Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/LJyAhrH79oA2UvxwsUKfun4Xurw.roa
File: LJyAhrH79oA2UvxwsUKfun4Xurw.roa (raw, json)
Hash identifier: poPQSNRtW0krEqw3hBl2isgZ2UadbKi7avpDjsh9xiU=
Subject key identifier: 2C:9C:80:86:B1:FB:F6:80:36:52:FC:70:B1:42:9F:BA:7E:17:BA:BC
Certificate issuer: /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial: 01827DDAB67D243146C002C809ED2B7FB752
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/LJyAhrH79oA2UvxwsUKfun4Xurw.roa
Signing time: Mon 08 Aug 2022 14:27:41 +0000
ROA not before: Mon 08 Aug 2022 14:27:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141760
IP address blocks: 141.113.128.0/21 maxlen: 21
141.113.136.0/21 maxlen: 21
141.113.192.0/21 maxlen: 21
2a03:9e43::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:da:b6:7d:24:31:46:c0:02:c8:09:ed:2b:7f:b7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
Validity
Not Before: Aug 8 14:27:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c9c8086b1fbf6803652fc70b1429fba7e17babc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:72:6f:4b:da:41:b4:2e:25:06:54:b5:7f:
0b:df:c0:d2:8c:c5:39:ca:b0:b8:41:f3:20:f8:2d:
1b:6d:d4:2b:57:04:18:7c:c9:a8:79:34:28:b7:2a:
7f:85:5b:c7:79:a0:9b:d9:2e:fc:78:fa:bb:3b:1e:
78:c2:cd:d8:c3:74:02:a0:cc:13:8c:7d:b9:d7:78:
78:4a:b6:54:e9:88:c1:6b:fb:6b:db:77:0e:28:fb:
e4:06:f1:9a:6d:04:4a:10:3a:91:96:ce:50:88:ee:
8f:df:19:62:48:44:34:ee:77:39:5f:f7:10:37:43:
3b:b3:3a:73:64:16:5b:fb:e8:eb:61:85:66:c5:c3:
c8:25:87:27:7e:b8:16:4d:ad:21:b5:c7:60:67:79:
df:07:d0:de:13:b1:3f:62:17:e7:0b:fa:31:ec:80:
90:cb:1b:ed:77:4a:9e:3d:72:07:2d:f5:de:11:b4:
85:72:12:0f:f1:b8:01:25:a2:26:7d:26:71:5c:6e:
89:cc:3d:f9:f2:61:4d:63:ac:1a:88:16:e1:4c:dd:
91:73:94:a1:f9:c3:2d:70:74:02:0d:86:8d:34:b8:
b3:af:e6:9b:f8:b8:de:1e:98:6d:5c:1a:cd:69:d0:
60:23:dd:df:f8:81:ca:d0:c8:7a:31:fa:dd:6f:80:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:80:86:B1:FB:F6:80:36:52:FC:70:B1:42:9F:BA:7E:17:BA:BC
X509v3 Authority Key Identifier:
keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/LJyAhrH79oA2UvxwsUKfun4Xurw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.113.128.0/20
141.113.192.0/21
IPv6:
2a03:9e43::/32
Signature Algorithm: sha256WithRSAEncryption
2e:bb:3f:bd:2d:4e:7d:f6:31:ce:b3:0c:35:29:0d:a8:4f:27:
46:b7:7d:05:50:69:66:e9:ee:37:87:05:5b:34:de:31:96:f8:
80:b2:a3:63:80:f3:57:f1:60:55:ce:16:f9:49:3c:b7:b2:f8:
