Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/lx_sAZrGHOOOchDz2ZeRK4w3JMI.roa
File: lx_sAZrGHOOOchDz2ZeRK4w3JMI.roa (raw, json)
Hash identifier: W9YrJOLxYop11tkmSOH7mISwrSo4rM7EeG5qOwEn4xg=
Subject key identifier: 97:1F:EC:01:9A:C6:1C:E3:8E:72:10:F3:D9:97:91:2B:8C:37:24:C2
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01830C675741255E12FAC6461BACF798D4AA
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/lx_sAZrGHOOOchDz2ZeRK4w3JMI.roa
Signing time: Mon 05 Sep 2022 06:47:22 +0000
ROA not before: Mon 05 Sep 2022 06:47:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.37.196.0/22 maxlen: 24
178.239.28.0/23 maxlen: 24
178.239.28.0/22 maxlen: 22
2.58.232.0/22 maxlen: 22
178.239.30.0/23 maxlen: 24
2.58.232.0/23 maxlen: 24
2.58.234.0/23 maxlen: 24
45.67.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:67:57:41:25:5e:12:fa:c6:46:1b:ac:f7:98:d4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 5 06:47:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=971fec019ac61ce38e7210f3d997912b8c3724c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:59:a8:73:09:ba:a3:cb:56:6c:95:45:38:8f:
49:03:ef:97:8d:fe:e3:79:77:06:31:e3:01:c5:b0:
88:40:97:53:71:8d:eb:ef:91:10:0c:a4:60:78:36:
f7:68:db:08:69:a9:c4:6e:c6:e9:e1:66:82:b2:6f:
31:21:12:18:d8:21:19:ad:d9:32:2f:f1:34:10:55:
6f:b7:aa:47:de:2a:fb:27:a0:f8:ed:08:c5:29:2e:
ae:4c:d3:49:0a:c3:7c:c6:07:da:64:c8:0b:58:3d:
65:18:61:16:0e:d6:a2:13:3c:9c:1a:d1:0f:3c:d8:
72:51:df:e0:6e:24:93:94:e2:07:9d:59:44:c6:7f:
46:da:9b:66:08:f6:94:2c:42:04:9f:16:27:02:bd:
66:53:8e:7c:ef:68:32:95:71:04:47:b9:73:17:dd:
03:77:57:7f:3f:28:e5:db:e0:25:be:7b:b8:f0:1e:
16:35:aa:e8:8e:fc:d3:0e:ae:87:b2:7f:4f:f4:7d:
9d:a9:7f:c6:4e:bb:5a:10:69:27:8d:98:29:42:e7:
c2:29:ef:a0:00:c4:e9:72:62:78:51:26:56:7f:00:
54:75:1d:58:37:37:43:5c:4e:6c:c4:26:71:9d:d2:
11:c7:33:73:7f:25:85:b5:5f:6b:69:31:0d:f1:9e:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1F:EC:01:9A:C6:1C:E3:8E:72:10:F3:D9:97:91:2B:8C:37:24:C2
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/lx_sAZrGHOOOchDz2ZeRK4w3JMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.232.0/22
45.67.200.0/22
178.239.28.0/22
193.37.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:81:d3:10:08:86:33:1f:a8:9b:57:75:06:95:b1:a3:49:b9:
c3:4c:4d:0f:4f:42:4b:84:d9:81:1c:4d:eb:81:d7:b4:3a:5c:
f2:2f:e7:83:95:8e:3e:14:43:5a:02:cf:be:33:4f:68:ea:70:
a3:d0:b8:64:65:87:8e:46:ea:59:d2:63:fa:76:c1:32:d4:2c:
49:5a:43:9f:08:7d:cd:1c:ed:c8:b1:94:80:fd:02:11:b9:ee:
65:b6:84:9e:aa:28:2c:7e:1f:34:4d:33:3e:35:48:93:0c:9d:
d9:a5:0a:fb:08:ed:c4:4c:93:55:a2:de:65:18:3e:c8:d5:69:
3e:58:03:77:e0:c2:42:be:18:16:cc:1d:61:4e:bf:43:a3:25:
83:14:70:a5:8f:67:22:96:f0:20:f2:61:2a:41:1d:42:31:b5:
c7:2c:f4:73:aa:1d:d7:5a:88:b3:62:1c:d8:c4:11:a8:fb:b7:
a2:97:1e:6e:51:0a:a0:a0:6d:02:0a:fe:ca:31:e2:2d:a4:e2:
e1:51:64:51:78:95:6a:1e:03:02:47:dc:96:ce:22:d0:8b:5c:
3b:51:9d:be:a4:e5:05:c9:92:61:4e:e2:90:27:bf:82:39:47:
3f:6a:9d:f6:a7:ce:58:e3:94:38:2c:4f:40:e3:cf:65:65:36:
f7:78:d7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org