Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/LbvRw2w2nda0xkVrxGaIgdFauvk.roa
File: LbvRw2w2nda0xkVrxGaIgdFauvk.roa (raw, json)
Hash identifier: Bp5s9dKlKjwa5Wma4UASWR3J54DZ48gf362AX1djpAc=
Subject key identifier: 2D:BB:D1:C3:6C:36:9D:D6:B4:C6:45:6B:C4:66:88:81:D1:5A:BA:F9
Certificate issuer: /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial: 0182D1EC8EBECE4D98C220B891FBE08819B6
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/LbvRw2w2nda0xkVrxGaIgdFauvk.roa
Signing time: Wed 24 Aug 2022 22:15:17 +0000
ROA not before: Wed 24 Aug 2022 22:15:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41227
IP address blocks: 194.34.160.0/24 maxlen: 24
194.34.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d1:ec:8e:be:ce:4d:98:c2:20:b8:91:fb:e0:88:19:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Validity
Not Before: Aug 24 22:15:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dbbd1c36c369dd6b4c6456bc4668881d15abaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:2d:f8:f8:cb:b7:8d:49:87:52:01:4d:f5:
04:13:cd:9a:76:1a:be:d7:00:20:e6:3f:ab:0c:2a:
4f:af:d8:ed:b1:7e:15:bf:de:af:03:18:17:fd:68:
0e:25:a2:f7:31:f0:ed:8d:3c:fb:ac:59:87:ef:6f:
38:37:b9:8a:ec:08:a3:03:70:c6:15:4f:7e:21:19:
66:8f:e9:f1:c9:a8:51:b6:05:aa:08:ff:88:3d:5a:
4e:f0:bf:09:98:8b:d9:b5:1e:23:54:68:79:86:39:
c5:d8:43:81:ab:71:d4:3d:5a:51:b5:e2:53:aa:c2:
95:63:26:fd:eb:4a:a3:ba:6b:bf:47:54:f1:42:82:
ab:c1:75:7d:e0:15:88:bf:2d:0f:28:0b:6c:06:ae:
bd:2d:a5:d6:81:7e:a0:83:d7:e9:d4:a9:1d:3a:65:
40:de:45:74:7b:a0:16:cd:9c:de:64:d0:ba:56:04:
2c:a9:f1:e0:21:7a:cb:54:31:3c:68:6f:52:5a:58:
5a:1d:84:d9:5c:a8:60:1b:f4:46:97:06:a1:01:d5:
3d:16:2a:56:47:9a:0a:bd:38:43:f9:2b:90:81:27:
25:47:2f:20:41:f7:9b:80:de:b7:72:9b:5d:30:0c:
a1:e6:46:35:f6:18:56:9a:e2:f2:9c:76:a4:27:da:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BB:D1:C3:6C:36:9D:D6:B4:C6:45:6B:C4:66:88:81:D1:5A:BA:F9
X509v3 Authority Key Identifier:
keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/LbvRw2w2nda0xkVrxGaIgdFauvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.160.0/24
194.34.162.0/24
Signature Algorithm: sha256WithRSAEncryption
60:14:5e:76:2d:5b:45:52:6d:dc:c9:b1:64:e1:49:83:31:3a:
d7:35:6b:37:a9:c2:84:0d:3c:62:c9:e2:16:0d:37:c5:24:f0:
2f:d6:1f:4d:40:83:3d:85:7d:7e:29:5b:6c:ad:22:cf:21:40:
a6:f8:ba:cf:52:d9:7c:61:a2:a4:9d:03:50:58:28:66:da:36:
9e:3b:67:5a:a3:83:2b:a0:9e:91:07:30:ab:11:36:1a:10:01:
9d:4e:66:94:4e:47:32:2a:2c:8e:cf:cf:c8:22:d0:f5:d6:72:
e6:1d:18:bd:84:41:85:9c:6d:f6:37:79:88:b9:5d:54:e6:3c:
fe:9f:88:38:8c:aa:16:6c:5e:8b:65:28:e7:66:76:0c:51:4d:
56:53:be:25:6e:b5:4e:d9:be:98:76:bb:8a:39:91:4e:f5:80:
1a:39:e9:f6:46:c1:78:24:15:98:5f:16:be:4c:8b:5a:fe:79:
d5:ac:96:fe:3f:00:f7:14:75:4e:01:b1:a8:d9:66:f1:6d:8c:
4a:c5:bb:d0:f0:23:bf:f8:77:46:34:96:30:a7:f6:d8:d4:86:
14:1e:1f:fa:ba:72:0f:18:47:9e:68:09:75:d7:27:2e:26:04:
68:a9:de:8e:b3:f0:f7:82:a6:2c:f3:e7:0e:73:0f:2b:57:e1:
03:07:d9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:35 2023 by rpki-client on console-ams.rpki-client.org