Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/LgXj0wpt_JFaUzES5HaiWNBBACs.roa
File: LgXj0wpt_JFaUzES5HaiWNBBACs.roa (raw, json)
Hash identifier: 9xwmX1Iqd0tOVbUaeopg0Dnumt38AV0cnJndd6luGCg=
Subject key identifier: 2E:05:E3:D3:0A:6D:FC:91:5A:53:31:12:E4:76:A2:58:D0:41:00:2B
Certificate issuer: /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial: 01821A570174CB575B82FECB1ACAE11BF462
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/LgXj0wpt_JFaUzES5HaiWNBBACs.roa
Signing time: Wed 20 Jul 2022 06:41:25 +0000
ROA not before: Wed 20 Jul 2022 06:41:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34024
IP address blocks: 91.199.235.0/24 maxlen: 24
193.26.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:57:01:74:cb:57:5b:82:fe:cb:1a:ca:e1:1b:f4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Validity
Not Before: Jul 20 06:41:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e05e3d30a6dfc915a533112e476a258d041002b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:42:c0:1c:bb:43:ea:73:0f:14:46:4f:69:
df:90:e0:6b:8e:71:1f:7d:a7:84:1a:ec:38:69:d8:
e2:1a:48:22:52:38:bc:9e:c9:45:eb:92:12:26:c8:
c7:fb:34:12:e1:a3:79:ed:d6:ae:2e:be:8b:99:42:
30:40:1a:02:3a:93:98:40:b4:06:54:2e:89:2a:7c:
43:28:2c:2f:bd:49:0f:3c:74:dc:b0:2f:e1:f2:74:
d9:ea:a9:38:44:75:44:37:02:bf:51:e4:7a:71:84:
7d:17:db:24:07:cd:58:49:09:b2:35:83:a8:54:a8:
2f:ac:75:c9:ca:1a:db:ee:7c:d8:2e:69:af:36:5b:
15:2e:df:8d:6f:8c:93:f6:6e:6c:4e:70:f0:af:3a:
3e:29:26:19:7a:02:c9:37:08:5b:e0:72:a5:c5:e7:
f8:71:15:bf:67:db:23:e8:53:d8:97:80:c9:8a:c7:
2b:19:70:55:a9:71:0d:03:79:e2:2f:1d:f4:ac:31:
3d:da:8f:b1:0c:09:43:f1:a2:ff:f3:28:ab:6f:6c:
eb:d6:f6:3c:72:7d:b6:55:e0:e1:6e:ee:9b:6c:be:
44:f7:d2:1c:33:f0:16:ce:21:df:23:b4:28:06:b6:
c6:d8:70:cf:da:5b:06:1c:a0:6b:fe:ac:05:9a:19:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:05:E3:D3:0A:6D:FC:91:5A:53:31:12:E4:76:A2:58:D0:41:00:2B
X509v3 Authority Key Identifier:
keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/LgXj0wpt_JFaUzES5HaiWNBBACs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.235.0/24
193.26.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e3:dd:78:60:51:d3:b3:08:c5:4b:1c:a9:29:fd:15:f7:ee:
72:60:30:87:b7:c8:09:e7:84:53:b4:52:3c:00:9b:89:af:f2:
35:94:6c:0e:a5:06:38:dd:0f:a8:4c:85:4d:83:31:cf:81:63:
c1:b4:e7:11:2d:e9:d9:e9:b6:6c:12:7a:c1:a4:cf:25:a6:e3:
71:7e:67:ed:a6:cb:65:35:40:b5:04:ee:70:e3:94:9f:b0:fd:
ac:ec:8f:bd:a8:6b:5d:93:7a:d2:e2:bc:e9:dd:e0:45:f6:95:
1f:db:cb:16:95:02:e9:6e:29:5f:6d:fe:97:62:9a:f2:61:c6:
b0:02:f7:b6:23:63:b0:38:6b:fb:10:cd:3f:30:4b:53:6f:ce:
10:94:d0:67:7c:06:95:72:eb:59:e1:5b:40:c1:a9:97:2c:2a:
c5:50:5c:83:69:47:0f:c7:3f:78:cf:d5:70:d2:b9:a6:c3:ae:
a2:e7:1f:d4:48:37:6d:fc:84:9b:ad:b8:d3:d0:a4:5f:0e:32:
1c:03:d1:c5:01:44:94:38:6f:d8:fa:f5:a2:7a:cf:e2:2e:93:
ec:33:39:2c:fb:ae:d5:56:90:0d:9b:c0:f6:66:8a:5b:fe:12:
da:32:ab:f0:44:f3:31:08:5a:a1:07:f0:5a:9e:a5:e0:45:6b:
dd:e1:3c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:46 2023 by rpki-client on console-ams.rpki-client.org