Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/LDfXqg7d8PEAkHui6sN0qpKaLKk.roa
File: LDfXqg7d8PEAkHui6sN0qpKaLKk.roa (raw, json)
Hash identifier: nampH4YULdgk+t4Lv/iYTJg0OX0/zY1WDS9gfbOyXXU=
Subject key identifier: 2C:37:D7:AA:0E:DD:F0:F1:00:90:7B:A2:EA:C3:74:AA:92:9A:2C:A9
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 0B9DA6FC
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/LDfXqg7d8PEAkHui6sN0qpKaLKk.roa
Signing time: Mon 02 May 2022 14:13:00 +0000
ROA not before: Mon 02 May 2022 14:13:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205912
IP address blocks: 147.161.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194881276 (0xb9da6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: May 2 14:13:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c37d7aa0eddf0f100907ba2eac374aa929a2ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:15:22:56:4e:95:a9:bc:47:a9:d5:54:87:
77:4a:eb:27:f4:76:4f:a9:7c:1a:47:59:7c:d7:88:
05:86:23:fb:48:72:24:48:3e:63:9f:b0:dd:ca:91:
89:55:7d:ea:1c:c7:b9:c0:bc:c2:69:e7:ea:eb:dc:
5d:18:74:72:1f:66:4d:59:44:de:7d:24:ec:48:1f:
98:9c:a5:dd:6b:3c:6a:91:fb:ae:e7:9b:2b:ca:00:
78:58:dd:b6:5f:7c:4c:74:f3:07:5e:a7:92:81:cd:
e7:2e:1f:38:72:5e:fc:95:48:cf:4d:49:63:da:93:
f4:50:3e:9c:4f:1a:6c:77:40:2d:c6:8c:1e:37:6d:
33:02:6c:6d:b6:b4:a3:b5:0d:c9:62:b5:c2:6c:38:
18:2a:c7:7e:df:0c:60:01:66:0e:cf:96:ec:45:da:
07:aa:d5:2b:16:66:40:c8:a0:ce:1f:e6:ab:cd:f7:
c3:5e:1a:7e:37:d0:23:36:ac:5a:11:e1:b8:44:8b:
01:03:4d:32:5c:3f:a7:7f:16:5f:fb:3e:10:e3:f2:
5f:92:09:c8:ec:22:09:25:31:b3:59:5d:1c:6c:a3:
cd:7f:5e:4b:32:68:c9:ee:bb:1f:0a:6d:a8:10:ee:
4f:0f:36:28:17:f4:6f:b6:97:21:ef:78:7a:64:e4:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:37:D7:AA:0E:DD:F0:F1:00:90:7B:A2:EA:C3:74:AA:92:9A:2C:A9
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/LDfXqg7d8PEAkHui6sN0qpKaLKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.2.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6a:92:60:a4:35:3a:6e:c9:ae:64:ba:23:69:31:d8:1a:9b:
2a:2b:5d:1e:22:13:23:65:da:3c:ac:75:2b:b9:2e:90:61:44:
6a:c2:b3:d8:81:30:ff:54:ac:6d:a6:62:00:b5:68:aa:66:fa:
a5:d0:e2:90:3e:01:dc:70:8b:b1:34:bc:a3:a5:1a:33:9a:9b:
7d:c6:66:e3:66:f8:b7:6c:6a:e3:53:89:62:49:26:ad:a0:c7:
20:1d:ba:4c:5b:e5:d4:43:8d:33:12:3e:11:4b:ba:f7:64:a0:
c7:f0:bc:c9:81:89:40:03:c1:77:c6:62:c3:17:c7:bb:9a:f4:
04:72:2f:d7:c9:3b:16:f0:71:8d:04:6a:9e:63:29:b5:44:51:
7e:46:27:e8:2b:d0:d7:0c:35:0f:d3:25:92:0d:02:ad:ed:2b:
c6:67:e4:9f:b5:33:26:26:91:9f:d1:44:b8:2a:3e:96:73:8a:
49:c5:24:f1:7a:aa:d5:34:55:06:d9:b4:7e:3f:ee:1f:24:4c:
09:72:3b:f7:e1:12:bb:d9:bf:f1:d0:a1:8e:60:f6:2b:18:b3:
ac:79:af:c3:90:39:c2:ff:4e:9d:89:ca:76:27:82:21:45:d4:
2f:15:c3:89:1f:70:6b:de:c5:e3:e9:03:36:33:86:ad:35:63:
df:5d:90:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:14 2024 by rpki-client on console-ams.rpki-client.org