Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Lgw3wnprnrBC861xHmBljy84488.roa
File: Lgw3wnprnrBC861xHmBljy84488.roa (raw, json)
Hash identifier: FMqH4palIEMZy+MeCCgsSUybEcHyBho74heKYE8F3Z4=
Subject key identifier: 2E:0C:37:C2:7A:6B:9E:B0:42:F3:AD:71:1E:60:65:8F:2F:38:E3:CF
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1999C6E3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Lgw3wnprnrBC861xHmBljy84488.roa
Signing time: Sun 10 Apr 2022 22:04:22 +0000
ROA not before: Sun 10 Apr 2022 22:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12859
IP address blocks: 195.85.49.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429508323 (0x1999c6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 10 22:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e0c37c27a6b9eb042f3ad711e60658f2f38e3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:f8:7d:03:ce:3e:8c:cc:62:4b:b0:99:6f:
7f:05:d8:c6:c7:a1:1b:cf:33:71:85:5c:3f:0d:8d:
fd:11:18:95:d0:cd:44:c0:36:f9:be:5b:c3:50:5b:
5b:b2:e2:fe:0c:e4:31:b1:44:1f:5a:28:35:08:75:
c9:c0:65:c8:07:c9:aa:b3:ce:48:15:4d:a9:af:5e:
8c:1e:02:e4:a9:43:da:1c:dd:4f:24:5e:cd:c8:b5:
47:d1:1b:5d:a2:de:6c:3a:7c:df:df:8c:57:8e:43:
54:3b:5a:1f:72:b5:25:9b:ea:07:1a:cd:ca:ec:98:
24:80:f4:d8:fc:07:a0:47:3f:23:69:ca:e2:13:0b:
82:35:0b:66:98:6f:d5:fa:cc:cc:ae:04:48:10:39:
d7:24:d6:61:e3:a6:aa:ff:ab:21:00:05:65:9b:58:
6f:44:a0:e3:6f:89:2c:6d:9b:64:d4:0f:8e:44:72:
5a:cf:1b:f0:1b:e3:94:b5:f3:91:25:02:b5:65:19:
98:00:2b:73:35:cd:08:22:4b:43:ec:17:4c:03:34:
a4:d8:37:d3:4c:25:71:29:ba:ec:5f:3a:8f:cf:93:
73:14:4c:c9:28:3c:8d:0f:47:1a:7a:7f:08:1d:01:
04:f7:e4:20:f8:d8:92:75:9f:e0:8f:61:b9:aa:24:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0C:37:C2:7A:6B:9E:B0:42:F3:AD:71:1E:60:65:8F:2F:38:E3:CF
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Lgw3wnprnrBC861xHmBljy84488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.49.0/24
Signature Algorithm: sha256WithRSAEncryption
10:64:56:f8:fe:e1:95:26:16:9a:c0:0a:18:57:db:27:fc:6c:
db:a3:e5:46:16:a3:8a:0b:0f:87:4a:9b:ef:35:cf:1d:64:7c:
6d:5d:d6:94:0b:03:61:a7:af:79:63:43:79:b7:2f:02:a9:b3:
1c:f0:82:26:52:33:96:40:8c:30:3a:e7:85:d8:4e:5d:48:78:
3a:fc:ea:60:b4:3e:99:af:fc:39:76:ce:52:50:1e:e5:29:23:
41:fa:52:28:d8:05:cb:24:5f:de:ba:87:2f:dd:00:4a:53:25:
11:d3:a9:7d:30:f1:a1:b2:e0:5b:6b:84:c5:2f:07:09:ea:f9:
ee:e7:79:5b:ac:0a:3b:eb:08:19:d7:3c:5e:fc:cc:b0:dd:c0:
58:87:4d:37:1a:59:19:bc:ff:d3:38:6b:11:76:07:fb:07:7e:
1e:c7:ba:f2:7d:cb:07:b8:70:7b:70:24:6b:5b:98:53:b8:c6:
a2:74:21:6a:0a:0e:55:c2:a0:0c:51:23:d0:22:73:09:d2:05:
ea:3d:a8:ee:9e:a5:d6:d6:cd:c1:b6:9b:0f:82:a5:f1:42:ea:
32:32:c1:2a:92:cb:73:4f:e2:3c:fa:8a:18:e3:c0:3e:b7:fd:
32:06:f7:92:42:00:48:7c:53:d6:76:33:b4:e6:ef:ec:dc:63:
a6:b8:88:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org