Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ljGXRakfcsqhMT6eaW3VhIGAZI8.roa
File: ljGXRakfcsqhMT6eaW3VhIGAZI8.roa (raw, json)
Hash identifier: 61ZDnPeJ6NRvGK4VBLlNbVl5mwHceq/8VXxfg5sVoBM=
Subject key identifier: 96:31:97:45:A9:1F:72:CA:A1:31:3E:9E:69:6D:D5:84:81:80:64:8F
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 08FA1A04
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ljGXRakfcsqhMT6eaW3VhIGAZI8.roa
Signing time: Wed 13 Apr 2022 08:43:34 +0000
ROA not before: Wed 13 Apr 2022 08:43:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 94.241.136.0/21 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.164.0/23 maxlen: 24
94.241.160.0/22 maxlen: 24
94.241.166.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150608388 (0x8fa1a04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 13 08:43:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96319745a91f72caa1313e9e696dd5848180648f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:25:d5:19:aa:8f:32:50:92:50:73:df:20:b5:
14:ac:ad:f7:70:46:3a:5f:35:24:7f:94:18:47:ea:
5c:e7:12:42:8a:b9:10:0f:be:b1:29:d1:50:19:8c:
00:ae:2c:7e:84:a8:62:57:87:31:51:fd:05:dc:ab:
d0:c4:c5:17:10:88:d9:1a:80:b8:5d:be:03:b2:c7:
ea:9e:c3:bd:3d:16:0f:0f:db:fc:8d:d1:0b:66:7a:
92:1d:55:aa:4c:85:4e:9b:fa:b2:6b:79:c5:06:35:
63:58:eb:44:e4:12:6e:32:7c:dc:cc:8b:b2:1d:6d:
bd:4e:a1:a5:dc:7a:45:53:ac:89:18:64:92:bc:a5:
2b:23:e2:44:a2:0e:01:62:41:c9:76:a4:1e:44:cc:
d1:a3:bf:ed:2a:2c:6c:0a:79:9c:54:d0:da:7e:f9:
f0:4d:56:b6:97:03:c0:c4:d3:54:93:2d:ef:b4:65:
97:c4:41:4a:e9:4c:a4:02:51:69:b7:10:e4:11:3f:
8e:d0:31:34:90:2e:b3:45:87:a7:0b:bd:61:9a:ee:
73:0c:63:5c:62:a7:33:56:f5:7d:e7:d5:ec:f5:02:
84:92:1b:62:db:71:8e:88:77:48:2c:f0:50:69:b4:
9c:27:51:d8:29:72:f0:0d:12:20:3b:2d:e4:f4:dc:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:97:45:A9:1F:72:CA:A1:31:3E:9E:69:6D:D5:84:81:80:64:8F
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ljGXRakfcsqhMT6eaW3VhIGAZI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.216.0/22
94.241.136.0/21
94.241.160.0/21
Signature Algorithm: sha256WithRSAEncryption
45:2e:e2:6a:da:f8:d0:4e:66:f1:f3:2a:55:9d:a7:c9:2c:0c:
f9:c1:c3:1a:68:75:4d:08:83:d1:04:16:b7:cc:06:86:a9:59:
07:60:0e:29:93:b2:40:40:3a:79:24:d3:58:96:b7:86:1c:56:
b1:dd:9c:a0:32:1a:ff:16:04:3c:3b:9d:af:48:bd:ca:5f:2e:
58:4c:0c:e0:71:6a:d2:8a:55:da:27:c7:22:aa:96:e1:8f:5a:
47:b3:a8:2a:14:85:4b:37:f9:f9:54:e4:68:6e:f3:15:25:ec:
b7:88:de:9c:cd:95:fe:cc:94:b6:2a:1b:4d:14:85:ac:ee:df:
e0:4d:26:b6:6f:8a:16:27:4d:3b:76:24:1e:24:bc:c6:ab:05:
96:9e:33:6e:cd:6a:84:25:cc:81:4c:04:c3:12:c7:bc:22:97:
76:0f:79:e2:49:25:e5:a2:b4:5c:c2:bd:51:8e:b9:05:4b:cb:
16:81:99:44:97:dc:7e:89:b4:a1:09:5f:29:ee:65:cd:c9:10:
1d:f6:05:17:87:ab:00:4d:3b:03:f4:57:a5:4a:f1:29:c9:6f:
02:9d:44:2e:90:b7:86:b0:1c:1e:f0:93:af:a8:89:5c:56:bf:
92:c8:51:f9:b7:0e:98:6c:e9:e3:fa:6d:05:a7:ff:ab:34:fb:
33:e1:e3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org