Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/lbHZlCko2UzBN2pIt3FwYLeV0sw.roa
File: lbHZlCko2UzBN2pIt3FwYLeV0sw.roa (raw, json)
Hash identifier: 3srkcfdN9/B7yjwdGQsTT/8VK8GRxalk5KKCyaZQ8yI=
Subject key identifier: 95:B1:D9:94:29:28:D9:4C:C1:37:6A:48:B7:71:70:60:B7:95:D2:CC
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 0184AD8EDAFE8C4FCD959EE8471AAEC37705
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/lbHZlCko2UzBN2pIt3FwYLeV0sw.roa
Signing time: Fri 25 Nov 2022 06:52:11 +0000
ROA not before: Fri 25 Nov 2022 06:52:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57093
IP address blocks: 81.162.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:8e:da:fe:8c:4f:cd:95:9e:e8:47:1a:ae:c3:77:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Nov 25 06:52:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95b1d9942928d94cc1376a48b7717060b795d2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:b4:92:13:df:1a:61:51:f3:f7:fa:3d:9e:
a2:a2:a1:f3:2c:95:1a:a5:f5:20:eb:4a:0e:cd:1a:
d9:f8:43:5a:9f:08:23:1f:53:cc:b2:0a:b0:ba:31:
9d:64:ee:79:c7:ce:16:a4:05:31:6a:d5:93:53:ec:
b4:73:b0:8c:2a:29:d4:99:4d:fb:20:9a:e9:42:4b:
c7:76:58:37:ac:06:92:44:e1:e7:60:5d:84:4e:3e:
5f:55:34:52:a0:42:08:5d:11:09:d0:9d:be:07:eb:
d5:92:23:cd:19:a9:18:4a:9a:45:d2:fd:8a:6e:7e:
62:d2:3f:d2:28:a2:2b:90:b7:6f:9c:34:40:33:89:
d7:42:72:c6:1e:9d:5d:98:36:b9:b2:af:ce:36:a7:
d4:12:98:00:ca:86:6d:ff:af:98:4d:f8:fe:17:8f:
7a:54:f7:13:f3:7d:2f:ff:d4:91:24:88:d4:c1:44:
ec:71:1c:a7:b2:82:e7:14:d0:29:be:bf:35:c6:18:
a3:b7:37:4a:0a:93:1b:b0:ac:77:9f:26:6d:0b:e6:
eb:f6:7f:de:84:28:d7:93:d1:bf:aa:cb:3d:de:3a:
05:74:9e:b3:2a:e7:59:03:4e:5b:e6:c7:89:52:48:
5a:13:d7:c3:32:c8:eb:6f:f3:6d:29:12:e8:8f:32:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:D9:94:29:28:D9:4C:C1:37:6A:48:B7:71:70:60:B7:95:D2:CC
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/lbHZlCko2UzBN2pIt3FwYLeV0sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.100.0/22
Signature Algorithm: sha256WithRSAEncryption
65:e6:b1:23:db:f2:88:ac:7d:df:38:ac:86:07:09:15:09:5f:
87:57:29:3d:47:ee:76:ba:9b:8c:66:65:0a:18:88:df:46:4a:
f4:ad:68:77:2a:53:60:fc:5a:3c:4f:9a:76:cb:76:d5:44:31:
d3:0b:2a:8a:f5:bf:16:5a:a3:00:26:cd:29:09:dc:02:d4:39:
be:d3:9a:d2:45:f3:23:1a:5f:fb:4e:b4:97:d6:41:0d:e5:c9:
d6:f4:9d:0a:69:4a:36:a6:e1:be:20:b8:95:bb:c2:4f:f4:41:
ab:ef:5b:1a:fe:ab:93:36:af:dc:d7:b5:ec:85:2f:78:ab:5f:
8f:51:cd:eb:ab:b3:71:8a:33:b8:0e:23:44:eb:8e:0f:1e:af:
a9:d0:05:0a:3f:73:37:7d:78:d0:df:71:fe:90:30:59:ab:af:
31:8a:5d:4d:b2:44:e3:23:5a:f0:91:3d:ae:e7:82:6a:ce:82:
da:07:64:ea:5c:ad:b6:67:57:11:72:ee:df:5d:4a:8b:8f:64:
6c:e7:03:49:e7:a5:07:41:67:c3:ca:0b:84:3b:6c:f5:48:1b:
e8:a0:83:d7:d2:0c:8b:89:df:ca:33:62:2f:fc:09:02:d7:d5:
19:26:b7:26:83:e0:93:a4:01:fe:70:25:1b:a4:95:62:e7:41:
ad:cc:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:46 2024 by rpki-client on console-ams.rpki-client.org