Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/liwbTdZXmQj7EMFBdMSinEX5bUw.roa
File: liwbTdZXmQj7EMFBdMSinEX5bUw.roa (raw, json)
Hash identifier: V1NwNsn/tD6BOmUj2EG8Po2azVdUPyia2ISSmuH2DxM=
Subject key identifier: 96:2C:1B:4D:D6:57:99:08:FB:10:C1:41:74:C4:A2:9C:45:F9:6D:4C
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018201DBFF3ED22E296DB088D654DBB1F7A3
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/liwbTdZXmQj7EMFBdMSinEX5bUw.roa
Signing time: Fri 15 Jul 2022 12:36:10 +0000
ROA not before: Fri 15 Jul 2022 12:36:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211183
IP address blocks: 79.133.181.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:db:ff:3e:d2:2e:29:6d:b0:88:d6:54:db:b1:f7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jul 15 12:36:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=962c1b4dd6579908fb10c14174c4a29c45f96d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:fb:72:e1:e9:1c:82:9a:bf:95:47:87:2f:
1e:f0:b0:e3:9b:bd:b7:11:c3:e6:c8:a8:cf:70:52:
6e:9d:c3:3c:aa:53:fe:61:e7:a2:77:ed:bc:e3:57:
b4:e0:53:f3:61:be:33:19:2d:ca:57:7c:01:ea:97:
ef:ba:8b:d8:56:87:e2:42:40:d7:29:b1:43:54:80:
22:3d:75:63:ea:04:5f:e6:69:e7:ed:c1:2e:22:18:
af:3a:2f:2d:46:13:6e:4e:a1:d2:8f:ce:08:3e:f0:
da:e7:ae:4d:f0:2a:79:20:34:c1:db:68:aa:1d:10:
df:5d:99:f1:72:b9:2e:51:70:2e:f8:ac:87:32:7a:
9e:f5:92:b5:cd:1a:d6:0b:fa:ce:21:af:cb:5c:0e:
1d:95:f7:fc:53:c6:45:a9:05:51:0e:5f:75:60:f3:
68:d4:5c:2a:91:2f:27:50:11:e9:0b:26:8d:27:96:
5b:f3:78:f5:56:1d:31:1b:f5:40:db:94:21:78:11:
b3:dc:a8:5d:56:25:eb:98:f1:63:37:94:5d:ad:4c:
64:66:68:9f:44:12:60:10:f6:fe:96:61:07:fa:ac:
66:75:10:71:ef:ec:60:3b:65:0e:54:71:f6:a9:44:
78:41:0f:ef:da:f9:ba:bf:59:1a:66:cd:40:8e:8e:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:1B:4D:D6:57:99:08:FB:10:C1:41:74:C4:A2:9C:45:F9:6D:4C
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/liwbTdZXmQj7EMFBdMSinEX5bUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.181.0/24
185.240.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:98:ca:58:a0:36:3d:f5:e6:d7:46:3b:e4:a5:20:93:fe:09:
da:a1:3a:46:e9:c3:45:46:57:af:28:39:4d:f2:1b:c7:f5:c9:
09:bf:72:6c:69:b1:6f:c2:34:2d:1d:86:c4:db:51:b7:27:fa:
8b:ea:dc:f6:40:bd:7e:5a:84:5e:2c:c4:eb:f2:1d:5f:40:a1:
19:65:f2:8a:80:00:81:d3:3b:c6:2f:31:ea:c1:a2:b0:0c:78:
f5:c7:5c:6f:a3:2b:78:a7:c5:26:10:a1:a7:ef:4d:3d:b9:04:
63:aa:19:78:16:a3:7b:a4:b0:90:6b:2e:b1:0b:5a:a3:e8:02:
3e:4d:48:ca:93:df:5c:d7:d1:cd:39:00:69:a6:06:9c:46:53:
fe:0a:d1:f0:34:05:ed:a9:92:f3:c0:6b:74:de:d0:af:01:bb:
7e:ae:59:8d:2e:ac:95:7e:65:5d:a5:cf:8f:86:6d:a3:c5:f5:
4b:6d:b4:da:ae:cf:6e:5d:0d:97:ec:21:8b:23:48:dd:ff:f4:
83:dd:cc:a1:0a:0e:83:e3:37:1c:4e:11:bf:b2:aa:0a:f4:af:
5e:a0:cc:8f:33:49:bb:d3:bc:42:52:fd:7c:4a:5e:cb:e8:7a:
60:c8:fc:03:b3:32:d2:41:56:9a:20:7f:d7:c7:69:3c:bb:16:
0c:bf:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:02 2024 by rpki-client on console-ams.rpki-client.org