Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LGL9KMHdA7SXoXImpJYlN-xYsW8.roa
File: LGL9KMHdA7SXoXImpJYlN-xYsW8.roa (raw, json)
Hash identifier: jeVNqYNt8QWVVUYacXRd6k3v204MPoqpS4OjwxxXCVo=
Subject key identifier: 2C:62:FD:28:C1:DD:03:B4:97:A1:72:26:A4:96:25:37:EC:58:B1:6F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 09C508DB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LGL9KMHdA7SXoXImpJYlN-xYsW8.roa
Signing time: Wed 29 Jun 2022 07:19:52 +0000
ROA not before: Wed 29 Jun 2022 07:19:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 178.253.215.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163907803 (0x9c508db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 29 07:19:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c62fd28c1dd03b497a17226a4962537ec58b16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:d6:8f:8d:e7:85:77:70:0c:09:b4:c7:cc:
b8:c3:6f:4e:c6:4b:06:86:b0:95:ec:55:e6:92:5a:
ac:a4:e1:11:b4:f6:06:d4:71:a4:d6:eb:d8:59:87:
67:09:05:41:69:4e:f1:a2:ea:a2:56:8a:67:58:68:
20:13:c7:17:40:14:72:2d:0c:d9:bc:23:ca:aa:2a:
a6:90:ba:d7:e2:8c:10:09:f9:07:92:28:73:d0:9b:
07:b0:b7:e0:fe:21:d5:48:c9:c1:bd:3a:f5:69:f9:
92:25:5c:17:1f:0b:b2:bc:65:29:7a:42:59:51:f2:
a2:4d:cb:21:79:fe:3d:de:d2:bf:ae:4f:98:e6:41:
ce:91:1c:ba:00:e7:e8:e9:4f:f7:3e:e5:7d:05:48:
bb:ac:99:e8:80:e3:5d:c4:ef:92:7e:ee:94:7e:a4:
68:2c:20:00:86:56:17:c4:0b:42:9a:41:a4:da:8a:
2a:47:8f:de:b5:55:34:0d:5d:52:2a:54:dc:06:c9:
8b:57:de:11:67:92:1d:2f:a8:2c:e6:f2:33:29:65:
67:63:11:80:79:a3:8d:c7:2b:9a:73:c8:af:e2:91:
7a:65:04:17:fc:e4:84:a5:ce:95:81:57:c4:6b:a1:
23:e4:69:1f:72:ec:f7:6b:ef:58:2c:cf:69:dc:4f:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:62:FD:28:C1:DD:03:B4:97:A1:72:26:A4:96:25:37:EC:58:B1:6F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/LGL9KMHdA7SXoXImpJYlN-xYsW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.215.0/24
178.253.235.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
14:7a:e0:ff:b4:ff:0d:c3:3b:a4:22:65:e5:8f:ca:c9:5d:54:
f2:26:46:93:f6:bc:4d:7c:d0:bb:be:77:40:3e:d6:48:12:4a:
cf:4f:f7:20:d2:bb:7d:4f:10:14:8f:d2:cd:14:45:89:7a:90:
75:bb:0d:33:8d:3e:7c:1b:dc:4d:1d:ec:51:e3:d3:cd:2a:3a:
22:85:43:25:c2:94:a7:ee:a8:01:71:d7:13:98:d0:9f:06:4a:
90:91:ac:eb:a4:2d:c4:96:c2:31:d0:2a:ea:c2:e9:bb:51:f0:
76:30:fa:d6:6a:14:10:0b:60:b7:1c:e2:35:48:ac:ad:bb:c4:
42:ef:18:12:6d:f4:ea:b3:e8:ac:44:4b:38:de:a9:b8:30:0a:
16:5f:d2:db:8b:de:d4:34:a9:42:e1:c2:92:62:62:ad:cd:89:
e2:e7:cd:7c:5f:db:44:9f:ab:2c:12:64:d6:44:8a:9f:77:d0:
59:0b:1d:20:29:bc:5a:7c:7d:8a:aa:02:ed:cd:6a:af:a3:be:
59:7e:5a:11:91:6b:30:60:dd:ca:6e:f7:4c:59:cb:52:b6:c3:
8e:92:98:d1:3a:6d:45:17:25:4a:69:54:a7:7a:6b:f3:5f:c3:
3e:97:bb:22:83:11:f9:28:be:4b:48:5a:5a:90:97:1c:55:42:
6f:e4:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org