Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/LnSnLoJWTu59LyJ466iebS4Aex8.roa
File: LnSnLoJWTu59LyJ466iebS4Aex8.roa (raw, json)
Hash identifier: YuI8OTa7Fb76nyKELorZ0SE17jtlvCy2hd1ir2Rz9y0=
Subject key identifier: 2E:74:A7:2E:82:56:4E:EE:7D:2F:22:78:EB:A8:9E:6D:2E:00:7B:1F
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 3662BE8B
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/LnSnLoJWTu59LyJ466iebS4Aex8.roa
Signing time: Tue 08 Feb 2022 10:22:01 +0000
ROA not before: Tue 08 Feb 2022 10:22:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47887
IP address blocks: 81.28.112.0/20 maxlen: 24
188.123.160.0/19 maxlen: 24
185.175.248.0/22 maxlen: 24
82.212.64.0/18 maxlen: 24
2a00:18d0::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912440971 (0x3662be8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Feb 8 10:22:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e74a72e82564eee7d2f2278eba89e6d2e007b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:60:1f:3e:f7:7b:63:d9:1e:21:38:57:6c:
7b:0b:61:00:b1:70:97:c2:ea:0a:97:12:b4:81:68:
af:58:f3:56:ea:80:e4:eb:54:6c:bd:22:4a:25:f0:
f5:77:63:86:a7:7f:82:03:56:d8:d4:f8:a8:ba:c1:
e6:66:81:6c:31:72:c5:11:54:b5:82:00:42:a8:9e:
74:aa:76:2d:ae:90:4f:e5:b8:36:09:27:09:ff:34:
1d:aa:8b:7a:fc:83:5d:46:0a:cb:73:0f:15:a2:75:
db:e2:fa:93:5b:9f:c7:07:80:b8:f5:2f:43:bd:90:
7e:69:17:f7:df:3e:5a:1c:f2:51:88:9f:62:89:87:
4c:12:fa:63:7b:b5:c5:c2:b9:ae:e0:7d:3c:40:82:
7d:cb:26:cb:67:e9:ab:68:cf:bb:2f:53:ba:05:53:
a3:03:77:0f:8e:0b:87:56:2e:f7:2a:98:44:6f:c0:
97:99:fe:33:ca:98:02:69:9c:0c:8d:60:d9:24:f8:
07:c6:b2:45:0b:71:34:40:19:9b:79:d9:19:1b:d1:
4b:33:44:50:81:59:48:5a:34:25:b4:9f:99:0f:0d:
40:51:09:84:13:6e:f9:c3:ab:d0:68:e9:c3:dd:8b:
16:25:c5:c4:61:c3:9e:63:d0:91:0a:be:c5:75:72:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:74:A7:2E:82:56:4E:EE:7D:2F:22:78:EB:A8:9E:6D:2E:00:7B:1F
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/LnSnLoJWTu59LyJ466iebS4Aex8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.112.0/20
82.212.64.0/18
185.175.248.0/22
188.123.160.0/19
IPv6:
2a00:18d0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:c6:7e:29:f1:da:fc:76:6c:06:50:4a:78:f5:4d:4f:4d:e0:
50:fa:bf:65:35:92:36:37:7d:8e:4c:b7:6c:32:da:93:15:0d:
43:11:57:a0:9a:2d:3b:b1:ea:49:bb:48:5a:c3:1c:27:36:d1:
17:3e:3d:0e:2d:b8:c5:8e:53:4f:30:6c:05:3f:77:9e:a0:21:
4d:48:32:77:3c:70:76:4f:4c:44:3e:f7:7b:64:63:15:22:94:
17:29:7f:af:05:1d:62:43:7d:03:b4:2d:53:61:82:a8:a5:82:
b4:16:62:ee:5a:5c:c9:1b:e9:6e:62:00:0b:3a:05:3c:20:e9:
c3:de:3a:e8:15:8c:e3:13:e0:51:0c:da:a8:59:06:68:c4:11:
e9:8f:04:78:07:b2:54:68:15:72:88:db:67:70:5b:03:79:34:
1c:cf:68:05:7b:48:0e:9e:ae:82:5c:d7:7a:ca:13:61:34:28:
98:1b:fc:e1:d7:dd:b2:fd:11:37:bf:eb:7c:b0:b0:7b:a9:17:
34:60:63:af:80:c7:99:ee:8d:7b:ff:6f:03:21:f8:bb:8d:5e:
70:54:5b:b4:0a:b6:f2:ce:21:42:f9:85:bb:60:dd:57:52:bd:
74:2a:d3:21:75:15:e1:0e:01:9d:23:9d:ed:a5:e0:73:98:4d:
37:6b:8f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:41 2023 by rpki-client on console-fra.rpki-client.org