Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/Li4RJnTxFQcLyU9R2GoMUH3DswQ.roa
File: Li4RJnTxFQcLyU9R2GoMUH3DswQ.roa (raw, json)
Hash identifier: ytBT9jUPpZQXg2r6WNayOvAqWCadJVcZhzzU0hPi10Q=
Subject key identifier: 2E:2E:11:26:74:F1:15:07:0B:C9:4F:51:D8:6A:0C:50:7D:C3:B3:04
Certificate issuer: /CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Certificate serial: 0DBFB56C
Authority key identifier: 10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/Li4RJnTxFQcLyU9R2GoMUH3DswQ.roa
Signing time: Sat 01 Jan 2022 05:57:26 +0000
ROA not before: Sat 01 Jan 2022 05:57:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204793
IP address blocks: 185.136.116.0/22 maxlen: 22
2a06:fc40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230667628 (0xdbfb56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1000c0d7a59ac2f59804e7c3515f14cd2fd50d97
Validity
Not Before: Jan 1 05:57:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e2e112674f115070bc94f51d86a0c507dc3b304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:f5:49:cb:71:3f:50:b7:24:f6:38:da:b8:
6e:e3:d0:fc:8c:96:65:27:58:bf:c8:6d:e9:8a:d5:
0a:a9:29:39:ff:bc:30:88:c3:09:9a:9e:cb:51:50:
9b:18:47:a4:0b:da:f6:28:17:07:41:ee:47:c6:dd:
16:62:b9:fc:f5:41:c2:a4:c5:49:89:90:b2:b9:1e:
3d:97:23:ba:a4:b3:40:2a:3a:87:de:09:bf:d7:e8:
23:b7:a6:04:9d:c6:dd:a4:9d:8b:b5:14:42:41:2d:
92:63:43:f3:18:3d:0c:49:bf:1f:c1:a7:b2:34:17:
6d:29:dc:49:40:b4:10:78:9f:14:d6:bf:06:b4:f6:
18:56:d0:b8:79:1b:76:3e:58:32:ce:d9:0b:a9:26:
82:52:a6:0b:51:46:e3:7d:10:42:67:86:ba:cc:e9:
69:04:a2:17:5a:de:30:51:8d:29:91:48:d3:05:98:
bc:ae:52:65:d7:1e:5b:ad:8c:d5:08:0d:1b:4b:05:
fc:23:88:0f:aa:aa:ad:80:cb:71:48:15:88:19:1d:
f8:77:eb:21:f5:d9:66:cc:dc:a4:52:77:f1:61:9d:
9f:63:5f:26:e9:64:44:4b:74:66:b6:e6:ca:53:ea:
be:17:c9:6a:08:b1:b8:20:68:0c:c8:86:13:0a:65:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2E:11:26:74:F1:15:07:0B:C9:4F:51:D8:6A:0C:50:7D:C3:B3:04
X509v3 Authority Key Identifier:
keyid:10:00:C0:D7:A5:9A:C2:F5:98:04:E7:C3:51:5F:14:CD:2F:D5:0D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EADA16WawvWYBOfDUV8UzS_VDZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/Li4RJnTxFQcLyU9R2GoMUH3DswQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3e9394-e271-49ab-b37b-ea38420b2579/1/EADA16WawvWYBOfDUV8UzS_VDZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.116.0/22
IPv6:
2a06:fc40::/29
Signature Algorithm: sha256WithRSAEncryption
05:4b:53:85:39:ba:9a:24:62:74:c9:21:fe:48:5e:a3:6d:69:
53:68:7a:31:8e:41:17:06:82:9e:81:1e:15:b6:98:7a:c5:68:
c7:84:02:bb:71:b9:3d:97:5b:4b:38:96:e0:e8:01:55:c5:00:
69:06:df:31:9c:0f:7b:4f:dd:33:37:22:43:02:1a:b7:78:cd:
72:e4:46:86:5a:4f:11:e4:ae:1e:28:3c:37:dd:e0:09:27:02:
d9:e2:38:9d:75:6f:f0:a3:e8:24:46:f6:5e:31:b7:d7:7c:21:
4b:ff:3d:0e:b1:bd:1d:cb:cb:a2:14:ac:83:dc:20:5a:5a:ad:
27:73:65:3a:90:0d:65:8d:d3:87:f5:5e:55:57:d3:41:b3:1b:
9c:d9:e7:b0:f2:77:5f:00:93:2a:15:12:a4:00:9a:45:43:ff:
8a:5d:c5:27:dd:d6:cf:02:d0:e7:01:60:7c:70:b7:f1:c2:ba:
03:b5:90:b2:aa:a0:df:cc:34:ec:02:c3:91:a0:1c:46:5b:ff:
e1:71:4f:2b:ba:3f:80:79:dc:3a:9d:09:52:88:8a:4d:96:bd:
b9:bb:6c:02:de:3f:8b:cb:cd:f5:0a:02:79:f4:11:eb:d6:2a:
ee:33:09:14:f2:85:a7:34:47:4a:60:98:17:34:50:ea:e5:85:
bc:89:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:34 2024 by rpki-client on console-fra.rpki-client.org