Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/lwTv-FcN03qC2YhLCVTSVjZjzYc.roa
File: lwTv-FcN03qC2YhLCVTSVjZjzYc.roa (raw, json)
Hash identifier: 4liKp1HfyqCSBiKjHZmSojven49wc2u8rRLmepeVK+w=
Subject key identifier: 97:04:EF:F8:57:0D:D3:7A:82:D9:88:4B:09:54:D2:56:36:63:CD:87
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 018BB5E8D6C4460314775919CA444A07C267
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/lwTv-FcN03qC2YhLCVTSVjZjzYc.roa
Signing time: Thu 09 Nov 2023 21:06:57 +0000
ROA not before: Thu 09 Nov 2023 21:06:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 185.23.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b5:e8:d6:c4:46:03:14:77:59:19:ca:44:4a:07:c2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Nov 9 21:06:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9704eff8570dd37a82d9884b0954d2563663cd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:68:4c:39:ca:58:9c:07:dc:5a:7c:a1:90:
fb:50:6e:ed:db:69:85:2d:a3:2a:95:f0:0d:a5:f6:
9f:ad:3a:da:52:ad:84:21:13:6d:88:60:22:e0:51:
04:49:ff:8b:d7:3e:e5:a6:42:9e:b4:59:5e:80:a6:
84:1a:77:81:bd:26:e8:a0:f6:94:5b:82:a3:a8:19:
15:ee:4f:3a:5b:c4:a3:b8:de:b5:73:b8:e5:cb:ff:
94:6b:8a:70:02:57:2f:77:e3:28:ff:8f:9d:fb:17:
f7:ba:0c:25:4e:e9:76:38:f7:07:37:30:41:f3:8c:
17:a3:cb:f5:57:10:cb:08:b9:e6:21:ec:23:23:88:
63:c1:bb:83:44:86:cd:4e:0c:14:63:ce:3d:e5:08:
69:23:4e:c2:2f:6a:c7:c5:ce:03:7b:85:cb:34:0f:
06:5a:a1:15:fc:a4:a6:11:e5:ab:13:3c:68:1d:8e:
0f:19:9c:be:6d:39:4e:c9:ef:bc:61:ed:eb:3c:3d:
78:72:0d:69:06:6c:98:26:8d:10:e3:4f:76:e7:2f:
82:77:89:e9:19:fe:a7:dd:ab:bc:7f:a3:8e:5a:14:
4a:c1:ff:24:8c:96:d5:d8:7c:fc:63:69:96:ea:16:
d0:5d:a5:d0:d5:49:18:d8:50:34:29:4b:84:f1:e7:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:04:EF:F8:57:0D:D3:7A:82:D9:88:4B:09:54:D2:56:36:63:CD:87
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/lwTv-FcN03qC2YhLCVTSVjZjzYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.72.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e2:20:b5:36:ee:ea:b9:15:7e:42:e0:32:1c:55:d9:45:e5:
ff:ed:36:aa:c4:c2:64:c5:a9:41:8e:49:a8:55:c4:60:5d:2a:
53:46:52:6c:04:07:45:49:88:ab:f2:fe:06:a7:53:09:0a:6b:
1a:f4:33:b1:6b:40:59:4b:fa:be:ae:a7:af:a6:a5:ca:02:62:
bc:34:57:8c:c5:25:f7:da:4e:8b:9d:bf:7f:11:4f:54:ca:bf:
7f:9b:7a:f4:5b:fb:5e:a1:82:7b:cd:db:5a:47:e6:61:09:4a:
ae:9f:40:94:14:c5:2c:0d:67:5e:99:a9:47:41:03:13:df:65:
31:a0:66:bf:17:ce:c3:f2:d8:91:40:b9:71:a1:c1:3d:d9:3a:
5a:08:79:99:62:8e:a4:0f:fa:c2:c5:a1:3e:18:a5:d7:9a:5f:
55:70:63:3f:2c:52:18:3a:3f:73:a2:b3:5a:ed:ec:f4:df:a1:
92:cf:b0:0d:82:a3:51:8f:6e:55:49:f8:7d:90:35:19:01:55:
46:46:d5:4c:f8:75:b5:63:65:6f:6e:d8:b1:d7:fc:e6:b1:c0:
b7:00:0a:62:e4:3d:9f:dd:bc:8d:cb:eb:70:a9:cd:eb:5a:52:
ee:c9:86:0f:0d:c3:94:0a:9f:ef:5d:70:e9:22:cd:2b:ac:79:
32:e7:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:04 2025 by rpki-client