Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/lLFZ2UYJJfmTumEtv8A7diYm1rM.roa
File: lLFZ2UYJJfmTumEtv8A7diYm1rM.roa (raw, json)
Hash identifier: M0D+c7QwU0QTOkmxym1kQdZnswQY/Z9g678akrtVvAg=
Subject key identifier: 94:B1:59:D9:46:09:25:F9:93:BA:61:2D:BF:C0:3B:76:26:26:D6:B3
Certificate issuer: /CN=5bf81435ed13789895f375dc34d04ce91aca4744
Certificate serial: ECCBDE
Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/lLFZ2UYJJfmTumEtv8A7diYm1rM.roa
Signing time: Fri 11 Feb 2022 10:34:47 +0000
ROA not before: Fri 11 Feb 2022 10:34:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201271
IP address blocks: 158.233.228.0/24 maxlen: 24
158.233.227.0/24 maxlen: 24
158.233.245.0/24 maxlen: 24
158.233.246.0/24 maxlen: 24
158.233.244.0/24 maxlen: 24
158.233.243.0/24 maxlen: 24
158.233.247.0/24 maxlen: 24
158.233.249.0/24 maxlen: 24
158.233.248.0/24 maxlen: 24
158.233.250.0/24 maxlen: 24
158.233.224.0/24 maxlen: 24
2001:67c:2af0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15518686 (0xeccbde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744
Validity
Not Before: Feb 11 10:34:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94b159d9460925f993ba612dbfc03b762626d6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:e6:31:4d:90:41:ce:a9:ce:83:a3:85:a7:
09:bf:8a:84:fb:77:ea:2a:43:19:b0:fa:09:3e:96:
46:9b:6c:e0:b8:6a:5f:7b:3c:84:bb:3a:a2:04:f4:
0c:1b:60:e9:f6:8e:d5:17:71:63:08:c9:e0:ad:f3:
ad:3d:2e:ba:84:c8:6c:7b:de:1a:2c:7e:8c:d3:94:
97:7e:4c:02:5b:5f:87:5e:88:0d:b2:b2:2f:16:ac:
22:3b:6b:4f:a7:4d:89:62:ac:07:c0:bd:12:07:de:
b6:ba:85:b8:ce:f7:30:e5:0a:3f:ae:e1:26:29:55:
75:fe:ef:b3:86:07:12:87:1d:7b:42:a7:12:94:ce:
a2:46:4e:91:df:4f:a5:5b:14:41:41:2e:4c:1a:9b:
3c:ef:64:64:dd:7d:53:41:4f:f4:b2:fb:a8:eb:6e:
b3:1c:91:d4:b8:84:71:15:4f:3f:20:63:91:ce:82:
3f:49:b0:37:f5:9d:fa:74:8d:e1:d6:8b:16:5a:b7:
93:e0:6e:90:1d:91:c1:17:5a:c9:69:d2:ff:f0:2c:
bc:0d:6a:33:f4:25:c0:d1:95:ad:ab:8c:0e:4f:b5:
90:59:20:89:e2:4f:80:7d:ce:d2:1d:45:16:c5:c8:
18:58:ef:4a:79:67:90:4a:80:45:ef:ef:0d:a4:89:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B1:59:D9:46:09:25:F9:93:BA:61:2D:BF:C0:3B:76:26:26:D6:B3
X509v3 Authority Key Identifier:
keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/lLFZ2UYJJfmTumEtv8A7diYm1rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.233.224.0/24
158.233.227.0-158.233.228.255
158.233.243.0-158.233.250.255
IPv6:
2001:67c:2af0::/48
Signature Algorithm: sha256WithRSAEncryption
9e:4a:cb:7e:9a:be:49:1f:62:cf:d4:b3:61:90:33:86:d1:cf:
78:9c:61:ae:d4:d5:6a:e7:63:98:66:fb:05:35:52:fe:eb:0b:
70:d0:d9:97:c7:ed:74:6d:d3:60:8e:8b:cf:a6:56:16:80:1f:
a7:14:66:57:a8:7a:9b:94:46:25:8e:16:5e:5d:fa:dd:dc:aa:
20:b1:a3:a0:55:26:48:f7:ec:f3:5b:57:50:27:36:1a:1e:38:
8e:38:12:ae:80:aa:99:e3:0a:65:3d:46:26:d9:19:ed:17:5e:
11:41:2f:2c:15:ac:60:74:2a:75:9d:9e:3b:1e:67:12:c7:de:
b9:7f:22:cd:42:58:4d:19:df:a6:62:76:31:99:37:5f:9a:4f:
b1:e2:bb:ef:ae:9a:bb:5c:37:f1:4c:f9:8a:3f:45:d7:ae:75:
c4:cd:c8:41:e2:01:4a:7d:90:b8:da:0e:ad:a0:ea:fd:ea:20:
28:15:6a:00:89:b5:b7:ae:20:cb:35:75:95:bf:f2:7e:ec:13:
a0:3b:97:a9:f1:3c:5e:b1:d4:5b:09:86:18:41:49:3b:12:ae:
09:88:e6:c6:4b:40:d1:52:af:90:bb:f1:a8:57:24:6f:ef:0f:
e4:ab:06:33:16:f5:c9:63:32:d1:dd:9f:a6:1f:fc:45:ca:cc:
5a:74:b1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:42 2023 by rpki-client on console-ams.rpki-client.org