Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/lrzDWglNaABNQPezkH9BIO12hrI.roa
File: lrzDWglNaABNQPezkH9BIO12hrI.roa (raw, json)
Hash identifier: z3g8AmBKZdfrb0LnYhsHXUeG93VBq7R5ndeWqz/t8Gw=
Subject key identifier: 96:BC:C3:5A:09:4D:68:00:4D:40:F7:B3:90:7F:41:20:ED:76:86:B2
Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial: 697693
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/lrzDWglNaABNQPezkH9BIO12hrI.roa
Signing time: Sat 01 Jan 2022 02:59:07 +0000
ROA not before: Sat 01 Jan 2022 02:59:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47737
IP address blocks: 94.124.168.0/21 maxlen: 21
78.142.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6911635 (0x697693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Validity
Not Before: Jan 1 02:59:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96bcc35a094d68004d40f7b3907f4120ed7686b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:a8:56:7a:4b:01:ae:8e:8b:b9:b7:e4:68:
b5:c4:f8:19:b0:8c:70:c4:d5:f4:ff:25:4f:49:fd:
cb:73:89:ac:6e:03:3c:f9:92:87:89:43:e5:34:13:
09:09:77:d4:10:77:29:81:65:94:41:b1:20:e4:b9:
8c:ae:44:96:80:34:80:3b:ea:62:52:fd:19:ba:f5:
40:49:b4:47:7e:52:9c:ea:c3:11:2c:8e:46:6a:1d:
28:b1:a7:89:87:82:17:a0:0f:76:22:c0:66:9e:c0:
93:40:db:d4:d0:7b:ef:d4:35:1c:8d:11:55:bf:d9:
cd:4a:30:32:e5:8a:04:25:fb:8f:30:f5:02:37:f0:
b7:e8:c4:19:f6:61:b2:dd:42:60:8a:b5:2e:17:03:
12:26:54:0e:d6:4c:54:12:72:d6:74:ca:7d:c7:03:
03:fb:2c:df:d3:1a:bf:d3:19:55:7e:0d:e6:16:a4:
f1:5f:fe:e7:cd:d6:48:99:63:95:f7:1b:1d:be:df:
b9:72:65:5b:38:47:01:f8:20:c3:60:eb:0e:9e:f2:
02:ac:11:f3:3e:db:58:48:48:d8:a0:e4:bd:8d:ba:
08:eb:32:7c:89:9a:80:ed:ec:d2:d8:f2:44:11:80:
1f:96:9f:15:51:a6:1b:6b:11:bc:44:27:67:97:94:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BC:C3:5A:09:4D:68:00:4D:40:F7:B3:90:7F:41:20:ED:76:86:B2
X509v3 Authority Key Identifier:
keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/lrzDWglNaABNQPezkH9BIO12hrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.220.0/22
94.124.168.0/21
Signature Algorithm: sha256WithRSAEncryption
05:34:c1:0a:95:3c:45:43:f4:fd:c7:2a:df:cd:8b:14:09:57:
5e:ab:50:b3:32:7f:18:26:e5:5c:cd:3a:5e:3a:f5:b1:ae:4f:
55:86:36:9b:94:f1:05:3c:b0:8f:72:04:27:ec:1f:69:bf:b2:
1e:7b:a6:d9:77:be:61:2d:0f:d3:7f:33:29:e9:8b:ee:1e:28:
d6:24:23:1b:4a:0b:0b:a7:6d:29:41:45:ea:14:e0:47:59:dc:
3e:e4:b6:3a:71:c6:d7:50:e2:be:61:c2:d1:ef:78:99:d1:e6:
af:2c:5a:aa:4f:6d:ea:19:99:e3:7a:05:a0:6a:5d:7d:d0:98:
a9:23:23:e2:aa:ed:a0:1f:64:74:93:e6:01:dd:31:0c:17:a5:
1e:28:06:12:a5:0e:9f:6e:05:50:2c:e9:f1:b6:c1:88:2a:6a:
e0:e1:dc:7a:b5:49:73:77:98:cf:8f:ae:ba:9e:5f:1d:7d:b0:
b0:66:7c:60:55:96:6d:7a:44:f6:41:7c:0f:26:07:6d:ed:70:
97:b9:40:07:92:ad:7e:11:b5:43:41:8e:65:97:7c:73:98:45:
e0:8d:1c:45:3b:3f:9d:29:22:fa:01:71:b3:14:17:fd:a9:0b:
8e:b8:41:fc:7e:2d:52:7b:6c:3d:55:60:19:69:08:8f:59:9f:
85:6a:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:05 2024 by rpki-client on console-ams.rpki-client.org