Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/lnwU0YW6ywNW-w-IkbL8qHOna7A.roa
File: lnwU0YW6ywNW-w-IkbL8qHOna7A.roa (raw, json)
Hash identifier: A2i+91rW4yw4tCiahGnkB820Ofs7zfe6PuC62XRir+g=
Subject key identifier: 96:7C:14:D1:85:BA:CB:03:56:FB:0F:88:91:B2:FC:A8:73:A7:6B:B0
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 01CDF4
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/lnwU0YW6ywNW-w-IkbL8qHOna7A.roa
Signing time: Thu 07 Apr 2022 18:07:40 +0000
ROA not before: Thu 07 Apr 2022 18:07:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 194.35.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118260 (0x1cdf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Apr 7 18:07:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=967c14d185bacb0356fb0f8891b2fca873a76bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:30:35:a7:4a:9d:59:b3:97:c1:94:31:7c:
49:c4:9b:3c:da:43:8f:cd:ec:12:2d:c2:4a:40:6f:
1d:5d:2e:3e:2c:ef:e7:5f:ad:42:5b:c0:39:9f:1b:
07:cb:b5:01:2d:24:c0:57:b3:d8:d7:3c:ee:ee:74:
d3:4a:5b:f7:86:6d:80:7b:f8:54:6d:9b:a4:e4:e2:
49:aa:12:2b:be:c5:dc:49:bc:b4:37:8e:33:f2:d9:
ac:4b:2c:07:33:5e:cc:ea:2d:ee:4c:f8:46:0d:7f:
8b:d6:20:f2:a3:2e:4b:5c:bc:9c:12:1f:95:4f:83:
0f:df:ac:0f:0d:88:d9:d7:23:43:b8:08:43:08:49:
fd:71:f2:ae:df:9b:d6:0d:0d:95:7b:e0:f3:0f:70:
c2:2f:fb:db:00:f0:9d:86:42:de:52:6d:67:b3:08:
7d:81:2a:4f:bc:a1:85:94:87:38:74:1f:0a:90:6a:
0f:7f:7f:68:5e:3f:48:cb:ec:35:4a:19:9f:40:c6:
23:02:d4:bd:46:88:ec:99:27:ff:7c:50:14:d2:68:
8f:b6:d2:be:4b:58:2b:d5:d9:43:9d:e1:97:f1:ee:
e7:8c:4a:f7:c7:85:80:b6:f3:cb:07:4b:cb:2e:9e:
1d:c9:bf:ca:83:e2:00:6f:f9:f1:b4:f7:f3:d3:5b:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7C:14:D1:85:BA:CB:03:56:FB:0F:88:91:B2:FC:A8:73:A7:6B:B0
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/lnwU0YW6ywNW-w-IkbL8qHOna7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a8:06:38:ed:33:94:f7:5e:42:ad:29:29:e3:b8:f6:dd:43:
75:6c:6c:3c:44:0f:bf:b7:39:23:81:e2:f3:15:cc:07:f9:d7:
31:ec:ae:b0:01:92:cb:46:d3:af:45:4e:f5:44:de:6c:78:4a:
91:9e:3a:64:07:77:a5:95:f7:a8:b6:97:ff:76:91:91:fe:08:
4c:a7:ae:83:45:96:84:c5:e3:10:45:cd:02:6e:37:28:11:7d:
40:b2:35:c7:83:2e:38:c5:70:26:f7:22:e6:06:c8:bf:13:3a:
d9:11:c6:0d:12:ff:0f:40:cf:35:2e:85:e7:c8:fe:ca:89:da:
e5:95:16:32:c3:8f:50:68:ef:48:0a:24:81:b1:f5:ba:de:67:
d2:3e:d9:10:8c:94:6d:ed:68:e6:23:13:77:23:a9:21:a4:fc:
79:82:e1:2d:cc:64:45:08:b4:e9:c8:0a:06:1c:90:7b:ea:4a:
39:24:52:8f:c1:df:0d:4a:5c:2d:84:2f:df:85:bb:7a:ec:a2:
78:32:4d:fe:b0:3a:1f:66:4a:80:1d:54:ad:11:f4:60:57:86:
ef:91:e4:09:e2:1e:6a:2e:4e:12:af:27:5b:1d:c9:3d:4e:0b:
d7:33:65:2b:eb:0d:ea:0d:fe:c3:08:4f:82:54:0b:25:a6:0d:
5b:56:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:26 2023 by rpki-client on console-fra.rpki-client.org