Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/LcNn3hUraohox3BlDYnG8XFrnW4.roa
File: LcNn3hUraohox3BlDYnG8XFrnW4.roa (raw, json)
Hash identifier: /f/nOMwsr+1X17y/rfQ7tdSykzyFUpA65u2unIU5k3A=
Subject key identifier: 2D:C3:67:DE:15:2B:6A:88:68:C7:70:65:0D:89:C6:F1:71:6B:9D:6E
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 326F7397
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/LcNn3hUraohox3BlDYnG8XFrnW4.roa
Signing time: Sat 01 Jan 2022 12:02:51 +0000
ROA not before: Sat 01 Jan 2022 12:02:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50171
IP address blocks: 193.104.160.0/24 maxlen: 24
91.216.0.0/24 maxlen: 24
176.57.192.0/21 maxlen: 21
2a00:f680::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846164887 (0x326f7397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Jan 1 12:02:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dc367de152b6a8868c770650d89c6f1716b9d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:48:0b:12:40:07:88:da:ef:64:b9:f4:aa:
f5:1b:4f:57:58:e5:dc:ff:9f:63:75:7f:56:8e:03:
67:2a:2e:2d:a4:46:fe:af:14:28:60:c2:ba:77:d1:
4a:f0:9d:58:f8:3a:2a:89:14:4f:72:19:4e:15:4d:
78:34:d2:85:f7:9e:f5:ea:9d:62:2e:21:ec:fd:4d:
9b:b2:1a:33:8a:bc:46:8c:33:ee:5f:20:b9:a1:8d:
ab:d0:6c:3f:ec:3c:87:e7:9f:1c:5c:e6:be:27:21:
5d:6b:73:c7:ea:e4:82:d8:b9:74:de:ad:b1:82:cf:
06:62:49:11:b0:0c:ac:e6:c9:c5:cf:40:12:80:92:
2a:57:e3:c0:f4:15:50:35:e5:af:ed:a8:31:63:a5:
1b:62:1e:a6:54:d1:c9:45:db:e4:33:fd:2c:c9:7c:
d1:4a:6a:00:44:80:e0:d7:e5:43:57:a4:5e:cc:81:
6c:99:7a:5c:e8:3d:b3:2a:45:4d:f2:35:81:8b:8c:
15:bb:31:2b:c3:07:68:3a:c0:fa:3b:d0:12:73:ad:
44:36:61:11:70:14:d7:12:de:54:3c:be:26:3a:7a:
14:88:ec:06:31:2a:6a:38:0b:06:a9:e2:86:1a:32:
dc:93:dd:a2:4d:c7:f7:0e:95:08:b6:ba:ab:80:7a:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C3:67:DE:15:2B:6A:88:68:C7:70:65:0D:89:C6:F1:71:6B:9D:6E
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/LcNn3hUraohox3BlDYnG8XFrnW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.0.0/24
176.57.192.0/21
193.104.160.0/24
IPv6:
2a00:f680::/32
Signature Algorithm: sha256WithRSAEncryption
6a:8c:fb:66:49:d5:b4:8f:a6:e1:47:18:0d:b6:a0:18:46:0a:
12:63:51:eb:68:b3:d4:9f:13:0e:8f:b8:e7:1c:2c:74:d7:18:
70:12:17:a9:c6:eb:2d:d0:03:23:ea:6e:cb:ad:cd:2f:57:89:
a4:23:3a:22:9a:40:40:0f:27:be:b7:42:0d:0f:2c:26:53:26:
81:cc:30:9a:de:0b:73:83:bb:09:4e:8d:19:17:28:c3:e4:1f:
f6:bb:6c:96:0f:d5:30:c8:f5:11:9b:dd:d2:6b:49:3d:ed:2b:
13:e8:c4:76:33:17:16:13:be:aa:34:78:15:fc:c0:a1:bc:a4:
20:db:51:e0:a4:7b:9e:d9:c1:a6:d8:f6:1d:d5:d3:eb:e0:d4:
87:ad:be:c9:7e:83:5e:9e:90:e4:a3:8e:f9:ad:a2:63:ba:e1:
54:e6:bc:32:ba:a1:eb:42:d5:42:b8:1a:79:2d:3b:0b:6a:a3:
ad:5f:44:76:91:ae:ee:dc:13:ba:75:24:02:31:4f:59:ae:e5:
41:dd:2e:06:68:d9:16:d7:b3:54:99:56:cd:37:77:7f:a4:c3:
78:34:a6:6f:21:71:78:b2:e4:9d:3b:c1:9e:d8:8a:df:ef:a0:
f8:67:fb:ed:aa:9b:fe:0a:27:03:c4:c5:42:5d:26:c7:07:9c:
d0:93:3b:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:30 2023 by rpki-client on console.sobornost.net