Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/LbV3zxzhsBk422eAsViScw5j9Lg.roa
File: LbV3zxzhsBk422eAsViScw5j9Lg.roa (raw, json)
Hash identifier: q7U7fypYIRBgJUaMhjUCKw8vPvMG/j2n5H7EvHzqJBM=
Subject key identifier: 2D:B5:77:CF:1C:E1:B0:19:38:DB:67:80:B1:58:92:73:0E:63:F4:B8
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A701BC6
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/LbV3zxzhsBk422eAsViScw5j9Lg.roa
Signing time: Sat 01 Jan 2022 04:51:53 +0000
ROA not before: Sat 01 Jan 2022 04:51:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41809
IP address blocks: 194.183.36.0/23 maxlen: 23
194.183.38.0/23 maxlen: 23
194.183.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980425670 (0x3a701bc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2db577cf1ce1b01938db6780b15892730e63f4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:7c:f0:7a:eb:49:09:e8:0a:26:e5:1a:3f:
2e:5f:c0:97:b6:84:c2:1c:97:e5:49:f8:bc:97:34:
44:5e:d1:4f:96:ff:8b:07:e9:d9:67:30:60:8d:6d:
40:96:87:7a:70:38:c7:b3:99:ac:40:54:eb:b1:92:
bd:72:48:f4:82:a9:8b:89:ae:d3:41:91:94:2a:92:
cd:12:a7:a0:24:7d:57:d1:fc:c6:4f:74:a9:5d:c3:
7f:75:1d:cf:ca:bd:c3:ef:b0:a5:f2:7f:31:b7:e8:
91:10:6c:d7:f0:4a:95:a9:0b:41:4b:8b:a4:5c:2d:
59:74:b6:7f:13:40:73:01:e2:90:e9:3c:3a:d7:f1:
de:a1:1e:66:cd:fa:b3:93:ca:df:ed:1e:6e:dc:6b:
6a:61:8a:10:89:40:d9:38:90:8d:cf:25:c6:0f:25:
2d:ff:f5:4f:36:f0:69:e2:39:62:b4:c6:c2:35:58:
d5:63:98:2c:f7:19:a1:d3:11:89:c7:21:55:dd:e0:
43:73:2e:20:e0:08:a4:b4:b6:27:87:87:99:f5:84:
80:de:83:66:2f:f4:ab:2e:72:f6:f4:a4:c5:d3:07:
41:52:c4:ce:ca:73:09:96:39:68:ed:04:7e:b5:a1:
0c:da:1f:1a:e5:6c:43:e5:6e:a2:a7:82:67:4b:bb:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B5:77:CF:1C:E1:B0:19:38:DB:67:80:B1:58:92:73:0E:63:F4:B8
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/LbV3zxzhsBk422eAsViScw5j9Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.183.36.0/22
194.183.62.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:a5:40:b1:bf:a4:e7:36:26:d6:91:c2:69:8c:b1:67:99:32:
00:55:45:6b:50:83:b4:8f:32:aa:97:4a:74:d7:73:bf:7e:71:
b1:1e:78:5d:e1:be:6d:59:12:9e:5a:d8:81:25:fe:de:34:a7:
87:5d:d8:7a:7f:7b:c2:0e:e9:69:3b:ac:7b:cd:fd:f1:fb:14:
70:1b:9c:a9:71:70:ca:69:89:e3:87:97:a8:dc:09:f0:4b:51:
47:3a:24:37:82:6e:2e:ff:7c:04:1b:35:f3:04:aa:73:ef:a0:
9b:f5:69:4a:65:af:26:cf:d7:b6:30:76:c7:d5:4b:0f:e2:2d:
1e:72:46:0f:84:62:ac:9b:c8:ba:0d:46:cc:31:81:bf:e0:2b:
48:7e:77:b7:cc:f2:5c:9f:7f:71:90:73:19:b4:32:b3:b1:f2:
5a:dd:57:19:76:3b:62:d8:17:de:3d:98:27:d8:73:59:cf:46:
e9:a2:94:3b:e6:e2:e0:41:2e:fa:77:7b:bd:ed:cd:b3:8c:76:
f6:a4:24:64:33:2b:88:82:df:36:79:e4:7e:1e:fa:88:b7:d8:
ed:02:ff:77:14:b4:d1:2e:64:45:cd:e1:a9:6d:e1:e6:7b:91:
a9:56:51:ba:2a:85:df:50:e3:f4:a6:dc:9d:5d:64:c1:8d:01:
95:1f:ab:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org