Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/LF2-TYMTHPU7Evl0EDwGpD2UFQo.roa
File: LF2-TYMTHPU7Evl0EDwGpD2UFQo.roa (raw, json)
Hash identifier: MxKgftEaUV9rDYsucKfVx31uGOefDrh2lS4r8z3abKU=
Subject key identifier: 2C:5D:BE:4D:83:13:1C:F5:3B:12:F9:74:10:3C:06:A4:3D:94:15:0A
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 018408BE7AE3429F8FCA770EC216AF554CA9
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/LF2-TYMTHPU7Evl0EDwGpD2UFQo.roa
Signing time: Mon 24 Oct 2022 06:46:51 +0000
ROA not before: Mon 24 Oct 2022 06:46:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 192.33.88.0/24 maxlen: 24
2001:67c:2e40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:08:be:7a:e3:42:9f:8f:ca:77:0e:c2:16:af:55:4c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Oct 24 06:46:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c5dbe4d83131cf53b12f974103c06a43d94150a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:0d:c3:2f:e2:81:0e:1b:16:5e:b5:aa:f2:
aa:3c:c9:3a:15:5c:29:5b:ad:06:56:d1:3b:f8:a2:
fb:e0:2c:24:30:c5:90:09:99:2f:de:de:34:2a:af:
e5:61:22:9c:48:05:23:6d:e3:a1:a0:50:b0:bc:52:
57:d2:ee:f5:97:39:a7:2d:b4:83:aa:60:7f:e2:44:
e7:1d:16:59:13:23:ae:86:17:4f:52:68:c2:56:e8:
64:9b:0b:6e:91:5c:72:81:60:ca:75:8a:74:6d:09:
5b:a0:0f:31:54:13:f6:b5:f1:f3:88:59:16:50:d9:
b2:aa:4b:1f:d4:c3:24:24:51:6c:97:ff:b7:1d:1f:
94:47:58:ba:a7:ed:75:4e:42:63:a0:45:dc:64:9e:
1c:d6:08:d9:09:66:15:68:f2:69:65:d9:43:7c:3e:
81:40:80:e0:d8:97:24:b5:ad:28:bd:d9:08:82:0f:
90:85:53:63:d2:50:62:50:41:46:14:d9:35:fe:03:
f8:10:da:c9:a9:57:8f:38:8b:cc:71:78:e4:4b:25:
ae:69:65:a3:67:35:1f:f0:ff:bd:40:07:c1:0d:78:
fc:72:87:c9:b9:b3:64:7c:19:f9:a8:ee:95:41:f7:
2b:cf:47:a7:0a:e8:5b:d8:8c:24:b3:9a:51:61:d2:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5D:BE:4D:83:13:1C:F5:3B:12:F9:74:10:3C:06:A4:3D:94:15:0A
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/LF2-TYMTHPU7Evl0EDwGpD2UFQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.33.88.0/24
IPv6:
2001:67c:2e40::/48
Signature Algorithm: sha256WithRSAEncryption
41:f7:5c:b7:0d:df:02:f2:5d:bd:4a:15:45:b9:c7:31:1d:c0:
4a:66:79:e0:32:ae:b3:38:36:f5:81:0c:8a:a1:5c:82:5d:f4:
a4:e9:24:54:f1:b9:44:d3:c7:32:3d:bb:e5:c4:d4:87:ad:b7:
01:91:a9:f3:03:75:0d:03:67:ad:31:4e:0b:11:db:5f:7b:62:
7b:64:3c:60:24:85:0d:a7:a0:c8:6e:d9:0c:70:59:c8:7e:1f:
6a:39:76:3b:59:cd:9b:58:f5:0a:09:2e:45:41:b1:44:3f:ac:
8c:a4:fa:4f:be:b4:09:7d:67:e6:ae:6b:d5:a6:c4:14:24:83:
91:e9:87:c8:6b:ac:07:3d:e8:a6:7a:01:76:0b:e0:b3:74:30:
eb:0f:51:df:19:6a:f0:14:0c:44:83:8d:a3:08:f3:d2:1c:a9:
e2:e5:6c:80:0a:ba:e7:32:61:e2:37:4d:a5:92:23:60:61:86:
88:30:dc:13:80:2f:ad:36:b9:50:35:03:49:60:e9:d8:5e:9d:
16:4d:fb:01:69:5f:47:dd:a1:d9:ec:c2:01:63:f9:82:8d:23:
c0:83:5c:0c:8b:99:2d:b8:94:1f:f1:f9:d6:06:d7:96:e4:3b:
d0:d5:c6:e6:96:14:b4:68:3e:95:16:94:7b:d5:8f:6e:f0:c3:
88:27:73:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:25 2024 by rpki-client on console-fra.rpki-client.org