e3:67:8c:c3:8e:83:6a:56:28:dc:1c:6b:32:19:33:26:3e:72:
97:cb:a7:fa:7e:40:c8:f3:eb:a5:83:54:6f:9a:fb:21:0e:eb:
9b:c8:e4:6d:1f:7f:cf:96:12:54:16:2d:29:bc:0b:6f:85:19:
a2:fd:fd:0a:7c:30:81:f8:45:65:5c:4d:04:7b:6f:f1:94:5e:
c0:07:6d:bf:72:9e:ae:86:f4:f4:85:d2:52:b5:d4:eb:cc:4a:
3e:95:f7:da:39:ec:fb:97:28:de:d7:47:6c:b3:e1:50:bd:74:
fc:9c:33:f4:51:9d:3a:df:98:be:14:71:49:f1:7f:8d:06:ce:
6b:71:d4:4d:d6:57:bf:f9:c9:05:a5:ad:80:ca:10:3f:ef:10:
ee:b3:36:f0:d4:e5:07:ae:38:c8:f4:0c:fa:cc:99:72:84:7a:
21:a3:30:71:a5:44:20:0d:9c:db:e8:57:c1:67:12:3d:db:1e:
23:fa:6f:23:a9:10:84:ee:36:e1:66:db:4b:77:84:43:5f:80:
67:f0:63:0e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYJ92rZ9JDFGwALICe0rf7dSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZjM2MmMwNzY1YWZiN2I5ODA0YjZkODE5NDcwMDA3YjAx
ZjI2MmUwHhcNMjIwODA4MTQyNzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzljODA4NmIxZmJmNjgwMzY1MmZjNzBiMTQyOWZiYTdlMTdiYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwVyb0vaQbQuJQZUtX8L38DSjMU5
yrC4QfMg+C0bbdQrVwQYfMmoeTQotyp/hVvHeaCb2S78ePq7Ox54ws3Yw3QCoMwT
jH2513h4SrZU6YjBa/tr23cOKPvkBvGabQRKEDqRls5QiO6P3xliSEQ07nc5X/cQ
N0M7szpzZBZb++jrYYVmxcPIJYcnfrgWTa0htcdgZ3nfB9DeE7E/YhfnC/ox7ICQ
yxvtd0qePXIHLfXeEbSFchIP8bgBJaImfSZxXG6JzD358mFNY6waiBbhTN2Rc5Sh
+cMtcHQCDYaNNLizr+ab+LjeHphtXBrNadBgI93f+IHK0Mh6Mfrdb4AuuwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCycgIax+/aANlL8cLFCn7p+F7q8MB8GA1UdIwQY
MBaAFG/zYsB2Wvt7mAS22BlHAAewHyYuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9OaXdIWmEtM3VZQkxiWUdVY0FCN0FmSmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lMDExOTAtNTIwNC00NGM1LWExMWEt
ZGFmZDc0NzYzZDIzLzEvTEp5QWhySDc5b0EyVXZ4d3NVS2Z1bjRYdXJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lMDExOTAtNTIwNC00NGM1LWExMWEtZGFmZDc0NzYzZDIz
LzEvYl9OaXdIWmEtM3VZQkxiWUdVY0FCN0FmSmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEjXGAAwQD
jXHAMA0EAgACMAcDBQAqA55DMA0GCSqGSIb3DQEBCwUAA4IBAQAuuz+9LU599jHO
sww1KQ2oTydGt30FUGlm6e43hwVbNN4xlviAsqNjgPNX8WBVzhb5STy3svjjZ4zD
joNqVijcHGsyGTMmPnKXy6f6fkDI8+ulg1RvmvshDuubyORtH3/PlhJUFi0pvAtv
hRmi/f0KfDCB+EVlXE0Ee2/xlF7AB22/cp6uhvT0hdJStdTrzEo+lffaOez7lyje
10dss+FQvXT8nDP0UZ0635i+FHFJ8X+NBs5rcdRN1le/+ckFpa2AyhA/7xDuszbw
1OUHrjjI9Az6zJlyhHohozBxpUQgDZzb6FfBZxI92x4j+m8jqRCE7jbhZttLd4RD
X4Bn8GMO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:14 2024 by rpki-client on console-ams.rpki-client.org