Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/LF9G_M8DBg0pKPofx5GAzGXWMoc.roa
File: LF9G_M8DBg0pKPofx5GAzGXWMoc.roa (raw, json)
Hash identifier: Tyt3ISoexBHPZ4hrKpWeiLm1MWlq10Qf8NMjz0pIlkU=
Subject key identifier: 2C:5F:46:FC:CF:03:06:0D:29:28:FA:1F:C7:91:80:CC:65:D6:32:87
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 0183D483E39B87B5E3F880AE0F318BA12475
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/LF9G_M8DBg0pKPofx5GAzGXWMoc.roa
Signing time: Fri 14 Oct 2022 03:22:36 +0000
ROA not before: Fri 14 Oct 2022 03:22:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8211
IP address blocks: 145.72.108.0/23 maxlen: 23
145.72.108.0/22 maxlen: 22
145.72.110.0/23 maxlen: 23
145.72.120.0/21 maxlen: 21
145.72.124.0/22 maxlen: 22
145.72.120.0/22 maxlen: 22
145.72.94.0/23 maxlen: 23
145.72.94.0/24 maxlen: 24
145.72.95.0/24 maxlen: 24
145.72.96.0/23 maxlen: 23
145.72.96.0/22 maxlen: 22
145.72.98.0/23 maxlen: 23
145.72.100.0/22 maxlen: 22
2a02:cc4:2100::/41 maxlen: 41
2a02:cc4:2f00::/41 maxlen: 41
2a02:cc4:2f00::/42 maxlen: 42
2a02:cc4:2f40::/42 maxlen: 42
2a02:cc4:2f0::/45 maxlen: 45
2a02:cc4:2f0::/44 maxlen: 44
2a02:cc4:210::/44 maxlen: 44
2a02:cc4:2f8::/45 maxlen: 45
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d4:83:e3:9b:87:b5:e3:f8:80:ae:0f:31:8b:a1:24:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Oct 14 03:22:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c5f46fccf03060d2928fa1fc79180cc65d63287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:24:a5:39:5c:4d:29:8a:0a:61:7b:36:27:30:
d7:20:43:82:09:ae:62:12:fe:4c:18:3a:15:09:e1:
f1:5f:22:a2:35:95:cc:d9:cb:e1:c8:5f:7a:d3:fe:
e6:a3:18:93:93:48:dd:c8:a5:91:82:85:75:80:36:
14:76:a6:5a:f9:fd:f1:30:c4:17:6a:e1:e2:e6:b7:
1c:e7:67:c6:de:93:9b:c3:9d:cd:3e:b6:54:b2:c0:
10:7d:28:a6:5a:44:3e:6b:35:42:a4:2a:c5:ea:2b:
a3:4b:bf:db:62:9a:b1:64:1c:c8:cb:94:9d:ef:ed:
1d:2e:13:09:69:df:00:a3:5d:23:ea:b4:01:64:a7:
00:50:93:6a:4c:e1:06:06:56:dc:cf:1f:98:83:7e:
eb:68:57:52:97:58:2e:62:14:22:8f:c3:fb:80:94:
e7:83:27:4c:f0:a3:cf:f0:cb:4c:8f:30:db:eb:13:
bd:73:ee:9b:06:89:9b:83:ee:72:10:42:c0:17:b2:
ff:fa:b0:f8:82:b6:f3:c2:9d:08:4e:1c:2d:b4:e9:
d7:bb:8d:5f:33:91:44:e1:89:c7:50:dc:69:f2:4d:
86:d4:57:34:f6:8a:67:48:07:96:06:46:65:d3:c9:
4f:f4:4a:ab:c2:91:7c:76:e5:f5:1b:15:55:b7:e8:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5F:46:FC:CF:03:06:0D:29:28:FA:1F:C7:91:80:CC:65:D6:32:87
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/LF9G_M8DBg0pKPofx5GAzGXWMoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.72.94.0-145.72.103.255
145.72.108.0/22
145.72.120.0/21
IPv6:
2a02:cc4:210::/44
2a02:cc4:2f0::/44
2a02:cc4:2100::/41
2a02:cc4:2f00::/41
Signature Algorithm: sha256WithRSAEncryption
10:ed:2c:51:31:f4:b1:2b:57:f0:b1:1a:8e:95:f5:12:12:33:
d0:2c:cb:4a:2a:47:9c:dd:e7:11:aa:94:8b:b1:f6:23:5f:ac:
bb:0f:c8:52:6f:49:23:de:76:e8:60:f8:21:16:b9:28:be:55:
12:fb:a2:1c:6e:37:80:4f:7c:d9:0d:7c:c7:25:fa:a0:14:98:
7d:bc:7b:0f:17:22:7d:96:dd:00:07:61:b1:3f:21:fd:5a:8b:
c5:3f:dc:d3:bd:19:e2:72:02:86:a9:3a:73:84:63:1a:ce:b4:
66:dd:15:a7:18:e5:90:62:d6:92:80:d7:5d:fb:0a:82:a0:00:
a1:11:b7:8b:9a:59:9a:bd:0f:93:aa:0f:e2:7c:b6:8a:52:a8:
33:e4:10:74:a0:07:3e:1e:65:d5:ec:2a:1d:e3:70:62:88:d5:
a6:ba:92:8d:88:c3:55:3c:fa:73:cd:22:b4:2c:74:59:54:39:
7c:fc:90:79:7b:09:e5:0b:c9:80:09:91:8b:7b:af:a4:d0:ed:
2f:f7:7b:cb:30:db:94:5f:9d:86:51:11:e5:e0:72:2c:fa:33:
ed:5e:fc:0d:02:64:33:9a:20:20:9d:e4:2d:23:bd:0e:8f:2d:
ad:42:65:d3:1f:92:12:c7:d4:85:c0:12:8e:39:ba:d7:52:97:
1e:2a:f4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:50 2024 by rpki-client on console-ams.rpki-client.org