Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LXjsH18ETYjo0dUfJGUsNBCuXIM.roa
File: LXjsH18ETYjo0dUfJGUsNBCuXIM.roa (raw, json)
Hash identifier: o46uxbR2Zef+rwpIE3paY2geIEoffXu7xhMShY6SGP8=
Subject key identifier: 2D:78:EC:1F:5F:04:4D:88:E8:D1:D5:1F:24:65:2C:34:10:AE:5C:83
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C591E86
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LXjsH18ETYjo0dUfJGUsNBCuXIM.roa
Signing time: Sat 01 Jan 2022 01:02:23 +0000
ROA not before: Sat 01 Jan 2022 01:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30860
IP address blocks: 87.120.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475602566 (0x1c591e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d78ec1f5f044d88e8d1d51f24652c3410ae5c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7d:c3:56:cc:28:5b:b7:14:e7:61:d0:e2:1a:
39:b2:c8:98:37:fa:2e:14:54:c0:d0:0c:ed:e4:fb:
b4:27:d3:a5:7c:97:4d:b1:bb:ba:6c:91:a2:16:7e:
b5:89:0d:01:12:e2:d4:54:3c:7b:01:06:6e:3f:4e:
22:13:d7:40:cf:d7:48:9d:d4:da:c8:7a:d7:ed:07:
f6:4b:0a:97:45:e5:c8:5b:8d:3b:06:3b:5f:a0:46:
37:5b:30:37:28:48:34:72:51:03:2a:9b:f2:68:06:
76:07:6c:97:08:3d:3b:ea:f0:84:7e:ef:94:90:16:
cf:0e:0c:77:57:dd:2e:df:cb:3e:74:b0:09:81:58:
0e:e9:34:4b:6c:3d:29:3b:65:44:31:22:f5:80:fc:
c1:3d:9f:44:4e:a8:ac:fb:b4:22:5c:fc:21:65:69:
b3:21:5f:a7:52:15:d9:b6:50:45:f6:6a:27:54:1b:
93:d0:b4:a7:13:f0:ab:f1:ce:5b:bc:86:17:84:f1:
89:91:4f:ec:83:23:ad:af:a0:f8:5e:46:6f:f8:72:
92:9d:38:12:10:54:0e:3c:91:39:0c:f8:cd:a2:a6:
f8:6f:e6:05:d6:a3:a6:b0:68:76:c6:b2:2d:33:2e:
9e:c9:ca:45:71:8e:ea:09:53:99:67:3a:c1:9a:89:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:78:EC:1F:5F:04:4D:88:E8:D1:D5:1F:24:65:2C:34:10:AE:5C:83
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LXjsH18ETYjo0dUfJGUsNBCuXIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.36.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:53:3c:d0:7a:6c:10:d3:dd:3b:6e:6f:e6:ca:0d:66:25:48:
cf:fc:82:e1:1a:a0:ab:e2:b1:2c:69:d7:92:fc:82:ce:cb:83:
3d:ad:4f:e1:a4:a8:42:69:ca:ff:9e:c4:70:59:48:f8:76:46:
f4:d3:a5:84:fd:b2:41:1d:2c:fd:c0:1c:e5:e0:63:1e:4a:0e:
41:07:ba:bf:d3:85:0b:57:9b:45:9f:9f:e4:ff:c4:c5:94:76:
d9:ef:8e:f4:6e:9a:88:e6:6b:bb:97:0a:c2:50:7c:62:ee:e5:
53:9a:1e:f3:e9:03:cb:05:33:96:bf:3e:9a:68:0f:0d:0b:4a:
7e:d0:d7:39:74:02:cc:60:86:ab:6a:8e:ad:99:0c:ab:ed:c7:
69:c6:95:fe:da:9d:07:73:a4:af:59:65:1b:d4:3b:56:f5:68:
a8:06:eb:e8:1d:55:7b:aa:ac:f3:da:46:6b:9a:7a:bf:52:cf:
26:c7:86:8f:73:ad:e0:7d:30:8e:f3:f0:3b:7a:7f:86:b1:6e:
0a:56:2c:ee:9f:bc:7f:6e:21:e2:d6:8b:af:48:52:81:77:5d:
a1:89:39:b5:e5:55:eb:5b:0e:1e:54:9a:a3:80:78:b2:e2:69:
c7:c8:bd:2f:cb:d0:e1:17:e2:9d:7e:28:7d:f0:d8:7a:7e:65:
3e:ef:64:64
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHFkehjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDEw
MTAxMDIyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmQ3OGVjMWY1ZjA0
NGQ4OGU4ZDFkNTFmMjQ2NTJjMzQxMGFlNWM4MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPd9w1bMKFu3FOdh0OIaObLImDf6LhRUwNAM7eT7tCfTpXyX
TbG7umyRohZ+tYkNARLi1FQ8ewEGbj9OIhPXQM/XSJ3U2sh61+0H9ksKl0XlyFuN
OwY7X6BGN1swNyhINHJRAyqb8mgGdgdslwg9O+rwhH7vlJAWzw4Md1fdLt/LPnSw
CYFYDuk0S2w9KTtlRDEi9YD8wT2fRE6orPu0Ilz8IWVpsyFfp1IV2bZQRfZqJ1Qb
k9C0pxPwq/HOW7yGF4TxiZFP7IMjra+g+F5Gb/hykp04EhBUDjyROQz4zaKm+G/m
BdajprBodsayLTMunsnKRXGO6glTmWc6wZqJ4bECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQteOwfXwRNiOjR1R8kZSw0EK5cgzAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L0xYanNIMThFVFlqbzBkVWZKR1VzTkJDdVhJTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFd4JDANBgkqhkiG9w0BAQsFAAOC
AQEADlM80HpsENPdO25v5soNZiVIz/yC4Rqgq+KxLGnXkvyCzsuDPa1P4aSoQmnK
/57EcFlI+HZG9NOlhP2yQR0s/cAc5eBjHkoOQQe6v9OFC1ebRZ+f5P/ExZR22e+O
9G6aiOZru5cKwlB8Yu7lU5oe8+kDywUzlr8+mmgPDQtKftDXOXQCzGCGq2qOrZkM
q+3HacaV/tqdB3Okr1llG9Q7VvVoqAbr6B1Ve6qs89pGa5p6v1LPJseGj3Ot4H0w
jvPwO3p/hrFuClYs7p+8f24h4taLr0hSgXddoYk5teVV61sOHlSao4B4suJpx8i9
L8vQ4RfinX4offDYen5lPu9kZA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org