Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/LjlJ7DM_jnXNiXBUT-lOZRF_2Wc.roa
File: LjlJ7DM_jnXNiXBUT-lOZRF_2Wc.roa (raw, json)
Hash identifier: USJ1IWVDf7WG6AhsA6yC5949Yjfuz3VFcbetuzFUx0E=
Subject key identifier: 2E:39:49:EC:33:3F:8E:75:CD:89:70:54:4F:E9:4E:65:11:7F:D9:67
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 014860
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/LjlJ7DM_jnXNiXBUT-lOZRF_2Wc.roa
Signing time: Wed 13 Apr 2022 06:53:16 +0000
ROA not before: Wed 13 Apr 2022 06:53:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24585
IP address blocks: 80.255.96.0/20 maxlen: 20
80.255.96.0/22 maxlen: 22
2a0a:d000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84064 (0x14860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Apr 13 06:53:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e3949ec333f8e75cd8970544fe94e65117fd967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:bc:f9:e3:8b:be:37:95:8e:67:f3:20:30:
61:83:6a:11:16:8a:ef:0d:b9:66:f2:87:05:98:01:
a5:69:0f:38:60:13:b2:02:1a:a2:da:0e:ec:16:7e:
55:16:eb:34:c2:33:02:85:89:aa:93:a2:e3:fd:9c:
c1:02:ab:d9:7b:6d:89:b3:f1:1f:53:29:a9:8e:38:
8e:d6:15:97:80:0d:80:aa:b6:cb:ea:fc:38:d2:89:
fd:a0:69:25:05:c2:ac:0b:58:1e:5b:4f:96:41:ca:
e0:cc:62:74:69:41:e6:ef:1f:99:5b:48:89:22:0b:
5e:ff:2d:61:60:2b:8b:94:ba:14:7a:9d:3c:c0:31:
18:74:73:d2:3d:17:0d:50:70:f1:1c:db:3b:08:0a:
85:5d:d0:0c:68:75:8f:f6:6d:11:8a:35:ee:66:9a:
6b:d6:38:91:51:1a:dc:1d:c2:18:3a:5a:de:cf:42:
4f:9c:63:2d:ae:2d:2d:66:8f:10:31:f1:0d:b8:f9:
19:c8:20:9b:4c:a7:23:ad:a8:3e:df:85:21:19:de:
88:23:a4:e4:a9:97:34:09:90:07:46:a6:11:1e:f1:
3d:6c:e3:7e:7d:53:9f:1f:89:9a:a2:78:1c:e5:32:
5b:1e:90:9f:1c:d4:b7:6d:26:c1:ce:b6:5a:c0:26:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:39:49:EC:33:3F:8E:75:CD:89:70:54:4F:E9:4E:65:11:7F:D9:67
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/LjlJ7DM_jnXNiXBUT-lOZRF_2Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.255.96.0/20
IPv6:
2a0a:d000::/29
Signature Algorithm: sha256WithRSAEncryption
06:8b:f8:a7:67:97:ba:41:1b:d9:bf:fd:5c:01:15:a1:ea:63:
87:7f:67:8e:e2:86:fa:38:7c:63:9a:f4:d1:f0:d6:b1:7c:65:
a4:6f:a7:bb:02:60:df:8f:5e:be:3f:02:25:85:0c:92:55:5f:
1d:00:1a:19:ad:5b:cb:29:52:f5:94:cd:a3:a6:7d:ba:f6:5d:
01:16:a2:e4:5a:b5:6d:1e:3f:f1:2b:2d:8b:3a:c4:36:be:76:
14:42:6c:1d:c2:a0:b8:39:e1:8d:1b:c5:03:4b:ee:e1:dc:84:
bb:96:d0:d7:ad:fe:93:c5:a7:4f:85:7a:91:3e:f1:07:ce:52:
57:40:a1:00:c8:87:e1:c0:6a:4c:1c:20:1e:7e:5a:3c:1f:39:
be:5c:db:9c:bc:e1:54:50:d2:80:7f:91:6e:2f:8e:c4:11:55:
1b:62:ce:6e:90:7b:49:65:2e:2a:01:63:4a:ac:a4:1d:2d:74:
d5:9f:b6:fa:0f:d2:04:7d:9c:0a:fd:a3:a5:3a:c7:46:e1:88:
c8:de:10:51:d9:84:8e:71:ee:cb:bd:58:96:f7:ad:67:bb:39:
84:53:34:7d:51:e3:e9:07:e3:0d:5c:ef:0f:ab:32:06:d4:18:
5a:b0:94:5a:89:ce:b8:4b:4c:9f:4f:fa:19:8e:04:ec:d1:9b:
4c:8b:a8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:02 2024 by rpki-client on console-ams.rpki-client.org