Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LXS8KJzQolVdO-jl539YfJQbhfo.roa
File: LXS8KJzQolVdO-jl539YfJQbhfo.roa (raw, json)
Hash identifier: WXR+v4RtMyH5Lg8YyYFNIINw8L0ke0iKjCwl3lrAv7A=
Subject key identifier: 2D:74:BC:28:9C:D0:A2:55:5D:3B:E8:E5:E7:7F:58:7C:94:1B:85:FA
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19F209D8
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LXS8KJzQolVdO-jl539YfJQbhfo.roa
Signing time: Sat 01 Jan 2022 15:56:57 +0000
ROA not before: Sat 01 Jan 2022 15:56:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 45.130.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435292632 (0x19f209d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d74bc289cd0a2555d3be8e5e77f587c941b85fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:60:e1:87:12:1b:98:c1:88:02:ba:b1:be:
21:2a:0a:ee:63:15:98:04:37:cc:91:4c:17:77:02:
d1:67:b3:86:fa:5a:c6:b7:e8:b4:c9:ad:64:09:3d:
87:a7:ef:44:69:91:06:40:ab:27:eb:7e:e1:e0:7c:
ec:97:3f:68:0d:47:e6:8b:29:73:64:e3:5b:f5:c4:
e3:dd:52:53:f5:d0:1d:af:0a:36:79:65:49:ac:48:
67:13:2f:23:c3:c5:5b:02:2d:7f:92:d3:e3:ed:e8:
2c:b9:d3:a7:5e:63:82:5c:aa:61:32:16:a5:26:45:
0f:72:21:26:11:71:2b:4c:e2:a7:88:3e:62:ed:c1:
05:94:a4:22:cd:01:40:0f:29:c5:48:66:f9:38:2b:
46:6b:f6:56:09:8c:4d:6b:1a:e2:dc:af:e2:49:de:
6f:ea:9b:1d:90:ab:e2:14:2e:9b:3e:24:05:7e:c4:
b0:63:5d:ad:af:0a:2e:15:c1:c9:cd:e6:11:86:4d:
02:32:94:32:0e:a5:47:f9:6f:ec:5e:1d:92:7e:3c:
e2:7a:55:73:51:cd:ce:de:14:ee:fe:77:35:ca:97:
2d:c8:53:82:e6:cc:26:99:d3:cd:e1:1b:47:83:ae:
d3:2a:b9:51:b6:4a:d8:58:17:c3:69:2e:3a:14:5b:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:74:BC:28:9C:D0:A2:55:5D:3B:E8:E5:E7:7F:58:7C:94:1B:85:FA
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LXS8KJzQolVdO-jl539YfJQbhfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.138.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:96:d8:5a:7c:3d:18:4f:d8:54:ac:e9:2a:41:47:8f:a6:21:
57:df:b9:c4:c4:1e:15:5a:02:83:4c:d1:dd:d8:a2:d7:d6:d3:
e0:c5:10:c1:12:c6:f8:7f:8b:3f:b9:e8:bd:f5:e2:30:41:80:
ff:50:b6:97:6a:85:3d:89:6c:26:a5:94:41:b0:84:c9:a7:80:
7a:a1:b9:41:54:04:81:af:53:c7:2d:8c:8d:1e:fe:b3:6e:75:
ae:08:36:0e:1b:f7:24:29:55:e9:09:bf:b4:8f:93:a6:a0:67:
c8:6c:41:02:f5:8b:34:3b:58:8f:c7:18:9a:d6:54:d1:10:73:
e7:9c:23:c6:b3:33:3e:2e:26:cb:59:90:3a:06:1d:4b:3a:0b:
1a:b9:f2:51:53:f3:58:19:fb:e2:b8:3a:3a:50:f7:03:28:5e:
0a:34:70:75:47:5a:6c:0d:12:38:64:07:cb:67:b4:df:ec:6b:
62:4b:03:c3:fa:7d:63:e8:9a:0a:07:9e:d8:ae:39:53:ea:7b:
d8:6c:e6:14:4e:49:8a:cb:35:c2:38:42:d3:e8:3c:fd:38:42:
d0:d3:6d:93:00:2b:44:fe:99:0c:6b:2b:ea:35:03:ea:63:32:
5a:69:0b:bb:81:0b:f1:fa:0c:d7:11:6d:fa:b1:ac:cb:e3:cb:
d2:63:37:ca
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGfIJ2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MTU1MDA5YzNkZTQyMWNjNGU2N2I5YTlhZTQyM2JiMzVkZTBiOTI2MB4XDTIyMDEw
MTE1NTY1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmQ3NGJjMjg5Y2Qw
YTI1NTVkM2JlOGU1ZTc3ZjU4N2M5NDFiODVmYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKfJYOGHEhuYwYgCurG+ISoK7mMVmAQ3zJFMF3cC0Wezhvpa
xrfotMmtZAk9h6fvRGmRBkCrJ+t+4eB87Jc/aA1H5ospc2TjW/XE491SU/XQHa8K
NnllSaxIZxMvI8PFWwItf5LT4+3oLLnTp15jglyqYTIWpSZFD3IhJhFxK0zip4g+
Yu3BBZSkIs0BQA8pxUhm+TgrRmv2VgmMTWsa4tyv4kneb+qbHZCr4hQumz4kBX7E
sGNdra8KLhXByc3mEYZNAjKUMg6lR/lv7F4dkn484npVc1HNzt4U7v53NcqXLchT
gubMJpnTzeEbR4Ou0yq5UbZK2FgXw2kuOhRbYrsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQtdLwonNCiVV076OXnf1h8lBuF+jAfBgNVHSMEGDAWgBSxVQCcPeQhzE5n
uamuQjuzXeC5JjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NWVUFuRDNrSWN4T1o3bXBya0k3czEzZ3VTWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8x
L0xYUzhLSnpRb2xWZE8tamw1MzlZZkpRYmhmby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
ZGU5MDJjLTNkMTMtNDdkMS1hNWU2LTczODU2YWY0OWYzZS8xL3NWVUFuRDNrSWN4
T1o3bXBya0k3czEzZ3VTWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2CijANBgkqhkiG9w0BAQsFAAOC
AQEADZbYWnw9GE/YVKzpKkFHj6YhV9+5xMQeFVoCg0zR3dii19bT4MUQwRLG+H+L
P7novfXiMEGA/1C2l2qFPYlsJqWUQbCEyaeAeqG5QVQEga9Txy2MjR7+s251rgg2
Dhv3JClV6Qm/tI+TpqBnyGxBAvWLNDtYj8cYmtZU0RBz55wjxrMzPi4my1mQOgYd
SzoLGrnyUVPzWBn74rg6OlD3AyheCjRwdUdabA0SOGQHy2e03+xrYksDw/p9Y+ia
Cgee2K45U+p72GzmFE5Jiss1wjhC0+g8/ThC0NNtkwArRP6ZDGsr6jUD6mMyWmkL
u4EL8foM1xFt+rGsy+PL0mM3yg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org