Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/LWC5JXmtd4WUMgFVEuwYHsJ2gfY.roa
File: LWC5JXmtd4WUMgFVEuwYHsJ2gfY.roa (raw, json)
Hash identifier: G8E5AZyUYXPsFDjKyWAiRqs4TzY8HU4DL42yPcprg3s=
Subject key identifier: 2D:60:B9:25:79:AD:77:85:94:32:01:55:12:EC:18:1E:C2:76:81:F6
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 346E5DAC
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/LWC5JXmtd4WUMgFVEuwYHsJ2gfY.roa
Signing time: Sat 01 Jan 2022 08:06:09 +0000
ROA not before: Sat 01 Jan 2022 08:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204013
IP address blocks: 94.126.50.0/24 maxlen: 24
94.126.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879648172 (0x346e5dac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jan 1 08:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d60b92579ad77859432015512ec181ec27681f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:6d:46:6e:34:e3:70:04:f2:df:53:c7:04:
8c:7c:0f:5f:a9:c7:b9:df:53:81:58:d8:28:8c:dd:
5d:6b:39:a5:52:95:11:82:95:be:8d:ed:6b:d4:af:
1c:ee:7f:19:f6:a8:c2:9a:48:e3:5a:cc:e0:6e:d1:
79:a1:6d:d7:a6:74:16:66:0f:30:87:bb:5f:6d:b9:
31:f6:ef:e8:51:30:a6:cb:19:b0:6f:0c:2a:b7:58:
6a:5f:2f:1e:2f:91:64:1f:dd:37:61:91:cd:a1:23:
82:a2:1c:81:00:1e:e9:e9:ba:23:56:41:d7:42:02:
b0:e6:b2:fe:e2:b3:ff:c5:06:b7:4a:51:6d:e8:ee:
6d:53:63:55:a2:cd:90:79:34:9f:15:dd:cb:f1:0b:
a5:0a:06:31:ad:ff:bc:3c:9e:90:c3:e1:c9:6d:80:
66:e3:b0:86:ea:b6:ca:cd:93:ea:16:c7:4e:fc:6e:
a7:ad:c8:23:e6:50:29:dc:c2:72:1a:88:a4:c6:a9:
85:67:ee:b8:65:cc:b7:f8:66:e8:9c:4e:25:e4:42:
c3:93:89:33:28:6f:2d:a1:12:ae:b5:fd:eb:31:b0:
65:d7:94:96:10:ee:32:c1:a7:0f:e7:d2:20:8b:95:
28:58:b4:0f:e0:69:14:a7:3f:3f:a9:bb:0b:fc:60:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:60:B9:25:79:AD:77:85:94:32:01:55:12:EC:18:1E:C2:76:81:F6
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/LWC5JXmtd4WUMgFVEuwYHsJ2gfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.50.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:e2:ca:36:4e:1f:4b:a7:83:b6:c2:92:aa:27:f5:54:a7:b6:
f8:9e:fb:48:19:63:23:6c:cd:8a:5e:46:ae:a6:ea:a5:a6:98:
f5:89:24:99:73:a8:01:d3:01:9a:0b:1c:19:08:e0:74:75:43:
05:65:ef:e2:39:c3:cc:55:96:0e:c7:2a:40:50:53:fc:47:8c:
4f:ec:eb:4d:8f:ef:1e:93:5e:0f:5f:0c:64:4b:09:e2:b1:d1:
dd:0e:ed:84:97:af:b2:f8:02:fa:0f:97:00:b2:19:33:9f:ac:
71:ff:e8:08:3b:33:17:3e:cb:21:fa:65:15:f0:10:07:c1:e6:
62:6d:aa:44:3e:7e:a1:c1:e7:17:5b:1b:9c:42:ac:1e:e7:a6:
44:f8:69:d8:0e:7e:48:5f:48:77:b1:7c:98:30:80:71:ab:db:
f3:a6:f9:4a:e8:81:2e:11:c4:5e:87:73:66:3f:3b:bb:ea:10:
4d:b3:22:6d:e1:21:e5:87:a6:66:33:c3:15:ab:27:d4:1e:43:
4c:16:e1:50:db:66:fb:6f:67:48:e9:12:5a:98:b6:45:a8:ce:
94:6a:6e:2f:2e:ec:48:55:69:c9:55:ab:f0:f4:0c:2e:59:27:
af:50:26:4e:b8:9c:3a:8c:2a:46:22:a2:b0:75:92:ea:56:3c:
54:e0:a5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:59 2023 by rpki-client on console-fra.rpki-client.org