Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/lwgs8SVkmXyRzsHJ5VnhztSQ_rc.roa
File: lwgs8SVkmXyRzsHJ5VnhztSQ_rc.roa (raw, json)
Hash identifier: 26whJLFEZirAyMaqkZVJowxMSNazskbDFhAuUCmAJ1I=
Subject key identifier: 97:08:2C:F1:25:64:99:7C:91:CE:C1:C9:E5:59:E1:CE:D4:90:FE:B7
Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Certificate serial: 02DD89B2
Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/lwgs8SVkmXyRzsHJ5VnhztSQ_rc.roa
Signing time: Sat 01 Jan 2022 07:52:40 +0000
ROA not before: Sat 01 Jan 2022 07:52:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62336
IP address blocks: 85.209.60.0/22 maxlen: 22
2a09:88c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48073138 (0x2dd89b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43
Validity
Not Before: Jan 1 07:52:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97082cf12564997c91cec1c9e559e1ced490feb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:24:ee:9a:99:df:cf:db:ae:14:5d:67:8e:
f2:11:0f:92:66:4c:de:a6:48:4a:82:08:21:f9:0f:
77:d0:01:c1:1a:27:39:98:0b:0c:f0:b5:95:a6:29:
4b:37:69:1a:21:f0:0f:0e:3d:dd:d3:3e:ec:0d:84:
e0:8e:94:37:4a:16:d7:0c:c3:3c:e2:ee:c7:e8:bb:
de:8d:6a:2d:0a:57:85:f8:22:25:12:c7:94:93:ff:
1f:46:ad:26:00:c8:4c:70:89:f2:97:46:3f:df:a1:
64:2e:f2:2e:91:66:51:70:ac:67:c5:c3:b6:3b:d2:
21:f0:02:72:be:4a:0e:60:a0:56:9b:3b:15:dd:f5:
5d:e8:5e:f3:1c:9d:a1:3a:a2:56:da:84:aa:9b:ef:
d7:23:27:82:21:8f:d2:09:70:f6:27:93:c9:f0:ab:
fc:fa:b0:e3:c8:34:54:3c:c5:aa:95:28:93:a6:94:
d4:39:6a:84:39:8c:c6:b3:ab:a2:3b:fb:c1:9d:2c:
cc:15:cc:cd:17:fe:ad:c6:c1:67:e8:66:c7:86:91:
06:ea:22:67:8d:5c:6d:e5:c0:bb:cc:65:e3:cb:38:
71:95:f9:c2:00:b4:04:d3:2c:30:5f:91:c0:81:81:
67:a7:4c:fd:ba:ac:02:29:b5:eb:64:35:48:9b:a4:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:08:2C:F1:25:64:99:7C:91:CE:C1:C9:E5:59:E1:CE:D4:90:FE:B7
X509v3 Authority Key Identifier:
keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/lwgs8SVkmXyRzsHJ5VnhztSQ_rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.60.0/22
IPv6:
2a09:88c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:e0:a2:c3:20:85:72:fa:64:5f:9f:dd:dd:c2:9b:20:09:f4:
68:31:54:3c:dd:8a:7f:47:7e:5f:06:0d:a7:39:6e:14:9e:92:
e5:db:d5:e2:6f:c3:b6:b6:0f:1a:03:fa:59:01:51:97:d3:ed:
b1:96:f9:41:6a:08:6c:c9:4e:26:ca:e6:e5:d1:2a:cb:5c:e7:
4b:a6:d1:e9:a3:dd:5a:f3:38:61:e8:4a:70:e6:44:60:5e:42:
89:20:5c:0b:48:cf:be:d6:23:d8:4e:8f:3b:20:99:03:78:f9:
03:12:d5:c7:ed:44:e5:0c:61:6c:41:47:6f:9f:1a:a5:87:49:
07:08:99:98:3a:a1:43:43:cc:45:1c:8c:9b:76:cf:f2:05:93:
27:bd:64:ce:2e:c6:f9:f6:69:b5:af:80:2c:e9:4a:83:83:1e:
9e:07:87:46:f0:2b:6d:41:ba:42:9a:12:a1:0f:c3:7c:a6:95:
81:5a:79:dd:6d:5f:2b:e0:36:22:4a:c1:74:3d:71:53:2c:4b:
dd:09:0d:0f:5d:38:24:21:86:67:ff:68:2a:90:91:8d:05:f6:
c2:a2:f6:bd:d0:64:a8:ce:8f:bd:04:23:8d:3a:ba:7d:64:9f:
8c:ab:94:65:2d:33:99:fb:9a:2d:38:07:10:ed:80:f0:7a:69:
08:78:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org