Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/LlaQWD1LL3AZd7wq8Yl5T4QT1Fc.roa
File: LlaQWD1LL3AZd7wq8Yl5T4QT1Fc.roa (raw, json)
Hash identifier: n9OsWFzL0UFTd0lFk8k3RDfPvOvaf6tY0wsdKegYimI=
Subject key identifier: 2E:56:90:58:3D:4B:2F:70:19:77:BC:2A:F1:89:79:4F:84:13:D4:57
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 0561DE28
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/LlaQWD1LL3AZd7wq8Yl5T4QT1Fc.roa
Signing time: Sat 01 Jan 2022 05:02:54 +0000
ROA not before: Sat 01 Jan 2022 05:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21171
IP address blocks: 152.90.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90299944 (0x561de28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Jan 1 05:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e5690583d4b2f701977bc2af189794f8413d457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:90:e4:f9:68:b7:c4:3a:f0:b8:9d:14:bc:
a4:dd:c8:53:3f:34:07:c9:ee:14:22:9e:74:56:e5:
51:29:4c:61:7e:0d:5e:18:65:8f:83:21:96:39:1f:
c4:95:48:3b:3e:9f:a4:5e:d4:67:f7:40:ba:40:3e:
b9:6c:af:4e:98:b3:50:f2:df:35:4f:ac:e5:d6:23:
af:a6:99:3a:15:8e:ef:03:3a:a2:5f:75:ec:96:b1:
6f:ca:df:93:e6:c9:b3:31:ae:29:ea:ce:41:52:7c:
64:47:36:1e:57:bc:53:5b:89:24:9c:b7:c1:50:4c:
4b:6d:df:e7:30:94:23:87:39:ac:dd:fd:ce:cc:08:
61:1e:cb:36:e3:ba:18:49:96:c7:f7:01:82:e6:48:
bd:28:3c:77:8a:17:7c:2b:f5:37:84:b1:1f:b6:da:
31:2e:13:fc:57:3f:38:65:52:cb:d4:df:a3:a1:2a:
9f:38:73:2c:1f:95:c3:2f:47:64:7b:56:fe:5c:78:
ff:6e:97:46:64:5f:ad:80:04:2c:5a:85:9b:fb:97:
e5:c8:45:f0:3d:3f:06:2f:4a:44:fb:f9:84:6a:6b:
bd:e6:14:1e:c7:d2:5e:0e:86:45:9c:83:55:66:b3:
e2:40:f8:18:e4:8c:8b:9f:54:a1:bc:77:22:56:88:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:56:90:58:3D:4B:2F:70:19:77:BC:2A:F1:89:79:4F:84:13:D4:57
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/LlaQWD1LL3AZd7wq8Yl5T4QT1Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:2f:1c:38:7d:51:5c:54:b6:31:93:9c:64:a9:55:02:6f:ef:
98:c4:aa:0d:1d:4f:54:72:44:6c:33:5c:82:86:db:6a:7c:13:
c9:e2:39:38:fd:76:e1:af:46:36:d3:9e:6f:4f:7c:32:af:6d:
0b:ec:ea:0a:4c:ea:54:f7:df:b4:e0:58:16:e1:1e:33:9c:e6:
bd:5f:70:45:e5:42:b7:5a:4f:99:08:a9:b9:50:6f:45:51:de:
cc:ba:3a:3c:06:6f:0d:e5:5c:1b:90:b6:75:09:d6:b4:3c:78:
41:34:d1:e9:06:13:70:ec:77:30:1c:3a:5f:7d:1d:a9:54:07:
89:bc:35:e0:16:0b:6a:45:49:db:fe:d8:07:3c:38:8d:b7:02:
42:9b:ce:79:6b:10:7d:39:5b:79:dc:66:bb:ec:ec:5d:f1:d0:
5d:ed:2e:d8:3f:70:ef:4a:1b:e9:d1:a7:e3:bc:1b:9b:8c:8f:
50:36:c2:23:24:f6:19:fb:4c:b4:d1:6c:74:39:37:32:85:f2:
fe:e5:8f:eb:f3:9d:29:06:52:52:94:6a:45:11:c5:e3:f7:9d:
7b:81:0a:cb:68:f1:78:e2:73:81:9e:07:49:9e:eb:da:93:34:
72:c0:79:4b:c0:a8:8a:70:c0:40:98:2b:87:a6:80:3c:d8:6b:
6a:d3:42:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:41 2024 by rpki-client on console-fra.rpki-client.org