Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/lukkqCv-pMAvS06PPQH0PlFu_kU.roa
File: lukkqCv-pMAvS06PPQH0PlFu_kU.roa (raw, json)
Hash identifier: XXb4AxZQgbvNZ0EBv0Aq207DQvwEAzkWKWhEb2Qnnww=
Subject key identifier: 96:E9:24:A8:2B:FE:A4:C0:2F:4B:4E:8F:3D:01:F4:3E:51:6E:FE:45
Certificate issuer: /CN=ed3141220968d0ae44045e6836999928eca864b8
Certificate serial: 1D1AFC34
Authority key identifier: ED:31:41:22:09:68:D0:AE:44:04:5E:68:36:99:99:28:EC:A8:64:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TFBIglo0K5EBF5oNpmZKOyoZLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/lukkqCv-pMAvS06PPQH0PlFu_kU.roa
Signing time: Sat 01 Jan 2022 03:58:11 +0000
ROA not before: Sat 01 Jan 2022 03:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49112
IP address blocks: 176.52.224.0/21 maxlen: 21
176.52.232.0/21 maxlen: 21
130.0.96.0/19 maxlen: 19
95.157.128.0/18 maxlen: 18
185.147.232.0/22 maxlen: 22
2a00:9380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488307764 (0x1d1afc34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3141220968d0ae44045e6836999928eca864b8
Validity
Not Before: Jan 1 03:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96e924a82bfea4c02f4b4e8f3d01f43e516efe45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:d4:e2:5c:a6:29:6f:27:c8:55:c6:ef:2e:
f1:79:e8:0e:1b:7d:f2:44:22:5b:39:3c:a1:e8:1b:
5b:b7:12:cb:e3:e8:99:9b:0b:db:0a:24:7e:51:df:
62:41:a0:2c:2c:f2:f6:53:b5:a9:ec:29:7e:03:17:
5f:56:45:33:92:43:4b:c7:20:cf:f4:a1:a5:80:18:
9e:91:b3:e4:09:e3:6c:6f:aa:2a:e6:e7:f2:99:51:
f3:c4:39:69:0a:48:78:bd:59:ba:5b:9b:ee:d0:11:
d3:ef:bb:cd:b5:c1:2e:2a:36:cd:fb:45:4d:fa:d4:
06:19:87:d7:17:c8:c8:11:67:ec:b7:a8:0f:e3:8a:
92:3a:76:5e:9d:59:80:8d:b1:87:a3:90:d3:c2:0e:
71:f9:cf:3a:f1:40:1b:d0:95:80:69:26:fc:4e:7c:
60:7c:2d:62:e6:9d:7a:3b:5d:6f:14:5c:e9:95:4a:
00:f8:c0:ea:0a:03:e7:16:c0:68:40:89:f2:25:28:
1c:48:33:9e:b9:ec:5d:3b:8f:1e:30:05:0d:e9:ad:
b3:71:0f:80:59:66:48:71:67:0c:54:ae:b6:bb:d7:
84:5f:75:96:86:9b:86:65:da:da:97:b1:05:bc:e1:
d3:64:b1:80:9a:d2:17:93:a2:e2:e3:b6:fe:47:4c:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E9:24:A8:2B:FE:A4:C0:2F:4B:4E:8F:3D:01:F4:3E:51:6E:FE:45
X509v3 Authority Key Identifier:
keyid:ED:31:41:22:09:68:D0:AE:44:04:5E:68:36:99:99:28:EC:A8:64:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TFBIglo0K5EBF5oNpmZKOyoZLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/lukkqCv-pMAvS06PPQH0PlFu_kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/7TFBIglo0K5EBF5oNpmZKOyoZLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.157.128.0/18
130.0.96.0/19
176.52.224.0/20
185.147.232.0/22
IPv6:
2a00:9380::/32
Signature Algorithm: sha256WithRSAEncryption
9b:ba:19:ba:1d:2a:51:f7:82:bc:52:81:01:f8:9c:aa:da:77:
42:19:88:78:a2:89:aa:d7:66:39:c9:83:b1:fd:79:8a:cf:56:
33:c1:94:ce:33:a2:5b:9e:4e:b6:f3:d9:03:85:3f:2e:a0:64:
09:c8:ca:4a:b3:ee:23:c4:73:80:a5:f3:76:7b:cd:7e:07:69:
37:11:22:8c:ba:88:e7:1b:fe:43:ca:6b:94:90:35:b9:2a:08:
87:45:0b:19:47:00:10:a0:ec:42:34:67:e2:68:ec:40:4d:7b:
66:99:6e:88:fe:6d:be:63:b5:04:a9:1b:b1:61:17:bf:73:3d:
fb:d6:7c:19:cb:68:91:d6:0f:8d:df:ab:99:2e:2c:65:39:d9:
35:76:e5:4c:db:69:ba:7d:fd:da:25:15:ff:6c:20:6d:43:da:
ee:b9:a9:c7:96:64:19:05:ee:e0:63:8e:eb:b4:fd:25:45:f3:
53:6b:b2:48:cb:c1:78:1c:19:13:41:4c:07:1d:6e:c6:0e:e5:
42:1a:6c:89:f9:37:c2:e8:ef:9f:65:7f:c7:6c:9a:52:a3:9b:
f5:43:18:75:76:b0:c2:a4:bf:23:53:7f:aa:10:d7:b6:04:b2:
30:dc:53:5f:98:53:4f:4f:7d:3f:36:bb:8a:3a:ff:f4:99:4a:
cd:bb:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:11 2023 by rpki-client on console-ams.rpki-client.org