Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/lKjqEobr_7NA94b7uS3NaL6usos.roa
File: lKjqEobr_7NA94b7uS3NaL6usos.roa (raw, json)
Hash identifier: gun8qKf2CCNTg9x6hdrmipNKpoF0UUwwKYonMTeyVYE=
Subject key identifier: 94:A8:EA:12:86:EB:FF:B3:40:F7:86:FB:B9:2D:CD:68:BE:AE:B2:8B
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0184DC7558A625BF830C00A97D735D66C6B3
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/lKjqEobr_7NA94b7uS3NaL6usos.roa
Signing time: Sun 04 Dec 2022 09:26:28 +0000
ROA not before: Sun 04 Dec 2022 09:26:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60077
IP address blocks: 193.151.128.0/20 maxlen: 32
193.151.128.0/19 maxlen: 32
193.151.144.0/20 maxlen: 32
193.151.157.0/24 maxlen: 32
193.151.159.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dc:75:58:a6:25:bf:83:0c:00:a9:7d:73:5d:66:c6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Dec 4 09:26:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94a8ea1286ebffb340f786fbb92dcd68beaeb28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:07:99:ca:44:4d:ca:8a:aa:59:40:c3:00:
fe:4c:09:e0:0e:73:18:ae:90:32:c3:b3:6c:f0:a0:
40:20:8c:14:c0:06:4e:86:22:b3:82:a7:fe:44:ad:
d3:21:33:b2:c5:f0:e0:d9:9b:cf:40:c8:62:1d:56:
79:05:07:b2:20:e9:07:e8:df:b5:91:ae:90:78:49:
a6:81:f0:91:c9:7e:59:ae:31:e0:33:fa:89:f0:33:
d3:89:48:e5:64:48:47:b6:40:05:af:c1:ee:c0:41:
23:4b:f8:d7:11:2e:69:01:0b:1b:ed:1d:7b:0e:de:
38:f9:dd:01:f3:f8:60:20:81:32:94:cd:07:91:65:
50:ee:de:47:23:f2:e8:28:4f:32:23:fd:dc:7c:ed:
91:22:91:48:98:9d:77:e5:c2:27:60:5a:74:29:0e:
97:df:fd:b6:df:00:aa:bb:66:3a:29:e3:5e:99:49:
5d:d6:70:ce:a7:f7:a4:5c:f3:05:7d:66:9e:4c:14:
57:77:49:8d:cb:9a:f1:2a:83:12:61:b5:64:b7:19:
4c:ce:72:5a:b8:2f:0b:c3:0d:71:e8:a8:72:bc:44:
d2:2c:da:b2:3d:d2:c8:5b:95:cd:7e:81:87:bc:7d:
ae:fe:f5:d7:94:ef:76:99:0b:e9:57:b9:4b:d0:75:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A8:EA:12:86:EB:FF:B3:40:F7:86:FB:B9:2D:CD:68:BE:AE:B2:8B
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/lKjqEobr_7NA94b7uS3NaL6usos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.128.0/19
Signature Algorithm: sha256WithRSAEncryption
df:b4:3f:59:b3:e8:24:e4:b1:40:6f:99:3e:65:98:8e:8b:77:
58:e6:6e:06:ce:a9:4a:0a:6a:72:f3:d3:2b:93:a2:a6:f1:85:
71:ee:e5:b8:8d:29:c5:07:37:41:14:c6:53:d7:31:b9:47:24:
d6:3a:ea:92:38:07:54:b2:71:33:b3:dd:52:12:f8:e6:1a:84:
1c:61:13:19:2e:73:70:1a:02:cf:12:c7:6f:d6:3a:21:c2:75:
75:1b:d4:b1:1e:00:01:c3:b8:3b:82:ed:80:73:7d:37:04:53:
67:d7:3d:ed:78:fd:39:97:f9:ff:2a:a9:c9:5a:b2:49:f2:fb:
34:3e:e5:60:39:07:74:c1:6d:c7:59:8e:88:37:59:dc:77:e4:
c3:5b:96:48:b3:a4:fe:eb:3f:5a:e6:24:9a:a4:ed:10:f8:eb:
b6:cf:a6:11:f8:43:57:bb:aa:42:d0:83:7b:1f:38:a5:5c:35:
81:f7:ba:26:a5:65:f8:97:e0:64:17:95:70:c7:54:eb:5c:c1:
b8:a3:cd:f0:d2:6b:18:01:27:f0:2c:84:01:94:ee:a6:d3:69:
c9:6e:dd:98:f4:31:bd:88:85:1a:06:25:2c:b6:35:f5:73:5a:
a2:a3:87:e6:50:ba:0e:9e:fa:7d:9d:47:f6:08:da:c6:49:2c:
db:f8:b7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net