Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/Lh7t7jyTvWvy-dYQ6GeHKPv6qv8.roa
File: Lh7t7jyTvWvy-dYQ6GeHKPv6qv8.roa (raw, json)
Hash identifier: AGbef22KfDruEJXD0ninpXG2dE3Aob6rmd/QYB3xzdE=
Subject key identifier: 2E:1E:ED:EE:3C:93:BD:6B:F2:F9:D6:10:E8:67:87:28:FB:FA:AA:FF
Certificate issuer: /CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Certificate serial: 015C1485
Authority key identifier: 21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/Lh7t7jyTvWvy-dYQ6GeHKPv6qv8.roa
Signing time: Sat 01 Jan 2022 12:02:25 +0000
ROA not before: Sat 01 Jan 2022 12:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48222
IP address blocks: 195.43.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22811781 (0x15c1485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Validity
Not Before: Jan 1 12:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e1eedee3c93bd6bf2f9d610e8678728fbfaaaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:bd:57:0e:6f:35:8a:86:c4:7e:6b:67:ad:
df:05:8b:8f:97:f9:b5:be:7b:e1:99:3c:97:09:8a:
0a:c9:4e:d9:a3:6f:21:54:65:ab:58:75:f4:1e:c6:
09:ea:e6:75:41:4a:21:d5:c3:fa:f5:cf:4c:0f:4d:
7b:2a:92:4c:95:c9:7c:2f:27:59:42:97:29:a6:1c:
cc:99:5b:a5:22:22:ae:7a:7a:91:7c:4c:3c:14:89:
3b:c8:bc:cd:e3:b2:33:84:15:b3:96:4d:32:13:3b:
af:4f:a9:b0:97:23:5b:57:18:f5:bf:c9:24:e3:42:
91:3c:f5:79:47:ea:b0:8f:ae:9f:48:29:fa:fe:b7:
e1:20:14:5d:14:47:eb:dd:42:bf:ac:8a:92:72:cb:
a9:08:2b:4b:7e:2c:0a:b8:04:71:f3:01:f7:67:b6:
2a:9d:b2:8d:4c:4b:c2:78:e7:68:1d:f4:87:d3:53:
1e:48:9d:de:1d:a1:61:12:46:a4:7e:4c:34:39:4e:
55:54:40:be:d1:e0:15:a0:8c:9b:9c:c3:f2:20:0b:
0c:46:d6:5f:b6:5d:08:1e:a4:5d:9d:1e:fb:4d:32:
dc:78:ca:58:b4:dd:e4:05:57:09:7d:46:77:05:14:
8e:99:fc:2f:8b:1f:62:4a:6e:45:50:e1:99:e2:50:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1E:ED:EE:3C:93:BD:6B:F2:F9:D6:10:E8:67:87:28:FB:FA:AA:FF
X509v3 Authority Key Identifier:
keyid:21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/Lh7t7jyTvWvy-dYQ6GeHKPv6qv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.133.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:17:11:9d:3f:ce:77:a4:ac:be:fd:9f:bc:d0:0d:6b:d6:00:
14:9f:6d:ce:e0:4a:77:c2:a4:46:67:73:1f:89:59:9d:3f:81:
b9:39:44:5f:ee:11:e7:d0:54:79:48:3f:c3:52:b0:77:52:03:
ba:af:a5:30:29:6a:00:b2:02:f2:ae:65:3f:96:3e:41:48:92:
1b:70:6a:a5:d3:21:48:d5:2c:12:5d:91:d4:7d:ef:ed:21:f6:
6e:2d:49:e1:63:37:b6:1f:1a:54:70:cb:ad:98:96:ea:8e:13:
eb:7a:d1:3e:e6:13:e2:8f:07:90:82:6a:cd:96:88:be:07:cf:
e3:ff:be:6c:fc:ad:6d:bf:2f:a2:28:58:8f:17:77:15:e2:67:
cd:2d:2a:b1:e9:78:db:ec:02:55:df:6e:a2:02:c7:3c:2f:9f:
91:9e:c8:7e:7f:31:1f:0b:46:ee:6b:02:14:78:36:39:bf:81:
44:d2:a5:d0:29:01:31:22:1c:f2:16:89:29:04:75:80:3a:93:
cb:83:6a:67:88:fe:42:67:47:c3:30:46:88:29:79:c0:e0:85:
08:8c:bd:37:69:18:84:78:05:d5:9e:db:19:26:d0:b8:a2:58:
c0:ed:8d:f5:a9:24:34:4c:88:b7:81:4b:40:29:e9:b0:e5:33:
5f:35:02:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:45 2023 by rpki-client on console-fra.rpki-client.org