Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/lkNbqbnsCJIeXAIKP3R4AalIcqM.roa
File: lkNbqbnsCJIeXAIKP3R4AalIcqM.roa (raw, json)
Hash identifier: SfbYKlm6rN3Wmr1U7EXMOSSWSz2gO/Zzj6fLsUDbZFQ=
Subject key identifier: 96:43:5B:A9:B9:EC:08:92:1E:5C:02:0A:3F:74:78:01:A9:48:72:A3
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0181F257BBC70E3509367D3961F65F32DBE1
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/lkNbqbnsCJIeXAIKP3R4AalIcqM.roa
Signing time: Tue 12 Jul 2022 12:17:24 +0000
ROA not before: Tue 12 Jul 2022 12:17:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59903
IP address blocks: 141.101.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:57:bb:c7:0e:35:09:36:7d:39:61:f6:5f:32:db:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jul 12 12:17:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96435ba9b9ec08921e5c020a3f747801a94872a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d6:f0:ef:80:e1:e6:a9:f2:3c:fa:d4:c5:40:
0a:75:af:3f:56:8d:be:92:6a:57:a4:75:c0:1e:cf:
4c:49:b5:a6:eb:1a:75:6b:7d:2c:29:cc:c9:0c:c4:
7f:6d:1d:00:bc:43:cc:93:99:ee:7d:ec:65:e6:ae:
18:9e:e1:80:70:d5:97:fb:34:09:8e:1e:f5:8d:25:
14:f0:5d:95:cc:64:51:0a:cc:43:6d:63:10:f5:86:
22:7d:20:6d:2f:8c:de:de:e7:9c:80:40:a6:1c:8d:
6c:09:1f:17:55:cc:37:32:8d:f8:b5:64:41:bf:37:
87:4d:19:9a:b7:e2:0f:63:ca:8d:69:fa:07:50:3e:
4d:15:4c:75:ec:ea:3b:95:e3:98:84:92:c1:ff:0d:
4b:b7:63:dc:99:d9:a8:d8:fb:1c:39:91:b9:c4:a7:
d8:e8:7a:47:cc:1d:51:37:b3:7e:92:62:09:16:1f:
dd:6d:cb:5c:4d:28:4b:d9:3b:59:9b:f6:2c:da:24:
ee:8c:b3:61:22:89:4b:df:cb:89:c2:25:03:64:e9:
fc:3b:a7:ee:84:d6:bf:c9:5c:15:1f:9f:da:c7:48:
dd:42:23:04:4d:ad:97:c8:14:96:e1:63:23:e3:4a:
e4:e5:dd:e2:3d:2a:23:73:81:d3:59:2c:d1:4a:f9:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:43:5B:A9:B9:EC:08:92:1E:5C:02:0A:3F:74:78:01:A9:48:72:A3
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/lkNbqbnsCJIeXAIKP3R4AalIcqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2b:5a:e3:ed:40:48:ee:96:53:c4:48:76:78:7c:b3:91:43:
3c:dd:b7:40:0b:48:1b:f2:de:e7:27:51:3b:6d:4e:e9:d0:71:
9e:e2:b2:e6:88:8e:4c:40:b3:ff:0e:2b:62:10:be:9c:23:8d:
45:8b:90:b6:5a:30:65:31:de:81:ee:34:91:42:33:1c:80:0e:
ec:a1:24:db:a2:cc:4c:2c:a0:49:8d:f0:e1:b8:da:20:97:0f:
67:0d:41:76:be:2a:83:47:8b:5b:29:b7:3c:66:16:a6:c7:c7:
44:7f:f6:37:9e:8c:cd:08:12:eb:f8:9c:79:2e:71:1b:55:0c:
65:2a:f0:df:f1:a4:f9:f4:2a:9c:66:62:c6:3b:68:9c:33:18:
39:ff:34:20:16:b0:90:a8:6b:73:74:a5:b5:b2:95:32:d1:25:
84:88:bf:56:c6:3a:d2:24:13:92:f2:1e:58:16:b4:e4:16:61:
3b:6b:0b:e0:c0:8c:fe:1c:cf:24:c3:36:e7:a3:11:71:8c:94:
2f:3c:08:70:ba:fd:a2:ea:89:53:13:c1:07:c4:ea:79:bb:d5:
85:a3:a0:5b:56:d7:82:fe:1f:15:d6:9b:a3:d4:93:5f:06:b6:
c5:41:48:36:8b:36:ad:d6:6c:7c:08:7d:88:8c:c8:db:24:0e:
80:af:60:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHyV7vHDjUJNn05YfZfMtvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjIwNzEyMTIxNzI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjQzNWJhOWI5ZWMwODkyMWU1YzAyMGEzZjc0NzgwMWE5NDg3MmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdbw74Dh5qnyPPrUxUAKda8/Vo2+
kmpXpHXAHs9MSbWm6xp1a30sKczJDMR/bR0AvEPMk5nufexl5q4YnuGAcNWX+zQJ
jh71jSUU8F2VzGRRCsxDbWMQ9YYifSBtL4ze3uecgECmHI1sCR8XVcw3Mo34tWRB
vzeHTRmat+IPY8qNafoHUD5NFUx17Oo7leOYhJLB/w1Lt2Pcmdmo2PscOZG5xKfY
6HpHzB1RN7N+kmIJFh/dbctcTShL2TtZm/Ys2iTujLNhIolL38uJwiUDZOn8O6fu
hNa/yVwVH5/ax0jdQiMETa2XyBSW4WMj40rk5d3iPSojc4HTWSzRSvlEYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJZDW6m57AiSHlwCCj90eAGpSHKjMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvbGtOYnFibnNDSkllWEFJS1AzUjRBYWxJY3FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWX4MA0G
CSqGSIb3DQEBCwUAA4IBAQCLK1rj7UBI7pZTxEh2eHyzkUM83bdAC0gb8t7nJ1E7
bU7p0HGe4rLmiI5MQLP/DitiEL6cI41Fi5C2WjBlMd6B7jSRQjMcgA7soSTbosxM
LKBJjfDhuNoglw9nDUF2viqDR4tbKbc8Zhamx8dEf/Y3nozNCBLr+Jx5LnEbVQxl
KvDf8aT59CqcZmLGO2icMxg5/zQgFrCQqGtzdKW1spUy0SWEiL9WxjrSJBOS8h5Y
FrTkFmE7awvgwIz+HM8kwzbnoxFxjJQvPAhwuv2i6olTE8EHxOp5u9WFo6BbVteC
/h8V1puj1JNfBrbFQUg2izat1mx8CH2IjMjbJA6Ar2CL
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org