Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/L5LZRp9-NlDRyU5hSFlavuQuTso.roa
File: L5LZRp9-NlDRyU5hSFlavuQuTso.roa (raw, json)
Hash identifier: ekdiorFyscX0KnTBXHts/92bmtfQDhYRupIORV52/x4=
Subject key identifier: 2F:92:D9:46:9F:7E:36:50:D1:C9:4E:61:48:59:5A:BE:E4:2E:4E:CA
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 36981769
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/L5LZRp9-NlDRyU5hSFlavuQuTso.roa
Signing time: Fri 03 Jun 2022 06:25:20 +0000
ROA not before: Fri 03 Jun 2022 06:25:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29535
IP address blocks: 83.2.0.0/20 maxlen: 20
83.2.8.0/22 maxlen: 22
79.191.255.0/24 maxlen: 24
195.149.235.0/24 maxlen: 24
195.149.236.0/22 maxlen: 22
80.54.110.0/23 maxlen: 24
83.2.56.0/22 maxlen: 22
193.110.120.0/22 maxlen: 22
2a01:1101:5::/48 maxlen: 48
2001:7f8:27::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915937129 (0x36981769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jun 3 06:25:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f92d9469f7e3650d1c94e6148595abee42e4eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:c4:de:9b:36:c8:34:25:2b:7c:f5:7c:2c:
06:40:2b:9b:de:8e:3c:36:01:24:a0:3a:1f:61:88:
f6:31:50:9d:0c:52:01:a5:b0:4d:06:d4:a2:f5:b1:
a8:a9:fe:28:2f:23:49:3b:8e:51:30:b4:91:6d:be:
93:23:46:ad:9d:8c:4c:10:e7:e3:88:17:03:d8:d9:
4f:f9:84:92:c7:5c:97:30:21:f3:7b:0a:dd:5f:ba:
a9:d4:22:8e:72:fc:7e:4d:3d:90:d5:82:bd:f9:6c:
c7:8a:33:37:a5:2d:ea:e8:88:2a:70:15:44:9b:8a:
7b:98:c8:35:6f:07:67:78:4e:66:f7:82:d5:28:f7:
10:bf:14:b5:f6:c5:e3:39:b7:7a:7b:e0:75:d3:58:
43:a3:bc:cc:8d:3a:4c:73:f9:b4:78:60:cd:55:ca:
36:8f:9b:49:8c:d2:1b:2d:3e:49:09:25:69:5a:50:
79:67:60:5e:dc:ed:60:f4:6f:b1:43:6d:0d:85:8e:
cd:0f:0f:22:b7:7d:c8:ca:0a:cc:8a:1b:12:26:c5:
e7:96:f1:cf:7c:4a:a8:2d:da:a4:e3:b6:7d:ee:73:
82:e3:f8:27:cd:f3:a2:d4:55:84:4e:92:bb:58:f6:
aa:12:d8:b1:f3:5a:5c:10:da:03:ff:80:8f:1a:61:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:D9:46:9F:7E:36:50:D1:C9:4E:61:48:59:5A:BE:E4:2E:4E:CA
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/L5LZRp9-NlDRyU5hSFlavuQuTso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.191.255.0/24
80.54.110.0/23
83.2.0.0/20
83.2.56.0/22
193.110.120.0/22
195.149.235.0-195.149.239.255
IPv6:
2001:7f8:27::/48
2a01:1101:5::/48
Signature Algorithm: sha256WithRSAEncryption
36:05:7b:c1:45:9e:d1:87:f1:55:79:b2:8f:97:80:01:97:3b:
76:90:55:04:48:fe:59:86:61:c3:0d:95:bf:bb:23:2a:df:1e:
64:ab:3b:9d:b6:3c:c9:5a:74:04:59:ca:d8:bd:41:34:94:f9:
1f:fe:9f:53:e6:f6:b8:2a:74:60:82:5a:be:9a:a6:90:22:d9:
ee:f5:48:4a:84:9e:ae:6c:79:e1:2a:29:f5:d9:ce:73:6b:14:
4a:d9:c7:fc:38:a5:95:ab:b9:9a:35:58:68:f6:7f:19:0c:91:
78:9f:de:7f:8f:28:09:bb:ff:53:43:f7:71:91:03:7b:7f:51:
49:af:69:0c:68:a9:a0:36:6a:c1:64:ec:35:88:c0:68:11:18:
6e:b5:a8:09:1d:6c:c9:de:e0:bb:5b:1a:2e:a0:92:59:e8:ad:
43:1b:63:c0:3d:fa:e1:32:9c:4a:15:08:65:67:00:19:2f:bf:
8c:4f:7c:88:93:91:b9:6f:a0:0c:ff:f8:bf:1f:30:6b:b7:00:
0f:95:c7:ca:00:44:14:9e:e0:38:02:72:df:70:15:5e:7b:33:
bf:a2:3b:2b:a2:d6:1b:b1:0f:89:57:e7:20:4c:c4:1e:ba:47:
81:5b:39:7f:d2:f9:b8:a9:05:8f:66:6b:e5:93:54:40:2a:97:
dc:b5:b4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:23 2024 by rpki-client on console-fra.rpki-client.org