Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/LbnJqoXrwEv8PKSFLp3I3_PORNo.roa
File: LbnJqoXrwEv8PKSFLp3I3_PORNo.roa (raw, json)
Hash identifier: rlvXMwb0BcIcmk1VRgmtVM1wjEkbc/15U1cDaNvTqvU=
Subject key identifier: 2D:B9:C9:AA:85:EB:C0:4B:FC:3C:A4:85:2E:9D:C8:DF:F3:CE:44:DA
Certificate issuer: /CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Certificate serial: 0A71D9D9
Authority key identifier: 8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/LbnJqoXrwEv8PKSFLp3I3_PORNo.roa
Signing time: Thu 02 Jun 2022 07:57:21 +0000
ROA not before: Thu 02 Jun 2022 07:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206461
IP address blocks: 93.94.199.0/24 maxlen: 24
93.94.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175233497 (0xa71d9d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc1063a6efb45e27b111e9207827c9f732502b
Validity
Not Before: Jun 2 07:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2db9c9aa85ebc04bfc3ca4852e9dc8dff3ce44da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:8f:56:45:9c:bb:1f:f0:4b:77:fa:58:1d:
36:89:f6:5e:a6:f8:54:5e:9c:8b:19:b8:d9:e4:2c:
55:6b:03:a0:b4:96:b1:02:ef:78:6e:77:c1:0d:64:
4e:99:4c:4e:d1:d3:20:88:0b:76:62:81:9b:8e:2b:
31:f1:b9:d9:ed:56:7b:b4:41:e7:62:3a:c7:36:b0:
e7:0c:80:68:3f:e3:31:eb:14:48:e8:08:a5:5c:2a:
49:1d:6d:7a:d0:5a:4c:92:09:cb:5b:a4:bc:39:fb:
d7:0b:b4:93:22:4e:c3:93:43:78:02:31:76:b4:4e:
7a:81:a1:de:a9:fc:26:dd:16:5a:d5:bc:c2:c4:9d:
8a:ba:e5:86:d9:57:a3:77:45:ae:35:36:62:d8:f2:
23:95:ac:aa:9b:33:f1:56:f9:a0:7d:18:60:00:9c:
bb:c4:1a:5f:9c:fa:98:3c:80:7d:ba:be:8e:e3:15:
20:a8:dc:94:02:7c:a8:9d:27:21:05:70:70:f2:d0:
03:c2:f0:f5:c5:ad:85:84:16:d5:8d:73:48:c9:b2:
42:ef:fe:07:5b:d7:b9:4b:72:eb:dc:2c:17:b5:a1:
0f:f6:19:13:29:f4:28:08:60:9b:41:58:5a:39:59:
19:e9:9c:98:e5:c3:88:72:08:bf:65:07:49:8c:ed:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B9:C9:AA:85:EB:C0:4B:FC:3C:A4:85:2E:9D:C8:DF:F3:CE:44:DA
X509v3 Authority Key Identifier:
keyid:8F:BC:10:63:A6:EF:B4:5E:27:B1:11:E9:20:78:27:C9:F7:32:50:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7wQY6bvtF4nsRHpIHgnyfcyUCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/LbnJqoXrwEv8PKSFLp3I3_PORNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1d8e80-33a8-4d55-a3d6-5ecdef2fb68d/1/j7wQY6bvtF4nsRHpIHgnyfcyUCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.194.0/24
93.94.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:3f:18:55:df:c3:eb:ef:23:3a:a0:a7:80:87:c2:9d:71:a9:
5c:0e:94:2e:f1:83:82:97:47:bc:55:b6:e8:58:8f:40:94:4e:
09:98:93:5d:5e:7c:4f:b0:b9:56:9a:40:d9:84:e3:3c:9e:bb:
b9:04:51:db:30:b2:8c:03:bc:e4:31:ff:3b:77:32:fa:9c:c1:
d5:5c:97:8e:d2:e5:e6:da:24:f8:a0:2e:81:3a:f3:25:24:57:
7d:55:1b:0d:b7:21:cc:ba:e3:f4:99:6b:8b:3d:a1:c6:4e:16:
99:59:66:31:ef:42:7c:39:88:44:a0:ed:06:f4:9a:81:e4:c9:
77:65:1f:98:ee:a2:fb:d1:0a:33:f2:7a:96:3f:f5:ac:f3:9b:
90:ee:85:76:f8:cc:95:c2:4e:bb:14:da:cb:d4:1f:bb:c0:5d:
30:3c:de:41:90:ca:58:cf:66:87:f2:c7:e1:4d:e4:82:99:4e:
0d:c4:1d:f9:2d:70:ec:da:49:3c:9d:a8:6f:28:cf:0c:bf:0b:
8c:3c:79:0a:4b:a9:41:ef:51:0f:96:bc:8a:69:62:d5:d3:86:
c1:ca:cf:74:07:04:4a:05:d5:b0:74:aa:82:da:72:ae:21:fb:
82:85:02:59:4b:1e:e4:e7:7d:6b:c9:05:cd:94:33:bf:ae:78:
96:12:05:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:48 2024 by rpki-client on console-fra.rpki-client.org