:b0:b4:29:49:
65:53:7a:6c:c9:d3:05:9a:50:0f:91:f7:d8:29:71:
8f:c3:60:f3:89:73:aa:db:53:8d:1e:4e:08:ce:39:
b9:35:37:75:ae:04:e6:d9:aa:c8:f7:60:0c:3d:b0:
b5:1f:ce:e6:ab:61:53:ca:d2:b1:3c:34:9d:99:43:
17:30:da:28:44:66:7a:a1:97:3c:c2:50:7b:b2:0f:
ab:28:75:fc:dd:eb:fc:c9:62:57:61:d1:3c:fb:79:
d0:1f:18:5b:18:4e:37:75:1a:13:da:10:46:91:31:
68:5d:eb:3e:b2:9d:6a:d9:e8:17:e9:40:01:39:50:
9d:92:8d:1e:3f:73:11:bc:b6:5d:c4:8a:e2:a8:12:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3B:C1:16:70:A9:BE:2E:CD:49:38:AE:D2:69:B2:E9:1A:38:45:B2
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/LjvBFnCpvi7NSTiu0mmy6Ro4RbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.8.0/23
193.227.121.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9c:a7:b5:1c:f8:e7:84:09:11:ce:0b:1b:a8:71:5a:0c:8a:
47:b3:5f:bc:74:dd:68:9a:04:b0:fd:fe:8a:9a:11:1c:02:ac:
a7:d7:3f:49:01:6c:6c:06:5b:3c:70:8d:34:20:4d:6e:4e:f9:
35:31:26:33:d8:8e:a1:e8:fe:0f:59:ad:bf:58:82:ed:04:18:
9b:ee:39:5f:10:97:27:db:47:79:4b:93:18:67:99:3d:5b:cb:
f6:77:ef:97:97:30:57:77:55:5a:10:02:ec:2c:b1:79:2a:ac:
d5:d8:b8:a1:20:62:81:27:82:1f:76:b3:5c:55:80:5d:a4:55:
ae:b3:44:10:e9:59:0f:0c:f0:a4:76:86:3f:68:23:99:4e:15:
f5:7a:c9:f8:e9:7d:80:27:9a:a9:ce:c5:44:28:9a:b0:1d:13:
f4:9f:d7:a8:47:51:7f:87:ef:6a:6d:d7:35:9d:b9:6d:d7:71:
56:e0:0c:35:f1:af:5e:3e:2a:b8:27:3e:14:bb:ca:54:ab:78:
54:32:17:3c:41:75:28:10:32:b8:45:25:8f:62:95:9c:52:43:
53:c3:6e:7c:aa:57:8b:28:49:71:9f:57:3a:ca:97:ed:55:05:
22:bc:91:82:58:cd:6c:c6:9e:4b:ce:8c:9b:68:0b:bd:31:5e:
14:ed:f5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org