Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/lEWMXHJNfsppoEMsAaQ5iKu_kbM.roa
File: lEWMXHJNfsppoEMsAaQ5iKu_kbM.roa (raw, json)
Hash identifier: 8kVdu3n8cbq+b7O/Ds1SptBeDqDE+6GeGXHRIuvF6S0=
Subject key identifier: 94:45:8C:5C:72:4D:7E:CA:69:A0:43:2C:01:A4:39:88:AB:BF:91:B3
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 01855D65F7140E75E9414C58121E0773809D
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/lEWMXHJNfsppoEMsAaQ5iKu_kbM.roa
Signing time: Thu 29 Dec 2022 10:20:41 +0000
ROA not before: Thu 29 Dec 2022 10:20:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210546
IP address blocks: 194.113.233.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:65:f7:14:0e:75:e9:41:4c:58:12:1e:07:73:80:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Dec 29 10:20:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94458c5c724d7eca69a0432c01a43988abbf91b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:4f:74:b4:d1:06:8c:4d:3b:2c:6f:4a:10:
c9:7c:2b:02:85:05:79:3a:3c:64:6d:89:a3:f1:12:
04:df:11:f5:21:53:f3:ef:84:85:f4:60:fe:c1:d8:
af:3d:9e:68:96:c1:7d:ff:70:b1:db:8c:16:42:80:
00:09:37:cb:53:c8:ca:71:70:0f:6a:16:6b:b1:da:
1a:7a:6b:cb:3b:90:24:48:f0:35:d1:46:95:16:30:
7c:87:1d:c2:ae:fd:91:7d:dd:a1:03:1a:73:b8:93:
47:56:62:f7:e7:64:4c:89:18:f7:d3:06:f7:d4:43:
7a:ca:be:86:65:4b:51:43:86:d3:7c:7f:d3:05:85:
15:70:5e:4e:cf:34:a8:0f:ac:73:e2:f2:86:94:04:
0f:3d:df:8a:90:21:8d:a4:8e:72:f4:9d:94:f1:b4:
f6:84:8a:06:24:59:6f:1e:1a:85:38:25:75:7a:12:
84:84:07:3e:02:89:c5:2b:57:2e:c9:6f:20:da:99:
2b:ad:50:c7:d0:b0:0b:45:41:e5:ea:07:91:65:94:
33:19:31:63:11:71:ec:db:e5:c4:c4:4e:32:31:3c:
ab:3c:4c:4d:64:a6:54:c5:b6:80:c6:d4:e1:b9:75:
b1:2c:d2:18:13:26:cb:c7:e6:e0:a9:07:45:09:cc:
9e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:45:8C:5C:72:4D:7E:CA:69:A0:43:2C:01:A4:39:88:AB:BF:91:B3
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/lEWMXHJNfsppoEMsAaQ5iKu_kbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.78.0/24
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b1:b5:e4:c7:11:90:62:f6:5b:57:23:b4:e3:bb:6c:78:73:
59:3b:14:09:92:54:74:eb:4b:3e:ca:d9:3e:e0:b4:74:92:e8:
67:00:72:50:69:95:09:00:f2:9b:42:85:5a:ed:b6:df:cf:b5:
1b:79:13:17:db:1c:d2:ae:8b:ff:4d:3d:f5:1e:50:2c:e6:ac:
c4:f2:d9:8c:88:d4:83:11:09:00:68:2f:94:1e:92:24:11:20:
3a:bf:f8:cc:da:11:b7:df:8b:35:5a:cd:bf:8f:e4:86:fb:60:
9d:dc:f5:f3:f0:4d:aa:da:91:76:34:4c:39:21:d9:65:34:84:
99:bc:2a:ce:ae:29:b1:10:87:0d:f7:3e:9b:9f:37:24:d9:9a:
3d:6b:ae:32:f0:10:ee:83:6f:07:1a:6f:25:2d:3f:6d:5e:66:
49:d8:30:30:a0:7b:92:85:0c:35:ee:5e:55:df:c4:53:9e:30:
56:14:ba:13:11:2c:ad:14:20:1c:a4:1f:86:01:1d:5d:6d:b6:
38:20:f4:96:a7:14:1f:82:ad:15:b7:4f:16:b8:43:a7:84:e9:
71:5b:cb:a4:72:1c:ae:24:fe:a9:46:8f:fd:77:a9:7e:db:b9:
47:1d:76:a5:93:42:b3:dd:f1:7b:67:65:23:e8:ec:7d:48:15:
22:62:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org