Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lfDf_GtkOHpwcMG-1KrOUEtyWVI.roa
File: lfDf_GtkOHpwcMG-1KrOUEtyWVI.roa (raw, json)
Hash identifier: imVBPPvHgoEmoQAuZ6iu0Wuspd5dlbGirOeaTTUijz4=
Subject key identifier: 95:F0:DF:FC:6B:64:38:7A:70:70:C1:BE:D4:AA:CE:50:4B:72:59:52
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0182E998603202B016193FA8DDB2E74FD194
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lfDf_GtkOHpwcMG-1KrOUEtyWVI.roa
Signing time: Mon 29 Aug 2022 12:34:13 +0000
ROA not before: Mon 29 Aug 2022 12:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9199
IP address blocks: 81.180.64.0/20 maxlen: 24
81.180.84.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:98:60:32:02:b0:16:19:3f:a8:dd:b2:e7:4f:d1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 29 12:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95f0dffc6b64387a7070c1bed4aace504b725952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:9a:ad:d6:e4:9d:73:88:ee:1c:92:a1:9f:
04:b0:1c:dd:cd:cf:03:03:39:3b:4a:3f:a4:af:a7:
c6:e7:95:19:ea:58:e4:d1:4f:4f:60:1b:f1:cf:e2:
fb:c0:c1:03:3c:02:a4:33:69:7d:c5:e3:4f:ec:eb:
8c:75:48:38:48:c8:d3:36:a2:d4:c7:4b:24:89:da:
55:34:9c:82:e3:e2:7a:b1:60:67:33:c6:93:b2:73:
ca:26:8e:5c:9e:76:d7:2b:81:28:fc:81:a1:d5:ba:
07:93:7c:55:af:4f:3f:a8:9d:fe:ff:e3:e3:97:75:
2f:bd:40:b6:2e:8c:dc:4c:d1:f3:78:5e:a2:8e:dc:
6d:e3:59:5e:fd:d2:fb:9a:ba:74:41:bd:69:e9:5a:
e8:73:2a:bd:fe:95:f7:01:a6:bd:66:73:64:e4:7b:
06:57:ad:8a:7e:e5:4e:51:c5:3a:bc:5d:bd:90:25:
1f:f8:37:b7:89:4c:0d:45:dd:6d:44:e1:9e:92:3f:
cb:a6:2c:64:5f:c7:75:4d:76:9a:68:7f:46:ab:0e:
61:33:35:ea:45:b4:51:a1:6b:3e:fe:50:3e:d9:9e:
1b:89:a5:00:fa:59:a2:b4:34:de:05:3c:a5:2c:37:
a8:1b:0f:08:3f:71:27:cc:da:6a:ff:e4:d5:fa:ab:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F0:DF:FC:6B:64:38:7A:70:70:C1:BE:D4:AA:CE:50:4B:72:59:52
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lfDf_GtkOHpwcMG-1KrOUEtyWVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.64.0/20
81.180.84.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:14:39:7c:a7:4d:0a:de:a4:6f:bc:98:3c:e9:e6:47:cc:f5:
44:36:d4:d7:68:a9:52:35:ba:70:65:5e:5b:79:ed:2a:7a:0c:
3c:b2:cc:71:95:32:47:2a:1b:05:3a:3d:75:80:f6:d8:41:24:
ac:74:a4:7a:ef:4f:52:5a:0f:8b:c1:09:2b:a5:ea:ee:f3:5a:
c9:9b:a6:78:67:ab:16:7b:f1:8e:e8:96:63:35:fd:09:84:a9:
01:61:50:02:aa:6d:a3:4d:a6:c9:48:f0:c0:9b:0b:66:09:a6:
33:49:c9:1b:80:44:f5:6d:20:82:12:0b:9d:29:e5:8d:c7:88:
ee:2c:9a:b5:28:84:d4:41:cb:97:ac:ab:c6:da:4e:a6:6f:45:
57:b0:29:70:39:0a:d5:d4:df:8c:3b:c2:f6:a5:71:6a:9e:13:
ba:dd:91:a9:b2:53:c8:db:b4:3d:15:04:0b:32:c4:27:13:33:
48:90:ed:d9:99:6f:4c:d5:57:bb:38:19:b4:bf:6a:e4:26:2f:
c7:b8:90:0c:17:ef:e3:e6:26:17:aa:18:65:77:55:04:8f:87:
75:11:94:02:1b:ce:eb:56:82:45:00:b5:6e:52:0e:6f:81:de:
e3:0a:34:0d:c9:d6:4e:f9:46:3d:09:7c:04:33:dc:c9:d9:12:
65:8f:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org