Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/lYLJ9RY6UCTbPG8m4LIKapuMafM.roa
File: lYLJ9RY6UCTbPG8m4LIKapuMafM.roa (raw, json)
Hash identifier: IBkcMLYHqxL0Md1CJseOHi8mh79TYbvrozgBvOVcGCc=
Subject key identifier: 95:82:C9:F5:16:3A:50:24:DB:3C:6F:26:E0:B2:0A:6A:9B:8C:69:F3
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 09ECABD5
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/lYLJ9RY6UCTbPG8m4LIKapuMafM.roa
Signing time: Sat 01 Jan 2022 06:53:59 +0000
ROA not before: Sat 01 Jan 2022 06:53:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51557
IP address blocks: 185.33.232.0/22 maxlen: 22
185.111.232.0/23 maxlen: 23
185.111.235.0/24 maxlen: 24
185.111.234.0/24 maxlen: 24
93.89.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166505429 (0x9ecabd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Jan 1 06:53:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9582c9f5163a5024db3c6f26e0b20a6a9b8c69f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:94:ae:13:3f:05:ce:27:0d:ff:78:91:32:
c1:df:c5:68:2b:d3:f4:24:47:fd:e9:b4:27:ab:ff:
4d:ab:ea:e2:71:29:bb:0e:42:9b:bf:9d:16:72:8e:
89:cc:5a:48:9d:95:7c:54:a7:4a:57:14:35:78:5a:
70:3d:b3:0f:0d:0a:ac:48:96:e3:03:75:9d:10:53:
2c:9d:9c:8b:c3:89:e0:75:f0:37:52:03:fd:bf:77:
d5:d9:ac:d1:c7:ad:56:61:e9:05:37:f2:ca:d0:f8:
f8:0f:90:09:4a:49:5a:c1:df:11:c7:3d:d1:9a:ad:
95:11:6b:1d:5f:1f:33:72:63:54:d5:3c:b8:56:6a:
b0:f7:6e:62:5f:45:a4:99:f0:b8:e3:cf:ee:ba:58:
06:7f:48:82:3c:0d:dd:23:af:5b:f4:23:03:17:c5:
0f:ae:64:51:14:f8:4c:bb:67:58:8b:bc:f7:c1:19:
e9:89:5f:2e:a6:3d:61:30:8f:dc:3b:0e:62:27:ed:
79:88:53:99:6e:5e:6a:3d:5a:96:8b:66:3e:a0:60:
31:68:d5:a9:16:48:8d:29:7b:6a:e1:42:c3:59:81:
4a:a2:ce:28:47:ec:dd:13:06:a0:4c:32:c8:0c:5e:
2d:67:bf:0c:3c:bf:18:6c:ee:6c:6d:45:bf:64:fa:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:82:C9:F5:16:3A:50:24:DB:3C:6F:26:E0:B2:0A:6A:9B:8C:69:F3
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/lYLJ9RY6UCTbPG8m4LIKapuMafM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.224.0/20
185.33.232.0/22
185.111.232.0/22
Signature Algorithm: sha256WithRSAEncryption
59:34:f8:cd:2b:d2:61:b9:d1:f6:57:ac:f8:61:0b:9f:64:72:
0c:d3:61:e5:88:26:9c:5c:7f:57:04:14:9d:91:67:51:70:89:
ff:fa:12:2e:73:4d:bd:97:10:fc:c0:81:8a:c5:5a:7a:a3:dd:
bb:ca:44:2a:b3:e8:05:a9:7b:26:a0:10:a8:5f:70:97:fc:52:
eb:e0:0d:d6:8c:78:b9:02:7c:06:b3:9b:2e:e0:47:c0:42:70:
13:ca:24:f6:31:16:27:81:71:0a:7b:38:14:19:2c:e9:57:30:
8e:37:0f:e9:22:88:7c:3b:c1:d4:38:b3:79:d0:ff:59:6a:05:
5d:88:4c:79:0d:02:57:12:b9:b7:53:cf:cd:f8:fc:9b:1d:66:
33:a5:9d:a0:d0:5d:e0:6b:75:6b:ec:ee:13:51:15:1a:72:55:
47:94:3a:b6:82:40:87:77:8c:61:cc:3e:c7:77:e3:cb:c4:f0:
5f:f3:8a:d4:77:2d:ec:52:7b:2c:8d:59:8f:28:f4:43:f1:95:
e1:af:d3:21:61:de:d4:5c:c5:3e:0f:5f:61:8c:56:1b:49:fd:
9b:8b:5b:fe:bf:60:d3:09:40:f6:95:7a:4e:4f:c4:b4:2f:6a:
96:fe:39:e7:01:9f:88:a6:d7:dc:1f:1d:50:46:ac:b6:43:62:
ba:0a:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:05 2024 by rpki-client on console-fra.rpki-client.org