Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/LT2ILX6EN4GmlluSg8nC776IUn0.roa
File: LT2ILX6EN4GmlluSg8nC776IUn0.roa (raw, json)
Hash identifier: 8mUUF1y1GAbOivWvX5U1OrRbTXr4xYwpbE68O8Ykttc=
Subject key identifier: 2D:3D:88:2D:7E:84:37:81:A6:96:5B:92:83:C9:C2:EF:BE:88:52:7D
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 0D68856C
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/LT2ILX6EN4GmlluSg8nC776IUn0.roa
Signing time: Sat 01 Jan 2022 15:03:18 +0000
ROA not before: Sat 01 Jan 2022 15:03:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34572
IP address blocks: 83.173.72.0/21 maxlen: 21
83.173.88.0/21 maxlen: 24
83.173.92.0/24 maxlen: 24
83.173.96.0/21 maxlen: 21
83.173.112.0/22 maxlen: 22
83.173.113.0/24 maxlen: 24
83.173.114.0/24 maxlen: 24
83.173.125.0/24 maxlen: 24
185.170.151.0/24 maxlen: 24
83.173.64.0/21 maxlen: 21
83.173.64.0/19 maxlen: 19
2a02:6100::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224953708 (0xd68856c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Jan 1 15:03:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d3d882d7e843781a6965b9283c9c2efbe88527d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:08:5a:e4:11:21:5a:22:83:65:58:79:3b:d6:
4b:26:44:be:fb:9f:e8:a7:49:bd:50:a6:35:f6:41:
7c:66:4d:85:42:58:c5:f7:ee:96:79:59:32:20:45:
d8:03:c4:b7:1c:ef:4b:72:39:b9:cc:f1:ab:3a:78:
63:f5:2d:53:87:54:b9:75:2a:f2:41:97:b3:a4:b3:
3f:90:16:1a:3b:f7:0e:f3:c7:b3:a7:7e:5b:81:6a:
a0:e5:71:95:6c:cd:3d:bd:10:b4:20:eb:02:ba:a7:
5e:06:0f:c1:3e:44:46:e8:7e:0d:c9:46:a8:75:c6:
71:ea:cd:c0:44:e2:18:75:2f:9f:71:92:97:02:7c:
24:f8:ab:d1:3a:e4:a4:19:80:f7:4e:a4:cf:35:9c:
9a:8f:e3:62:d6:35:34:7c:e3:e3:aa:3e:f4:05:e4:
27:72:47:ac:56:5c:d9:03:ae:2a:63:b5:c2:c4:13:
32:c7:cd:6c:45:0f:94:d6:1e:4b:97:7f:9f:b9:bd:
3f:c5:58:88:39:14:23:9a:77:c5:f6:1d:cc:0c:82:
bf:84:b3:26:d7:8c:55:80:e7:f6:dd:9a:cf:0c:f0:
ef:8c:3c:9e:ab:a3:db:49:f0:9d:09:0f:99:5d:8b:
8e:32:9c:c0:84:8c:2c:5d:82:58:40:79:69:da:93:
06:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3D:88:2D:7E:84:37:81:A6:96:5B:92:83:C9:C2:EF:BE:88:52:7D
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/LT2ILX6EN4GmlluSg8nC776IUn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.64.0-83.173.103.255
83.173.112.0/22
83.173.125.0/24
185.170.151.0/24
IPv6:
2a02:6100::/32
Signature Algorithm: sha256WithRSAEncryption
85:e9:12:a3:87:90:65:ac:d8:c2:3a:1d:86:dd:73:37:76:1e:
2d:68:cf:41:c6:49:19:c3:32:2d:c4:1e:91:bc:39:ff:b9:24:
db:07:7a:8f:d3:a8:da:c0:b8:e2:03:a1:5b:c8:fc:17:9c:a7:
23:b9:43:6d:49:9e:f5:09:5e:37:cc:e0:52:c1:a2:9c:a3:39:
8c:5c:20:ba:f9:ac:63:af:7c:e2:0a:19:0f:f1:08:ee:ac:9b:
43:4d:1b:eb:75:55:ab:90:75:b0:0e:a0:d2:2a:fb:32:83:33:
78:dc:78:5b:e2:0d:44:8d:5a:20:69:01:ce:4b:3c:16:cd:a1:
2f:4f:db:6d:a9:4c:e5:99:ef:c9:c4:59:e1:bc:07:ac:f7:25:
0a:2e:b5:d6:07:6e:be:15:23:a4:34:a5:5c:ea:a4:41:fb:08:
2f:16:2a:b4:73:cd:a7:29:2c:f7:a8:1e:54:ec:67:9a:d0:18:
2b:b3:6c:0d:30:c3:b2:48:62:8c:ff:83:48:7c:a9:5b:8b:49:
c9:54:fc:46:c8:85:5d:47:bc:aa:9b:ea:05:84:33:47:12:2c:
58:a1:d6:c3:04:35:f8:0b:b1:04:8c:18:0b:80:54:ab:b4:59:
a6:8e:7e:ef:d2:33:66:8a:22:a9:e2:c2:99:8d:17:00:1f:12:
70:a1:44:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:41 2024 by rpki-client on console-ams.rpki-client.org