Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/Lz5b6I-xvQ-WmlZI8NsdS6IeGTI.roa
File: Lz5b6I-xvQ-WmlZI8NsdS6IeGTI.roa (raw, json)
Hash identifier: 3vAGIbLE741pFa1+Ai4gRUjPybsx6oP3v1bsW9GoxcI=
Subject key identifier: 2F:3E:5B:E8:8F:B1:BD:0F:96:9A:56:48:F0:DB:1D:4B:A2:1E:19:32
Certificate issuer: /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial: 0182448CEF33F0C78EE09E3CE8039204EFB0
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/Lz5b6I-xvQ-WmlZI8NsdS6IeGTI.roa
Signing time: Thu 28 Jul 2022 11:24:23 +0000
ROA not before: Thu 28 Jul 2022 11:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50554
IP address blocks: 139.28.112.0/22 maxlen: 24
185.3.176.0/22 maxlen: 24
89.106.160.0/21 maxlen: 24
2a00:1bc8::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:44:8c:ef:33:f0:c7:8e:e0:9e:3c:e8:03:92:04:ef:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Validity
Not Before: Jul 28 11:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f3e5be88fb1bd0f969a5648f0db1d4ba21e1932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:2e:9e:dc:a4:3c:95:b7:53:aa:1d:3c:c0:
c5:56:6a:4b:7a:35:78:d4:2b:58:a4:8c:8a:69:57:
f4:cf:21:c0:a6:4c:85:38:e5:f4:8c:04:2d:8e:5f:
11:55:4e:d9:98:2f:ae:85:7b:d2:74:fe:9d:7f:14:
cd:e3:8c:0d:41:63:d7:a5:e7:88:fe:69:ff:64:ac:
69:a1:c7:0d:50:2f:bd:da:48:0c:db:ed:e5:56:86:
7f:ff:02:11:74:2a:14:01:3b:41:a2:bc:ae:c0:1b:
68:17:a2:20:3e:96:7b:e2:db:da:39:e0:e8:5c:9c:
f0:5e:36:d2:a3:81:a7:d7:39:18:48:d1:2c:40:ea:
8f:b4:81:40:7c:6c:89:9b:0b:b3:04:c7:dd:80:9c:
94:9f:60:e8:33:59:ff:bd:3d:4b:3c:03:32:ee:ae:
b4:60:61:8f:92:f0:b7:22:0f:21:5e:8c:58:eb:5a:
f9:5c:72:b0:fe:7b:7e:79:ab:2a:52:f9:a7:52:7a:
2c:3a:28:86:58:b7:4d:0b:6e:7c:b2:de:3c:7f:a3:
7d:fa:2a:34:62:76:10:a1:cf:55:7e:ae:6d:7c:13:
c9:88:3c:df:66:6a:ea:7d:d7:a0:76:15:49:33:f3:
9c:af:b9:4e:a8:93:e9:f8:d6:83:5d:77:b9:a0:25:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3E:5B:E8:8F:B1:BD:0F:96:9A:56:48:F0:DB:1D:4B:A2:1E:19:32
X509v3 Authority Key Identifier:
keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/Lz5b6I-xvQ-WmlZI8NsdS6IeGTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.160.0/21
139.28.112.0/22
185.3.176.0/22
IPv6:
2a00:1bc8::/29
Signature Algorithm: sha256WithRSAEncryption
6a:23:2e:86:68:32:b4:e3:9c:5d:f6:73:ff:02:9a:f3:90:03:
6a:44:3c:3f:a2:cc:64:98:0c:8c:aa:4b:04:ba:5c:c5:0a:45:
9c:3c:a8:95:a4:9f:f9:fb:67:a4:11:1b:8b:2d:ec:02:06:e8:
04:59:4b:8e:6c:bd:43:d0:d6:40:81:4f:57:09:a7:7b:71:9a:
b6:99:c2:7c:55:9e:e8:45:42:53:7f:2e:ad:d3:74:fd:20:43:
57:5a:69:ab:6d:8d:2e:0c:f5:7f:07:6a:45:94:b3:c9:90:7b:
99:f5:56:bb:5b:ff:cb:2d:b0:b1:c6:c5:07:1a:c7:38:f0:e8:
4d:3b:e0:9a:86:49:b0:0c:56:7b:5c:d9:7a:4d:bf:6c:4a:1b:
9c:b7:ab:29:66:f1:4c:e3:91:c5:94:22:a4:8d:77:7c:c0:a8:
b2:0b:40:9c:5c:30:51:5d:de:bd:8b:63:06:45:fa:33:90:8e:
52:4a:85:9a:e0:b3:35:1f:cb:f0:b4:d2:e8:6f:de:b9:d1:9b:
a9:4f:81:7f:88:0a:40:55:a7:84:04:aa:cd:e3:dd:5a:26:a4:
f3:41:20:56:6b:f6:49:32:a5:34:d8:57:fa:4d:a4:60:b1:f1:
ac:4c:ba:f6:79:ce:5d:1f:f1:ca:22:18:b5:4c:c5:0c:c1:19:
da:b2:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:53 2024 by rpki-client on console-ams.rpki-client.org