Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/lvjCmkDtqtweVrw_czAXximOO9A.roa
File: lvjCmkDtqtweVrw_czAXximOO9A.roa (raw, json)
Hash identifier: ZBA7RLoJBt0vHtf99SpfYcyZYVQD9YuGPfKcvR/EwKY=
Subject key identifier: 96:F8:C2:9A:40:ED:AA:DC:1E:56:BC:3F:73:30:17:C6:29:8E:3B:D0
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 12B5227A
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/lvjCmkDtqtweVrw_czAXximOO9A.roa
Signing time: Sat 01 Jan 2022 12:59:24 +0000
ROA not before: Sat 01 Jan 2022 12:59:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1624
IP address blocks: 57.234.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313860730 (0x12b5227a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Jan 1 12:59:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96f8c29a40edaadc1e56bc3f733017c6298e3bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:8e:19:ae:35:cd:73:62:4f:3d:84:c3:12:
b1:a4:a1:2d:8a:74:d4:0c:8d:0b:92:80:90:a1:d0:
1b:45:fc:3c:58:77:34:04:85:cd:69:89:5b:4e:3b:
87:16:76:62:2f:4c:68:43:41:40:f5:05:be:9f:a7:
f0:37:ec:12:12:13:08:fe:ad:ea:b0:a4:87:8f:e2:
74:09:0a:74:ae:45:55:55:b9:a4:43:4b:16:03:80:
7b:ac:5a:8a:db:df:a0:36:fd:95:5e:25:2d:04:96:
ac:61:75:3b:7b:c4:b5:ed:1d:c3:7b:f9:ea:b3:c2:
53:51:a9:66:72:42:a5:21:fb:35:74:2b:d4:64:66:
0e:42:ff:88:56:43:7c:3a:18:04:c3:9d:89:bb:34:
5a:41:b4:12:2a:f5:79:73:fe:2e:0c:bf:50:6c:fb:
04:1b:70:d9:e4:dc:4f:b2:3b:64:5a:f4:f1:f4:5b:
0e:cc:9c:e7:58:af:ff:0a:51:78:13:95:48:fc:2e:
3c:51:1c:2b:33:aa:8b:92:c5:48:2e:ca:cc:71:e1:
14:ca:73:69:91:9b:3d:31:7d:69:ca:d3:0f:cf:19:
ab:c6:25:56:19:76:43:54:6b:a5:a3:e3:ed:31:ab:
2c:b5:70:68:56:ef:f9:2c:54:41:5b:74:0d:2c:61:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F8:C2:9A:40:ED:AA:DC:1E:56:BC:3F:73:30:17:C6:29:8E:3B:D0
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/lvjCmkDtqtweVrw_czAXximOO9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.234.221.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e3:05:0c:3d:e9:bc:d4:6a:6a:b6:a4:6d:7b:a8:79:c8:9e:
6c:06:05:3b:9d:25:9e:dc:36:be:c5:fd:5a:59:c3:53:b1:19:
6b:ae:7a:f8:e7:a7:98:7c:17:54:1b:fa:f6:66:4b:1a:b4:44:
3a:74:6b:58:52:37:a1:e2:b9:39:9f:6e:9d:e2:fa:30:b9:e6:
22:16:c3:b5:7a:e0:df:ae:8f:35:8c:26:43:df:84:c4:ce:54:
9c:10:5f:c3:2d:f7:63:60:fd:e2:c7:af:ec:13:3b:9e:50:d0:
e4:08:a9:0b:34:47:63:62:c8:38:4a:90:8d:1d:3c:e2:d6:38:
be:b0:6b:5f:76:43:3c:f3:31:df:80:f1:38:90:ee:93:2d:37:
77:a3:64:11:76:40:18:8a:47:9c:ff:e8:cf:16:44:66:f5:41:
40:df:93:7a:8f:4b:68:21:ac:12:bd:b6:b6:ce:43:3a:10:80:
8d:f1:54:f9:e9:4c:a3:e0:ce:de:74:40:d0:9c:c2:4b:8f:01:
29:39:a5:25:3e:00:ee:da:93:06:24:00:ae:4b:dc:92:61:5d:
ad:44:3e:37:44:df:1f:ae:49:76:77:5b:86:2e:89:2f:7e:df:
0c:27:aa:c6:a4:af:a1:b7:c4:29:2f:bc:36:24:e3:59:bf:2f:
54:bd:92:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org