Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/_z4jnVkJ2jt8sQF0jO2FxMMcvdw.roa
File: _z4jnVkJ2jt8sQF0jO2FxMMcvdw.roa (raw, json)
Hash identifier: xur7zqL50AQqFJPMP4jfjfSgQjj61Hlpnk6HdiiqaZk=
Subject key identifier: FF:3E:23:9D:59:09:DA:3B:7C:B1:01:74:8C:ED:85:C4:C3:1C:BD:DC
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 0B4B2DFB
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/_z4jnVkJ2jt8sQF0jO2FxMMcvdw.roa
Signing time: Sat 01 Jan 2022 11:58:25 +0000
ROA not before: Sat 01 Jan 2022 11:58:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57256
IP address blocks: 193.30.98.0/24 maxlen: 24
193.30.97.0/24 maxlen: 24
193.30.96.0/24 maxlen: 24
193.30.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189476347 (0xb4b2dfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jan 1 11:58:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff3e239d5909da3b7cb101748ced85c4c31cbddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:00:46:91:fc:0e:b3:43:9c:3d:6e:e7:59:
e4:b5:75:f2:46:0f:be:0e:e0:21:0c:96:0e:32:77:
22:17:b0:d2:e9:75:3b:3e:cf:cc:68:12:c8:13:32:
22:e3:43:b0:a7:6f:77:c6:83:2e:e8:20:d1:e8:f1:
d1:3e:70:85:f3:20:3f:73:84:bc:68:69:d7:72:10:
dd:8e:9d:03:ce:0a:b3:89:8f:10:14:f9:11:8e:22:
48:b0:a5:8e:18:de:69:26:b6:98:fd:b7:2d:bb:c7:
88:d0:a3:91:e2:17:3d:c7:ca:26:bb:b2:1f:85:67:
03:05:fd:c6:78:65:81:e2:72:f8:58:b7:1d:90:6f:
52:f1:b8:93:d7:cb:46:a8:dc:f8:29:64:03:d9:59:
46:cb:c4:35:d5:4b:2e:bd:07:b8:a4:86:b5:83:7d:
c7:0e:3e:e1:a8:3e:b7:b6:74:73:54:d4:d5:aa:ab:
d8:b1:f9:91:08:a5:de:1e:e1:18:f0:c7:ee:a5:23:
db:3a:2f:a0:59:05:7a:24:ed:eb:c0:a9:29:1e:50:
c3:4d:ad:af:ef:93:dc:fb:5d:1d:14:ea:a9:35:8a:
d6:d7:2b:4d:02:20:0b:2c:26:99:e4:95:03:8d:3d:
61:54:08:ea:66:6a:08:b5:d1:c4:1a:cf:7a:77:a9:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3E:23:9D:59:09:DA:3B:7C:B1:01:74:8C:ED:85:C4:C3:1C:BD:DC
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/_z4jnVkJ2jt8sQF0jO2FxMMcvdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.96.0/22
Signature Algorithm: sha256WithRSAEncryption
90:8f:e0:dd:69:ae:e4:12:4e:02:68:06:ad:a1:5d:17:41:b1:
d0:50:95:15:07:3f:17:6d:04:1b:53:c5:1a:c0:c8:31:61:e2:
b1:bb:bb:79:62:1b:db:f7:08:32:28:9b:96:5a:34:86:d2:72:
1e:0d:fc:c9:7f:2a:50:3d:c8:cd:e2:30:ed:a3:9d:41:de:f5:
5f:b6:8c:f8:57:e2:a6:01:18:5d:38:4e:58:35:bb:5d:4d:f0:
51:ff:36:03:d8:38:5d:54:26:a2:64:92:1d:9e:2d:8c:e5:03:
33:47:5e:ac:97:c9:40:6a:5f:f1:d5:77:2d:11:1d:27:ae:7f:
b7:4e:77:89:0b:71:68:da:5a:69:4d:fe:9c:d5:78:59:e2:6b:
e6:78:14:a8:7f:b4:b5:0e:a1:e9:28:64:7d:8d:2c:3c:6a:0b:
5b:ff:74:07:d6:2e:5d:df:15:c2:9d:06:14:6e:03:80:10:da:
52:a1:d0:15:6e:d6:ef:b1:6d:ad:a7:c9:f8:65:89:51:bd:fa:
42:3c:94:5a:c6:5c:15:e8:b2:dc:90:0d:22:6c:8a:cd:00:96:
d1:9d:5a:8e:28:a9:3c:2b:5b:bb:36:b6:53:3a:b0:cf:57:5f:
5c:3e:5e:bc:f9:2d:98:2e:9c:ae:a6:69:8b:c4:b3:2b:55:fb:
01:a2:e3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:17 2024 by rpki-client on console-fra.rpki-client.org