Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/leqbwwIAUHSQo2xj5NJtDi4m7Gw.roa
File: leqbwwIAUHSQo2xj5NJtDi4m7Gw.roa (raw, json)
Hash identifier: Kx5ADg4KkXaRGzGAIlqQNV7WwsU0lbDUo/QkHKsWxLA=
Subject key identifier: 95:EA:9B:C3:02:00:50:74:90:A3:6C:63:E4:D2:6D:0E:2E:26:EC:6C
Certificate issuer: /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial: 0184AA131FC1CB4AE748A76FB3B5D7A5C135
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/leqbwwIAUHSQo2xj5NJtDi4m7Gw.roa
Signing time: Thu 24 Nov 2022 14:38:10 +0000
ROA not before: Thu 24 Nov 2022 14:38:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16328
IP address blocks: 193.108.32.0/23 maxlen: 23
193.178.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:13:1f:c1:cb:4a:e7:48:a7:6f:b3:b5:d7:a5:c1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Validity
Not Before: Nov 24 14:38:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95ea9bc30200507490a36c63e4d26d0e2e26ec6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:42:38:ad:d0:e2:ea:c6:e4:84:65:e5:52:0e:
90:bf:e8:bc:cd:8e:68:55:58:c7:9e:60:93:7d:4a:
98:da:47:30:74:ba:80:8d:ff:df:16:1f:30:d7:78:
d6:8b:f6:3e:e0:31:88:14:d2:f6:12:e0:f5:36:fb:
25:d3:ed:a7:31:ae:61:a3:61:53:85:2e:c8:02:e1:
88:e8:36:4c:80:ce:99:b6:a3:f1:04:4d:43:d0:ad:
41:d9:bf:ed:a1:a6:c2:a7:dc:c7:a8:0b:7c:c4:ef:
23:9d:13:a6:a0:ab:87:97:11:95:ef:4c:80:63:1c:
14:78:f0:0c:35:0c:2e:dd:47:91:2c:b2:85:27:8b:
2f:4c:de:58:75:19:ed:52:b2:67:f2:4a:29:f3:a8:
80:be:a8:bb:50:40:29:e6:c9:6c:5b:71:6e:f8:3d:
11:03:0e:cb:df:fb:d8:1d:a3:ea:7d:78:7c:40:96:
34:90:06:84:e1:43:19:16:bd:ad:97:c8:ac:a5:ac:
06:0e:f4:ac:59:24:f6:dc:96:05:64:ab:39:f0:56:
ea:03:0e:41:5f:ba:19:83:7f:0a:b4:e6:b7:26:5e:
74:af:ce:5e:ef:12:65:e9:a8:3a:7f:d4:76:cb:46:
54:98:c5:fd:7d:bd:26:b1:cb:56:21:6d:c9:f3:de:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EA:9B:C3:02:00:50:74:90:A3:6C:63:E4:D2:6D:0E:2E:26:EC:6C
X509v3 Authority Key Identifier:
keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/leqbwwIAUHSQo2xj5NJtDi4m7Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.32.0/23
193.178.222.0/24
Signature Algorithm: sha256WithRSAEncryption
06:87:4d:25:48:a8:25:b0:3b:19:08:af:d2:37:99:dd:ff:f8:
de:7c:67:8a:1a:8a:67:c6:1b:43:2b:75:c1:a0:97:d6:d0:5a:
6a:43:6a:55:06:ac:bf:4b:6c:1c:52:e0:da:b9:a8:9f:8a:28:
da:0d:4a:e5:6b:ec:7b:a4:33:11:f5:fe:23:85:2f:7a:fb:a1:
f7:8f:94:4d:37:80:81:3d:1d:7e:dd:d0:46:2c:ac:3f:ac:ef:
ad:db:6b:ad:0a:5f:18:0f:7d:b6:13:29:09:38:1b:4b:7e:5e:
9d:89:d9:8d:8a:5a:7e:b2:0c:cc:6b:e7:c6:3c:de:c0:89:31:
70:35:ed:12:79:a6:2a:1f:d2:c0:da:6d:5b:39:65:7c:c0:5f:
29:24:9b:5b:43:a5:e7:8f:35:90:ac:7a:f9:f6:a4:21:ef:90:
ae:f4:b8:36:c4:1c:f2:8b:b1:68:dd:2d:ea:28:85:99:53:95:
47:9a:e3:b2:5a:f8:ed:2c:91:1f:d2:32:c5:fc:1a:70:bf:87:
69:64:4a:5f:80:da:00:10:bd:fa:5d:9b:d2:1c:e9:fd:fe:a0:
51:cc:99:23:86:b1:1a:55:40:57:e3:45:60:cb:b2:cd:38:d7:
a8:2e:01:4b:89:4e:01:6e:13:6c:93:1e:25:1c:c0:b8:ce:e8:
1b:cb:87:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:24 2024 by rpki-client on console-ams.rpki-client.org