Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/LM1s17jQ4bGPtYF3-wo5M5b-04Q.roa
File: LM1s17jQ4bGPtYF3-wo5M5b-04Q.roa (raw, json)
Hash identifier: RRfFfkDIqzNLDgdzk2YeuuRk0DPUDdHeVte3zIyjnZw=
Subject key identifier: 2C:CD:6C:D7:B8:D0:E1:B1:8F:B5:81:77:FB:0A:39:33:96:FE:D3:84
Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial: 0CF0B1FD
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/LM1s17jQ4bGPtYF3-wo5M5b-04Q.roa
Signing time: Tue 04 Jan 2022 08:32:06 +0000
ROA not before: Tue 04 Jan 2022 08:32:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42643
IP address blocks: 193.142.210.0/24 maxlen: 24
193.200.46.0/23 maxlen: 23
193.200.46.0/24 maxlen: 24
193.200.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217100797 (0xcf0b1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Validity
Not Before: Jan 4 08:32:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ccd6cd7b8d0e1b18fb58177fb0a393396fed384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:51:e5:17:92:f6:85:b6:cf:bf:10:2e:ae:
2c:32:27:c4:1f:63:2e:a2:35:29:a6:71:55:5d:4c:
3a:29:f2:88:6d:19:30:d7:6c:7b:8a:82:e8:80:08:
68:db:31:e4:5d:b4:45:48:ef:71:2a:98:da:b5:f9:
83:2e:7c:9d:c0:68:95:7f:ed:4d:fa:28:a4:ff:f2:
49:ce:97:fc:b2:e5:f2:3b:11:62:00:45:70:6f:02:
bc:f6:4b:e6:fa:bc:d7:fa:fe:63:a2:ab:43:09:f3:
7e:dc:bd:46:54:21:9f:7e:c4:3a:c7:b6:ab:46:2a:
b4:19:7f:72:da:06:14:5b:14:78:b1:7d:2e:4b:1a:
ef:74:f1:20:a1:89:66:45:84:e3:43:60:36:96:59:
4f:e9:43:63:f4:e1:68:0a:31:10:b1:93:a3:86:0b:
77:7a:5a:21:1b:25:df:32:59:0e:28:9d:2d:e1:81:
06:fa:eb:87:41:4d:d7:1b:2f:73:2e:fe:80:ad:8c:
79:08:60:d1:29:21:69:e1:c3:5c:dd:06:35:bc:24:
af:72:08:c4:16:7b:d2:38:57:03:6f:f0:16:13:c9:
f3:8a:5b:ef:15:0c:bc:ee:8a:1b:91:0d:65:27:f8:
75:b2:28:d4:07:20:e2:d8:61:4c:01:68:f7:38:c9:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CD:6C:D7:B8:D0:E1:B1:8F:B5:81:77:FB:0A:39:33:96:FE:D3:84
X509v3 Authority Key Identifier:
keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/LM1s17jQ4bGPtYF3-wo5M5b-04Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.210.0/24
193.200.46.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:9a:b5:8b:51:bf:67:da:ef:83:48:10:68:e0:d0:1a:32:82:
59:58:c7:81:40:e3:19:82:cf:4d:31:5f:d3:4a:72:a1:4d:18:
56:76:9b:88:83:f1:a6:02:34:52:2a:e9:16:38:ab:d3:1b:3e:
62:49:6f:c2:da:15:c6:b9:9a:ef:ca:67:81:0a:87:d4:62:b0:
62:1a:fe:e1:a0:b9:0b:fb:eb:0c:23:48:6c:75:9e:d1:4f:ca:
58:30:bb:f9:86:0a:53:d9:17:29:45:93:a0:3f:7e:d9:00:fc:
9c:6f:98:bd:2a:7b:f6:81:15:ae:74:42:13:f4:e7:ba:ef:d3:
57:0c:cb:0e:09:9c:bc:16:cf:97:0f:be:f9:4b:19:3e:4f:75:
09:fe:b7:25:7f:f8:12:59:4b:16:94:4a:89:59:68:0d:3a:ee:
20:45:e4:d4:01:5a:3d:ab:45:97:b3:20:d6:9e:26:96:12:31:
59:c7:cf:7c:dd:35:58:6a:61:89:d7:23:10:e9:81:e3:5f:a2:
d0:52:1f:d1:10:5f:41:5a:ff:94:5b:6e:86:99:7f:b1:6e:92:
2a:cb:70:fc:64:51:35:9b:25:ed:69:7d:d2:e6:82:de:e9:17:
5c:13:c9:09:fd:c1:e8:a9:d9:6c:f0:21:56:4d:37:f9:66:15:
c7:e8:f8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-fra.rpki-client.org