Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/lu26XjYu9is6-3-WQT6SYiWZKZQ.roa
File: lu26XjYu9is6-3-WQT6SYiWZKZQ.roa (raw, json)
Hash identifier: uwON1pCBk3h+8Pz1RV3uDuoDa2IZe0JQ4xwafcE1gwI=
Subject key identifier: 96:ED:BA:5E:36:2E:F6:2B:3A:FB:7F:96:41:3E:92:62:25:99:29:94
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 352608
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/lu26XjYu9is6-3-WQT6SYiWZKZQ.roa
Signing time: Fri 13 May 2022 11:01:28 +0000
ROA not before: Fri 13 May 2022 11:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8751
IP address blocks: 93.113.13.0/24 maxlen: 32
85.204.224.0/21 maxlen: 32
85.204.232.0/24 maxlen: 32
85.204.236.0/22 maxlen: 32
85.204.236.0/24 maxlen: 32
85.204.234.0/23 maxlen: 32
86.107.224.0/20 maxlen: 32
93.113.0.0/20 maxlen: 32
86.107.246.0/23 maxlen: 32
93.113.11.0/24 maxlen: 32
188.215.112.0/24 maxlen: 32
188.215.112.0/23 maxlen: 32
188.215.118.0/24 maxlen: 32
188.215.112.0/21 maxlen: 32
188.215.114.0/24 maxlen: 32
185.85.200.0/22 maxlen: 32
37.156.71.0/24 maxlen: 32
2a03:7420::/48 maxlen: 48
2001:67c:2580::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3483144 (0x352608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: May 13 11:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96edba5e362ef62b3afb7f96413e926225992994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:8f:af:da:f6:e9:03:b5:08:34:94:e4:00:
17:af:8a:dd:26:9d:dc:94:90:4e:16:87:ec:99:cf:
35:fc:cc:05:aa:b2:7d:fd:60:4d:47:12:78:c2:9c:
52:d2:07:81:9e:a7:f0:a2:8d:0f:fd:29:69:19:24:
3a:7d:05:55:51:15:6c:6d:3d:cb:69:f0:e4:e5:91:
9a:26:0d:e1:84:42:c9:ad:a4:36:20:c3:1f:63:81:
2b:8b:b0:e5:31:87:23:f9:de:ec:64:b9:4a:8f:65:
85:5d:81:84:7a:8e:b5:72:39:0f:62:66:57:a8:44:
98:ef:4b:5e:fc:06:6e:1b:d6:69:72:1f:e3:1f:41:
23:53:d8:86:d5:98:e2:5c:2f:0b:28:1d:9c:bc:2e:
24:f4:a6:8f:7d:2d:9e:74:a7:00:a0:78:10:0f:d8:
14:37:e9:17:2d:a0:af:4b:5f:ed:73:81:33:15:87:
fa:a2:06:b0:fe:e1:33:0a:a6:d5:2b:74:50:de:ee:
0c:41:3c:0f:d9:59:cf:22:0f:64:81:b1:eb:f1:18:
19:e8:26:a2:ad:79:01:bb:5b:d9:dd:62:67:95:37:
fa:cc:2b:be:ff:8b:0e:e6:d3:e7:91:1c:08:e0:2e:
7e:ce:5d:65:2c:15:f3:c2:f9:94:70:f7:81:98:6a:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:ED:BA:5E:36:2E:F6:2B:3A:FB:7F:96:41:3E:92:62:25:99:29:94
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/lu26XjYu9is6-3-WQT6SYiWZKZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.71.0/24
85.204.224.0-85.204.232.255
85.204.234.0-85.204.239.255
86.107.224.0/20
86.107.246.0/23
93.113.0.0/20
185.85.200.0/22
188.215.112.0/21
IPv6:
2001:67c:2580::/48
2a03:7420::/48
Signature Algorithm: sha256WithRSAEncryption
7b:6e:65:d2:36:79:09:fe:7a:c4:47:e6:ec:f8:07:17:cf:09:
c9:5c:65:13:ba:02:34:4a:f5:dd:71:df:7d:ff:39:1e:11:83:
2c:0c:4a:ce:1e:d7:66:b7:90:c0:92:b6:51:74:48:50:f8:f2:
4d:d7:45:a8:e5:b8:c1:80:23:9d:6e:bd:b1:ac:b1:d7:3c:39:
11:fc:d8:85:20:de:76:ca:d9:40:25:fa:04:8c:f8:90:52:81:
7e:64:8f:0b:f7:6e:20:05:f2:1a:db:fd:d3:b2:23:86:39:1a:
19:78:c8:ef:65:be:40:d2:37:6e:a4:37:6c:ed:67:4d:58:56:
0d:fa:ce:37:63:93:9d:d6:a4:42:05:e1:2a:7d:3e:06:54:6d:
a3:b3:f6:43:8e:bc:d4:9c:d0:2b:80:18:46:8d:d8:cf:42:13:
56:f4:83:a0:ed:de:5a:fe:59:71:8a:df:c3:fe:bb:7c:07:21:
1e:c3:1c:29:ee:37:89:de:02:39:f7:c0:f2:d7:d8:47:cc:6b:
e9:43:e5:77:1a:38:0f:90:ff:70:88:57:f6:84:dd:a9:ca:e0:
29:aa:5f:21:c8:1a:28:5f:e4:47:3b:dd:2e:87:81:a4:46:c0:
d4:49:61:4c:ca:59:0b:b4:4d:b2:b8:49:16:91:00:5d:2a:3e:
34:6e:ef:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:10 2024 by rpki-client on console-ams.rpki-client.org