Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lKT2PIwU0CJKAsupnpueP6lBmiI.roa
File: lKT2PIwU0CJKAsupnpueP6lBmiI.roa (raw, json)
Hash identifier: fKuzsRqXCFdX6F7+X4TNTzE7516tGZVPMfni4Ip9FZw=
Subject key identifier: 94:A4:F6:3C:8C:14:D0:22:4A:02:CB:A9:9E:9B:9E:3F:A9:41:9A:22
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 0B50D677
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lKT2PIwU0CJKAsupnpueP6lBmiI.roa
Signing time: Thu 31 Mar 2022 11:22:37 +0000
ROA not before: Thu 31 Mar 2022 11:22:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49624
IP address blocks: 188.93.170.0/23 maxlen: 23
2001:7f8:4c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189847159 (0xb50d677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Mar 31 11:22:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94a4f63c8c14d0224a02cba99e9b9e3fa9419a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:63:aa:20:05:5d:85:14:e5:d1:b8:61:f9:
2e:ca:b0:a9:4f:28:8e:4d:52:ae:ee:31:19:49:e3:
43:ce:63:8e:c8:67:32:12:39:53:37:83:02:1d:d2:
42:b2:f1:e2:84:07:32:c2:53:cf:b3:cf:b8:42:12:
27:49:db:23:bc:65:27:a7:aa:31:a1:4c:78:9a:0a:
95:34:34:6c:62:67:fe:b9:fb:a6:ad:b3:6f:8f:6e:
95:aa:6a:a5:48:d4:ec:1a:0b:c1:72:26:38:57:6d:
38:0a:4a:34:10:23:1a:ef:0a:87:a1:b8:ac:67:e2:
58:02:f0:dc:84:cd:df:64:19:23:a2:85:a1:df:1d:
61:e1:27:8e:59:75:fc:f1:45:d5:0c:06:64:5c:d1:
0c:17:94:1a:0e:dd:de:58:cf:f4:c8:92:bc:0b:ab:
35:3d:0c:b0:b1:27:b1:3a:c1:87:f4:c8:8b:c2:e2:
b6:67:f5:b5:ba:fb:fb:d3:d9:fc:7d:f0:e1:9d:a5:
79:4c:9c:c1:28:2a:f3:4f:f2:58:f4:26:81:3c:41:
f2:95:41:14:bc:90:68:e9:29:c8:76:62:b6:88:ee:
63:18:72:58:46:ab:5c:1d:76:8b:e6:f0:4a:c8:98:
18:6c:09:eb:47:e8:0a:99:fe:7f:97:bd:19:0d:a0:
bf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A4:F6:3C:8C:14:D0:22:4A:02:CB:A9:9E:9B:9E:3F:A9:41:9A:22
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lKT2PIwU0CJKAsupnpueP6lBmiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.170.0/23
IPv6:
2001:7f8:4c::/48
Signature Algorithm: sha256WithRSAEncryption
bc:24:19:5e:77:51:06:b7:be:09:3e:f2:44:15:41:56:57:41:
9b:ab:c4:1c:3b:cf:09:72:90:cd:8b:ee:da:1f:e2:9a:29:5e:
2d:73:4d:02:58:51:92:54:a4:d5:af:4a:4b:6f:c5:6f:d3:1f:
c1:8a:f3:d6:1d:94:cf:5d:4f:ac:0a:b6:dc:fa:5c:bd:4d:b1:
05:fa:57:6e:ee:bd:c3:7e:ac:43:41:4e:42:b7:0b:f7:96:d6:
35:a7:4c:35:5e:70:19:92:60:08:72:4a:6b:08:81:1b:3e:46:
0f:fd:41:ae:f2:a9:ac:f0:df:27:7d:52:a4:ee:13:e0:b2:fa:
4e:97:39:7e:3e:d5:43:96:ab:bb:4e:a4:fc:3f:e3:a6:27:0a:
c8:4b:b4:de:bd:73:ae:c0:49:90:1c:72:f4:2c:fc:75:a2:c9:
ab:c7:5e:ee:37:a8:8a:f1:68:46:d7:03:11:3b:3e:76:71:21:
02:dc:e9:38:e8:07:a1:fc:7b:64:d0:ec:d3:f8:57:9c:88:31:
e0:d1:71:62:26:f7:73:b2:99:c2:03:56:3f:27:92:82:d8:a5:
b6:27:ce:d4:de:ef:34:ea:42:61:67:d6:5a:74:27:50:dc:d9:
da:95:7f:93:88:b1:0a:9e:15:fe:06:9a:74:23:fb:d5:b9:e2:
7e:87:40:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:13 2024 by rpki-client on console-fra.rpki-client.org