Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/lzlVJ69pzWPrUhnRLV61ypmkK1o.roa
File: lzlVJ69pzWPrUhnRLV61ypmkK1o.roa (raw, json)
Hash identifier: tqe4vl+znZoSlzux0rn/+ZF0vcFrD4QqaEbJaw1q9G4=
Subject key identifier: 97:39:55:27:AF:69:CD:63:EB:52:19:D1:2D:5E:B5:CA:99:A4:2B:5A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 366697A6
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/lzlVJ69pzWPrUhnRLV61ypmkK1o.roa
Signing time: Sat 01 Jan 2022 13:57:25 +0000
ROA not before: Sat 01 Jan 2022 13:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60984
IP address blocks: 89.41.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912693158 (0x366697a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 13:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97395527af69cd63eb5219d12d5eb5ca99a42b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:6c:65:94:9d:df:ef:20:28:b4:95:95:ef:
77:f6:02:c9:5d:bd:9f:ef:94:ca:78:82:9b:19:d7:
6f:f1:c8:e8:1e:66:a8:6f:72:60:d4:0c:03:e1:bf:
12:b2:7f:19:da:3a:0e:34:85:2a:e9:6b:f3:23:92:
9f:fa:4f:2b:6d:1f:bf:c9:d6:35:b9:c6:ea:01:c4:
57:3d:c5:c5:c8:51:be:79:ad:c1:c3:e8:9c:5a:77:
34:24:32:fe:e9:0c:42:59:56:5d:8b:36:0b:09:6b:
bb:ca:4c:8f:66:75:35:bc:37:fd:38:9c:98:cc:f8:
d9:3a:f2:e4:b2:03:87:19:55:7b:c5:20:a5:04:54:
41:fc:29:de:4e:30:f1:05:64:92:fa:d4:a4:dd:c5:
c6:a1:0e:bb:d6:6f:75:0c:6f:9b:1c:0d:99:d4:39:
6c:59:09:48:37:26:e2:44:e7:96:0e:60:1b:22:60:
68:f8:08:53:43:65:ed:d9:f8:ab:41:c7:8b:24:ff:
0e:4a:1b:01:15:58:c2:eb:53:1f:34:32:c3:01:d0:
b4:2a:00:6c:b7:28:a6:45:99:d4:15:fb:cb:c1:2e:
23:9c:a7:cb:4b:99:8c:a8:a8:8c:7b:71:8d:e8:01:
67:23:8f:be:3f:64:ee:37:c6:7c:52:33:76:be:e1:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:55:27:AF:69:CD:63:EB:52:19:D1:2D:5E:B5:CA:99:A4:2B:5A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/lzlVJ69pzWPrUhnRLV61ypmkK1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.41.178.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1c:9c:43:81:41:e3:b5:20:ad:e9:52:23:38:f8:be:6a:20:
ae:1a:e6:9b:15:a7:8b:97:cd:41:c8:77:f5:88:c7:3c:98:1c:
82:59:ee:0d:f2:24:6b:fd:83:97:3a:38:1b:1b:d0:1b:56:f2:
3f:3f:13:bc:7f:8e:83:4b:df:7b:57:97:5f:9c:75:1f:c4:18:
81:dc:25:a1:a3:59:64:ec:c6:76:f3:d5:6c:73:2e:8a:c9:e5:
4b:e1:37:e4:15:e4:ea:4a:db:2c:3d:84:40:b8:21:be:9f:49:
05:b6:49:44:bf:25:f0:73:b8:5b:11:c0:e7:56:d6:b3:c2:d8:
5b:21:10:98:95:76:c0:3b:8e:3b:83:2a:39:0a:92:b4:7f:dd:
ae:d6:89:8b:d0:08:b5:ed:9a:c5:37:d0:74:99:ff:c0:5c:9d:
85:7d:8e:e3:23:2f:2e:54:7e:8d:50:36:e0:9b:85:35:a0:32:
70:60:29:c2:7a:c3:01:d1:a4:ed:1d:97:4e:9b:62:6e:be:12:
b9:2e:4f:0f:af:f2:9e:b8:4b:76:76:78:56:df:5e:2e:0a:d7:
80:6c:38:2d:19:fc:c3:48:df:b4:fa:8a:cc:ba:b9:a9:7e:ad:
ea:81:39:6f:92:5b:a8:90:ac:8f:39:7b:ca:90:ee:f1:58:9b:
67:33:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org