Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/qlLzoCz_vfyg2C7ff_LGOV1jvFg.roa
File: qlLzoCz_vfyg2C7ff_LGOV1jvFg.roa (raw, json)
Hash identifier: iWqTinskS40y/6wfyGOcoYiw5I4sEar/5Lnq8Vc+SY8=
Subject key identifier: AA:52:F3:A0:2C:FF:BD:FC:A0:D8:2E:DF:7F:F2:C6:39:5D:63:BC:58
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 055609DB
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/qlLzoCz_vfyg2C7ff_LGOV1jvFg.roa
Signing time: Sat 14 May 2022 04:02:51 +0000
ROA not before: Sat 14 May 2022 04:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47330
IP address blocks: 188.213.69.0/24 maxlen: 24
188.213.66.0/24 maxlen: 24
188.213.67.0/24 maxlen: 24
188.213.68.0/24 maxlen: 24
188.213.65.0/24 maxlen: 24
37.156.28.0/23 maxlen: 23
92.114.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89524699 (0x55609db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: May 14 04:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa52f3a02cffbdfca0d82edf7ff2c6395d63bc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:82:ac:8c:91:48:70:70:40:c6:f2:b1:94:
f8:9e:0b:da:fd:5c:e8:e1:a9:a7:6c:9a:28:6d:cc:
e9:93:ec:f0:6c:9e:13:64:fc:60:0c:9a:7e:24:49:
db:2f:79:c1:4d:0e:e4:34:b6:bb:5e:35:e0:e7:19:
4a:6a:c2:b4:f9:82:aa:f5:3a:7f:ae:4a:09:eb:36:
c0:84:ce:fe:89:3a:00:45:8e:4a:de:2e:c2:c7:fc:
d1:b8:cc:37:0e:07:2d:7b:f0:a0:df:cc:f4:34:b1:
7b:88:de:90:10:5b:ae:ed:02:dc:f8:b7:76:e2:86:
d7:f9:a5:88:35:af:33:80:39:05:da:f9:37:54:64:
fb:07:58:1a:e6:f1:2e:48:08:70:8c:f6:72:fa:f2:
d3:10:7f:c3:26:1c:6a:6a:16:88:27:93:c1:f8:ad:
18:10:a2:8d:8f:f8:17:a4:a8:6a:4b:5a:a2:c5:70:
0f:79:e0:b9:43:eb:9f:0f:5b:45:5d:70:0e:d5:08:
ed:57:98:3e:d7:54:52:5e:d4:89:7e:43:a8:4a:8f:
d9:6c:84:95:c3:11:85:ee:68:9d:af:86:db:30:53:
ce:73:71:d7:95:e4:ea:47:7d:b0:44:e7:6e:d4:5a:
f6:7b:c7:d0:61:61:4b:8a:1a:79:24:10:52:cf:b5:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:52:F3:A0:2C:FF:BD:FC:A0:D8:2E:DF:7F:F2:C6:39:5D:63:BC:58
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/qlLzoCz_vfyg2C7ff_LGOV1jvFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.28.0/23
92.114.16.0/22
188.213.65.0-188.213.69.255
Signature Algorithm: sha256WithRSAEncryption
68:dc:80:37:90:e3:63:cd:1e:bd:dd:6f:77:7e:47:27:0e:aa:
83:17:d2:d7:5a:01:ed:f1:e5:56:f5:27:71:9b:7a:64:9e:7e:
65:ff:ac:24:f8:c7:31:32:18:81:00:41:6d:90:60:5a:64:ea:
66:e9:ab:08:82:54:76:37:4d:ce:aa:e0:ca:ec:2c:09:c0:e9:
c8:c0:f6:01:87:45:73:97:94:86:7b:06:04:d4:1d:ef:47:da:
d4:1f:2f:f8:c0:a7:79:f3:d8:00:7f:95:0f:0b:4c:20:d8:49:
05:f9:cc:d3:1d:62:7e:18:fc:3d:b5:72:9c:7e:92:8b:bb:fa:
d5:4e:eb:8e:ce:85:a7:82:3f:ad:9e:bf:bf:74:b1:9b:f9:93:
bd:12:dc:75:b5:7a:dd:a9:0a:da:0c:15:04:3c:ee:0d:97:d0:
7b:79:21:d6:d3:24:cf:fc:32:2e:6b:04:8c:4d:80:26:10:35:
32:f5:3e:ae:42:a5:2a:a8:30:f8:15:b0:4d:da:f4:34:28:73:
dc:85:0f:dd:ea:6e:91:70:5d:2b:ca:9c:20:69:40:ae:6f:c7:
aa:02:a9:d5:4d:ae:6b:ec:39:43:de:d7:43:88:54:67:69:a8:
ce:d1:1e:ad:33:b1:c0:c3:b5:37:f7:ec:d8:b9:7f:96:28:d4:
11:68:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:19 2024 by rpki-client on console-ams.rpki-client.org