Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/LZGa7KTyeUkDAZi0_OujdCIsz4k.roa
File: LZGa7KTyeUkDAZi0_OujdCIsz4k.roa (raw, json)
Hash identifier: ekJFMYUhnJkVDWrnr/Vh13K3fD0sVXScK6DXguFoSQI=
Subject key identifier: 2D:91:9A:EC:A4:F2:79:49:03:01:98:B4:FC:EB:A3:74:22:2C:CF:89
Certificate issuer: /CN=d2d58cf4c6838f9b3d17718dcbc948f2c455a83d
Certificate serial: 018457917F3D7F74697951667998BA642996
Authority key identifier: D2:D5:8C:F4:C6:83:8F:9B:3D:17:71:8D:CB:C9:48:F2:C4:55:A8:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tWM9MaDj5s9F3GNy8lI8sRVqD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/LZGa7KTyeUkDAZi0_OujdCIsz4k.roa
Signing time: Tue 08 Nov 2022 14:07:43 +0000
ROA not before: Tue 08 Nov 2022 14:07:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 195.74.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:91:7f:3d:7f:74:69:79:51:66:79:98:ba:64:29:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2d58cf4c6838f9b3d17718dcbc948f2c455a83d
Validity
Not Before: Nov 8 14:07:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d919aeca4f27949030198b4fceba374222ccf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:32:4a:3d:5c:6d:4e:22:57:cc:d7:9f:55:
73:e6:af:4b:13:95:61:d5:b4:7e:0e:4e:36:46:18:
9e:6e:ee:11:67:5e:bf:80:fd:a7:47:f4:c3:61:43:
01:d0:9d:e9:b8:f9:bb:cd:57:66:9a:74:5b:4f:d3:
9e:0a:a8:01:6e:34:8f:da:53:ec:34:d6:37:c7:1c:
92:4b:f0:78:7e:82:01:5d:5b:67:3e:0f:ca:4d:92:
2a:3c:e3:fd:91:b1:fb:ed:62:c8:ba:71:43:97:0c:
89:36:dd:b8:e6:d7:5c:9f:b8:b1:ce:47:41:9d:5d:
5b:14:39:e0:ac:53:f3:df:bf:a9:d1:e0:14:66:2b:
e8:1e:e6:39:d8:48:7f:f6:d4:c8:2c:81:bd:fd:df:
ed:78:89:49:bc:b2:9f:48:f0:b8:36:cc:e1:28:64:
a3:f1:b7:13:e8:bb:6e:55:f9:11:c7:f0:90:7b:b0:
63:5e:b1:d5:b8:df:47:51:29:4a:82:b1:c7:29:f1:
04:1e:70:56:ee:ea:a1:75:2d:26:b3:a7:0c:6f:27:
d7:84:64:f8:a2:46:50:94:0a:3e:60:2c:bc:ae:38:
e5:c5:09:32:df:6a:cb:49:96:e2:d6:d2:68:ae:48:
4e:db:76:e9:80:43:ec:8f:35:7a:c9:04:a1:98:b7:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:91:9A:EC:A4:F2:79:49:03:01:98:B4:FC:EB:A3:74:22:2C:CF:89
X509v3 Authority Key Identifier:
keyid:D2:D5:8C:F4:C6:83:8F:9B:3D:17:71:8D:CB:C9:48:F2:C4:55:A8:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tWM9MaDj5s9F3GNy8lI8sRVqD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/LZGa7KTyeUkDAZi0_OujdCIsz4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f599f7-b4f8-4e52-8a96-45cb7ee20ebd/1/0tWM9MaDj5s9F3GNy8lI8sRVqD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.74.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a3:6a:3d:8f:0e:de:41:73:51:23:6e:f2:57:04:d0:92:e3:
88:2a:83:97:67:40:e6:10:00:b8:d6:3e:7e:31:5d:a3:f9:79:
f9:48:f5:98:1c:b2:66:36:b2:3a:97:2a:8d:ec:d7:87:42:3a:
0a:7a:b9:b6:75:2d:7e:4a:14:c0:49:2d:77:dd:1b:87:e5:9f:
c5:83:10:e7:ed:e0:c4:28:6a:77:f4:3b:e9:9a:fb:66:4c:de:
67:58:2a:f5:8a:e1:1f:e6:9d:b7:79:a6:d9:c3:ce:cb:ae:fd:
7e:e0:98:37:b1:75:6f:93:53:bc:cf:33:74:cf:99:53:c5:31:
53:a8:87:83:4d:59:37:24:8c:7b:ad:1c:5b:fb:c0:80:80:ca:
7c:18:4d:10:05:d8:ca:eb:9e:a6:a8:07:92:e5:a4:57:45:c0:
d6:5b:ac:af:c2:95:de:ee:b9:fd:ca:7f:6d:a9:0d:ae:17:3b:
5f:9e:42:77:14:f9:88:15:10:bd:1b:98:2a:7e:d0:38:e8:3c:
ba:f0:7d:44:90:b0:3f:86:93:1d:c7:b4:e4:7c:e5:7c:83:ea:
42:0b:b3:3e:25:57:2f:28:14:95:a5:85:14:0f:05:59:d5:62:
4f:84:e7:aa:3a:99:c1:35:3b:07:fe:4c:f8:6b:9e:a9:f8:d2:
93:43:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:25 2023 by rpki-client on console-ams.rpki-client.org