Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/1-LuqKzb55GKMMmr60kn-Bu85WKA.roa
File: 1-LuqKzb55GKMMmr60kn-Bu85WKA.roa (raw, json)
Hash identifier: FfKJ8e+MVagCtPwCXeKmCSFEMhvfwsMXZOgry2MVDDo=
Subject key identifier: F8:BB:AA:2B:36:F9:E4:62:8C:32:6A:FA:D2:49:FE:06:EF:39:58:A0
Certificate issuer: /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial: 0183AD559FE12C41513065821C3E447D608A
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/1-LuqKzb55GKMMmr60kn-Bu85WKA.roa
Signing time: Thu 06 Oct 2022 12:46:53 +0000
ROA not before: Thu 06 Oct 2022 12:46:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203773
IP address blocks: 194.149.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:55:9f:e1:2c:41:51:30:65:82:1c:3e:44:7d:60:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
Validity
Not Before: Oct 6 12:46:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8bbaa2b36f9e4628c326afad249fe06ef3958a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:48:c8:d4:38:c6:d4:aa:97:be:c8:65:c8:
6c:58:cd:ee:0e:3f:e3:8b:a3:26:2e:0d:db:07:9b:
b8:94:7f:e2:f2:37:d7:70:3d:21:40:07:8d:5e:a9:
9c:87:4e:07:bd:5d:dc:21:88:63:5b:a5:23:e1:19:
a9:17:96:02:f7:f6:a2:82:d9:cb:01:54:f1:b8:82:
2a:3e:07:48:c0:14:4d:3c:f8:df:af:6c:95:6a:c0:
f6:80:b4:b9:7b:5f:24:d4:23:e5:a7:90:4c:5f:40:
e7:18:9d:6a:9c:7d:a6:8e:5c:35:b0:25:d0:05:bb:
5b:86:52:09:d6:f9:09:8a:5f:c4:86:90:38:ad:4d:
a8:4a:b2:e6:c8:ec:62:da:d0:47:4b:dc:34:b8:f9:
1e:ef:8e:66:65:40:cb:6f:8b:03:8a:17:e5:4e:42:
b0:f9:81:3f:62:f4:53:29:17:90:b4:d8:c7:d5:4e:
51:b2:ba:d9:3a:f5:00:b8:5b:9b:c4:14:fc:a1:83:
5b:3d:e5:95:f3:5d:9e:1f:ec:7c:14:c8:65:38:68:
9f:8f:3d:83:98:6c:dd:c1:a5:b6:d7:c0:f1:42:6b:
fe:b1:0d:9f:2d:27:b0:91:a1:16:37:e4:b7:64:d9:
d5:60:c5:87:c5:c0:c9:ab:2d:2c:5b:da:1a:46:45:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BB:AA:2B:36:F9:E4:62:8C:32:6A:FA:D2:49:FE:06:EF:39:58:A0
X509v3 Authority Key Identifier:
keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/1-LuqKzb55GKMMmr60kn-Bu85WKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.237.0/24
Signature Algorithm: sha256WithRSAEncryption
04:3c:44:e1:68:da:5d:62:89:4b:fd:dd:3c:74:8b:b1:8e:a1:
75:21:4d:d0:ad:f7:d3:93:d3:42:ba:60:83:9e:c3:db:72:14:
7c:6b:c1:41:2b:1c:f5:4a:21:15:4c:76:e6:a4:32:aa:35:64:
f3:31:54:ab:be:9d:e7:cc:ef:d6:f0:56:57:12:45:c3:d8:c4:
5b:7d:78:34:e1:eb:07:ac:a9:e0:e2:ad:37:79:84:e7:73:f1:
7c:f2:69:56:0a:fc:6a:25:03:6e:c0:49:d3:a2:f5:f6:1b:cd:
8a:43:ff:c7:4b:1a:6d:55:47:27:9c:c6:d2:e5:56:b5:59:22:
64:8c:99:30:02:60:f5:47:a8:df:0b:9a:4f:90:fc:4a:13:1c:
4b:af:d8:1b:7c:f2:7f:56:02:45:c1:60:2a:82:ef:38:05:f4:
ac:36:34:0c:93:b6:e5:66:e8:37:f3:a8:62:ec:2f:ef:bc:32:
48:0c:7b:74:af:44:09:d3:10:18:10:5f:9c:8c:48:3b:a4:f6:
d4:4e:bb:a6:24:fb:a6:1a:d3:57:1c:28:f5:f9:49:12:83:60:
56:62:c0:8c:09:d7:8b:5e:22:27:f1:f8:1d:e7:79:ea:39:f5:
5d:e1:d0:94:e3:9b:35:c8:ac:4e:a7:24:e8:3c:9e:8c:2a:15:
e4:74:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:08 2024 by rpki-client on console-fra.rpki-client.org