Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/L3AKE_I28NrzANiyk2UPBrjhAYs.roa
File: L3AKE_I28NrzANiyk2UPBrjhAYs.roa (raw, json)
Hash identifier: rTOt34sxn8PivQFGfF43IvOtg3HWM8DtF4nT6TB0Ojg=
Subject key identifier: 2F:70:0A:13:F2:36:F0:DA:F3:00:D8:B2:93:65:0F:06:B8:E1:01:8B
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 0183E0ABC4BB0AA498D1E0D8E4DED5CFB803
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/L3AKE_I28NrzANiyk2UPBrjhAYs.roa
Signing time: Sun 16 Oct 2022 12:01:36 +0000
ROA not before: Sun 16 Oct 2022 12:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 79.110.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e0:ab:c4:bb:0a:a4:98:d1:e0:d8:e4:de:d5:cf:b8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Oct 16 12:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f700a13f236f0daf300d8b293650f06b8e1018b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:19:f9:e7:b2:e7:e9:25:de:ba:bc:ca:1f:
4b:c7:cf:e4:13:a1:81:b0:e7:ae:59:4d:c7:62:3f:
08:45:42:99:b6:be:c9:c3:fa:f1:bc:55:3f:91:03:
b0:e4:59:4d:a3:7a:98:6a:80:9c:f9:8d:9c:41:1c:
ae:6a:9f:53:f0:36:d7:26:33:69:f4:73:2c:c4:b7:
91:a0:61:45:79:0c:08:87:16:63:a2:02:87:90:8c:
34:79:c4:3e:8c:93:86:2c:18:76:a9:a5:67:00:3a:
59:b4:aa:37:26:76:f6:33:69:88:c0:15:6a:5e:aa:
52:52:41:a2:61:d1:88:66:c3:a9:2d:76:0c:a4:96:
6f:ea:25:6c:22:38:9f:fd:24:9c:e1:d9:3d:83:e5:
1e:77:78:d9:84:5c:69:4f:f5:a6:2c:99:92:23:cf:
d9:70:2a:6f:17:28:7a:11:62:c5:e3:c8:e6:44:29:
74:92:2f:ac:c6:77:0e:37:d9:cf:d0:e5:d7:8a:12:
5b:93:52:41:90:ed:e2:f8:23:dc:cc:ab:84:f5:0d:
24:e9:6d:e5:a7:46:00:bb:54:07:df:f6:d0:ee:f4:
43:bc:58:29:00:0c:e0:a6:b6:e9:e8:c0:90:b8:48:
5b:5b:85:88:a6:a4:d4:84:71:29:0c:21:15:80:0c:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:70:0A:13:F2:36:F0:DA:F3:00:D8:B2:93:65:0F:06:B8:E1:01:8B
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/L3AKE_I28NrzANiyk2UPBrjhAYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.167.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f7:5d:20:64:50:a1:7a:17:7e:b8:a9:3d:58:77:da:e0:69:
91:50:5b:9a:3a:18:8b:9d:97:fb:fb:67:1e:41:5d:9e:56:6a:
b8:5b:1c:ce:06:e4:b7:49:a2:f8:7f:bd:d2:17:75:99:96:67:
41:cf:e0:82:1d:d5:56:b4:9d:c0:8a:eb:ed:b3:e7:da:13:c7:
f6:23:0f:18:51:96:3d:fd:78:5f:2b:29:9a:1c:65:a1:02:59:
f8:00:c7:2a:49:37:49:c8:0e:26:e2:17:0f:dd:ed:3f:ab:a4:
4f:61:69:62:64:41:45:64:0e:bd:6b:07:0c:bf:7e:2a:6e:2f:
86:15:50:f5:32:eb:05:ed:74:1a:e1:28:9b:78:ae:91:c8:34:
3c:95:49:e6:a4:36:22:cb:c3:d6:df:d8:c0:7e:75:17:4c:2b:
8e:9b:fd:c0:fa:a3:5e:ec:99:92:c3:2e:de:38:80:ce:8c:9d:
26:ee:e2:d9:a1:93:6e:7b:05:f8:d7:01:7b:4b:94:22:b8:9f:
bc:9f:fd:03:9d:f4:f1:ef:ca:7d:13:aa:6e:94:bf:1b:a3:ed:
56:b6:36:46:10:85:1d:ec:8e:7e:1c:2c:69:f4:e8:dc:e3:d2:
07:45:9a:a9:71:56:bf:cf:cc:cd:ca:f4:42:c6:6b:74:9d:65:
43:02:05:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPgq8S7CqSY0eDY5N7Vz7gDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm
YmE1MmUwHhcNMjIxMDE2MTIwMTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjcwMGExM2YyMzZmMGRhZjMwMGQ4YjI5MzY1MGYwNmI4ZTEwMThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNsZ+eey5+kl3rq8yh9Lx8/kE6GB
sOeuWU3HYj8IRUKZtr7Jw/rxvFU/kQOw5FlNo3qYaoCc+Y2cQRyuap9T8DbXJjNp
9HMsxLeRoGFFeQwIhxZjogKHkIw0ecQ+jJOGLBh2qaVnADpZtKo3Jnb2M2mIwBVq
XqpSUkGiYdGIZsOpLXYMpJZv6iVsIjif/SSc4dk9g+Ued3jZhFxpT/WmLJmSI8/Z
cCpvFyh6EWLF48jmRCl0ki+sxncON9nP0OXXihJbk1JBkO3i+CPczKuE9Q0k6W3l
p0YAu1QH3/bQ7vRDvFgpAAzgprbp6MCQuEhbW4WIpqTUhHEpDCEVgAzxpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC9wChPyNvDa8wDYspNlDwa44QGLMB8GA1UdIwQY
MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It
MWRkNWRhYjM2ZjlmLzEvTDNBS0VfSTI4TnJ6QU5peWsyVVBCcmpoQVlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm
LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT26nMA0G
CSqGSIb3DQEBCwUAA4IBAQBa910gZFChehd+uKk9WHfa4GmRUFuaOhiLnZf7+2ce
QV2eVmq4WxzOBuS3SaL4f73SF3WZlmdBz+CCHdVWtJ3Aiuvts+faE8f2Iw8YUZY9
/XhfKymaHGWhAln4AMcqSTdJyA4m4hcP3e0/q6RPYWliZEFFZA69awcMv34qbi+G
FVD1MusF7XQa4SibeK6RyDQ8lUnmpDYiy8PW39jAfnUXTCuOm/3A+qNe7JmSwy7e
OIDOjJ0m7uLZoZNuewX41wF7S5QiuJ+8n/0DnfTx78p9E6pulL8bo+1WtjZGEIUd
7I5+HCxp9Ojc49IHRZqpcVa/z8zNyvRCxmt0nWVDAgVb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:44 2024 by rpki-client on console-ams.rpki-client.org