Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/LEh9rpjI3IX_JVD0x8QAs3zVKsE.roa
File: LEh9rpjI3IX_JVD0x8QAs3zVKsE.roa (raw, json)
Hash identifier: Fz1rpNSiDpzbdmlTgAENtM/a1JthoFEq1IGZ/wpmaaE=
Subject key identifier: 2C:48:7D:AE:98:C8:DC:85:FF:25:50:F4:C7:C4:00:B3:7C:D5:2A:C1
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 0BFDDC31
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/LEh9rpjI3IX_JVD0x8QAs3zVKsE.roa
Signing time: Sat 01 Jan 2022 10:04:36 +0000
ROA not before: Sat 01 Jan 2022 10:04:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50471
IP address blocks: 109.95.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201186353 (0xbfddc31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: Jan 1 10:04:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c487dae98c8dc85ff2550f4c7c400b37cd52ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:d4:f7:82:58:79:38:de:85:7b:49:6f:d6:
30:14:8e:a3:48:f4:06:f4:7a:f7:18:1f:2c:7b:5d:
2e:5b:50:34:09:84:23:4f:2a:27:2b:74:62:a9:f8:
1c:d2:03:cd:4c:53:fc:e2:f7:24:0c:dd:41:88:b6:
98:9c:ed:37:a3:e7:b2:35:46:53:b3:17:06:6d:54:
6e:b4:ea:47:a0:73:77:8a:74:99:60:46:25:45:03:
ab:15:3e:5a:0a:2e:83:4c:92:6a:54:63:63:56:64:
d0:f5:15:51:bf:05:da:75:f2:10:13:6e:4a:23:c2:
2e:02:7a:4e:81:e7:c4:f8:10:d3:c0:11:5c:08:e0:
2e:dc:24:d6:35:3d:b9:e1:e8:a9:3e:21:5c:1f:5b:
77:82:f2:df:c2:ca:d6:e2:87:80:8b:5e:dc:1a:45:
be:9a:7e:f5:d1:0e:fd:00:46:8f:2a:bb:9e:45:b5:
92:91:88:ac:1c:38:b5:b9:d0:ff:a5:4f:74:de:fe:
ac:56:2c:b8:7a:15:1f:93:eb:9e:71:f7:73:29:71:
3d:79:d2:9b:92:95:58:e0:74:4b:67:77:20:51:14:
6a:b4:84:e9:9a:ea:c2:1f:d8:8d:08:f7:70:e2:54:
29:52:5d:6a:24:7a:6c:10:a8:48:8f:07:49:43:27:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:48:7D:AE:98:C8:DC:85:FF:25:50:F4:C7:C4:00:B3:7C:D5:2A:C1
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/LEh9rpjI3IX_JVD0x8QAs3zVKsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.216.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:5b:1d:05:b2:9d:5c:06:04:43:8d:a8:18:5d:29:62:97:09:
4a:6b:b6:b0:cf:af:ac:1e:85:29:75:35:aa:2a:c3:09:ab:5e:
8e:9c:1e:a1:e6:ec:f1:9e:13:1c:c6:95:bf:d9:db:16:fc:93:
ee:ea:96:61:cc:b8:80:0d:08:c5:4e:6d:b0:5d:b4:c4:8c:55:
13:1d:78:c4:96:7a:fa:be:19:c2:36:1a:bb:65:2b:09:d7:78:
53:40:ad:02:d7:6e:a4:a4:e8:76:81:6d:80:5f:e5:a9:09:30:
ac:b6:cd:a1:ea:f9:e0:b8:42:4e:0b:9c:2b:6f:d6:2e:9b:d4:
25:32:a3:06:d1:b9:e1:82:c2:47:45:97:82:b6:93:30:86:3b:
48:9e:39:77:e1:a8:c5:c0:c9:c8:86:bf:c8:f9:39:b6:fa:5a:
e4:50:a8:db:56:a8:e9:da:6b:26:42:1e:54:91:48:91:fb:02:
74:d0:63:37:cc:36:7b:b4:2c:26:38:1a:7a:ce:14:c8:8e:00:
77:86:97:b8:71:3b:c1:a5:1c:9f:8d:63:1f:89:79:16:77:cf:
0d:2a:ad:3e:e9:05:55:ed:ac:72:67:05:1a:7e:f2:fb:61:bb:
1e:69:ad:76:15:ee:27:ea:4c:dc:f6:c0:25:ac:99:ca:af:e3:
3c:e2:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-fra.rpki-client.org