Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/LwJxO-1vUvPbFJeNCjkV6POziy0.roa
File: LwJxO-1vUvPbFJeNCjkV6POziy0.roa (raw, json)
Hash identifier: TubtIQtL0ecskxw+9sngXcDTthtMG45RGTcgnO/9Xic=
Subject key identifier: 2F:02:71:3B:ED:6F:52:F3:DB:14:97:8D:0A:39:15:E8:F3:B3:8B:2D
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 03BF3C2D
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/LwJxO-1vUvPbFJeNCjkV6POziy0.roa
Signing time: Wed 18 May 2022 13:41:17 +0000
ROA not before: Wed 18 May 2022 13:41:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210225
IP address blocks: 193.32.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62864429 (0x3bf3c2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: May 18 13:41:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f02713bed6f52f3db14978d0a3915e8f3b38b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:4f:bb:05:f0:e7:05:66:d2:a4:e1:4c:10:
45:7b:36:a9:a7:c3:cd:fc:7f:be:1e:81:02:f0:7d:
5f:fd:8f:15:02:1f:35:95:4a:3e:94:65:d3:c1:c3:
27:51:e3:c6:e6:12:c5:0f:5b:39:42:8c:77:09:aa:
6a:0b:2a:70:4f:dc:56:0f:c4:3b:e2:2e:00:c2:e1:
d1:78:85:0b:ea:42:04:f2:0e:c3:dd:27:81:7f:82:
d2:58:9f:d8:f5:b4:88:4c:1c:a2:97:8c:f0:49:a3:
35:ad:97:7c:56:0e:85:d6:c3:e9:bb:2f:48:e3:17:
54:b0:ba:b5:4b:5c:fa:3c:70:ee:f0:6c:e0:5c:4e:
c3:77:73:da:f5:31:41:26:dc:3e:38:8d:4d:fe:75:
95:0d:ee:eb:83:e8:28:1a:24:ec:4a:0d:c7:79:3e:
ab:93:9c:d7:90:09:b1:17:ab:07:f7:d4:71:27:6b:
5a:22:a2:1d:d1:0d:56:84:e9:df:12:f7:f2:af:af:
4f:9a:ea:55:65:e2:33:8b:4b:31:98:db:7d:51:00:
89:c3:c5:e0:a7:f9:de:00:8a:d1:86:02:56:f4:67:
c7:76:0e:c5:22:cd:d0:94:ae:c3:72:33:9d:34:c5:
08:b4:b0:4c:52:05:8f:74:c8:0a:9a:5f:29:17:8d:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:02:71:3B:ED:6F:52:F3:DB:14:97:8D:0A:39:15:E8:F3:B3:8B:2D
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/LwJxO-1vUvPbFJeNCjkV6POziy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.236.0/22
Signature Algorithm: sha256WithRSAEncryption
02:8d:77:be:1b:57:37:58:b2:d9:8b:f7:1b:2c:26:4a:e3:e7:
8b:9f:8f:2e:98:6b:84:f6:36:0e:17:47:49:cf:cf:51:ef:38:
83:af:db:3c:87:3d:7d:df:44:dd:9c:43:7a:e8:94:72:1d:a4:
3f:d0:cc:8e:1d:8c:00:d7:02:52:27:29:c6:86:73:9d:d9:33:
b4:5e:13:d8:15:71:75:05:97:75:98:71:aa:68:54:55:aa:56:
3b:50:e3:74:dd:31:8c:37:83:34:ce:44:1c:91:89:4a:52:45:
b0:90:17:8d:3a:ff:bc:55:8b:8c:ba:c4:f2:83:8f:7b:3e:fc:
e0:ed:05:66:f8:72:c3:4e:f1:21:4a:a0:b8:45:45:6a:e2:d7:
c2:3f:a3:da:60:eb:a3:56:cf:b5:a5:a5:78:50:a9:66:2d:8c:
e0:8d:47:20:d7:26:02:f8:c7:ca:34:df:23:66:48:eb:d6:10:
d6:73:30:cc:2e:04:1c:77:18:4e:1a:ba:33:aa:c7:41:94:13:
f5:4b:80:e5:59:ce:46:d5:b6:4e:8d:a2:58:a3:08:b9:28:38:
01:51:72:1c:1f:f0:e9:42:62:13:81:2b:46:a3:0f:53:e3:7e:
98:e2:95:76:b9:be:2c:a3:e4:45:27:47:96:e2:58:16:6c:57:
b9:53:1b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org