Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/LMc-xulHsSP1whuzeEH1O35sieo.roa
File: LMc-xulHsSP1whuzeEH1O35sieo.roa (raw, json)
Hash identifier: rCx8EE+CLj9IBdVKO1XFLmy4R5oXpXbkoVCkeCn6PDg=
Subject key identifier: 2C:C7:3E:C6:E9:47:B1:23:F5:C2:1B:B3:78:41:F5:3B:7E:6C:89:EA
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 08B9300C
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/LMc-xulHsSP1whuzeEH1O35sieo.roa
Signing time: Sun 03 Apr 2022 20:31:00 +0000
ROA not before: Sun 03 Apr 2022 20:31:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62075
IP address blocks: 82.115.216.0/24 maxlen: 24
2a0e:c6c0::/32 maxlen: 32
2a0d:2d42::/32 maxlen: 32
2001:67c:18d4::/48 maxlen: 48
2a0d:2d45::/32 maxlen: 32
2a0d:2d44::/32 maxlen: 32
2a0d:2d43::/32 maxlen: 32
2a0d:2d40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146354188 (0x8b9300c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Apr 3 20:31:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cc73ec6e947b123f5c21bb37841f53b7e6c89ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:86:a5:1d:f8:31:30:3b:b8:07:1f:c5:3d:
f7:7b:db:37:fc:87:f9:fd:ba:5c:fb:3a:40:28:a9:
9c:37:06:e5:3f:7f:31:90:ad:20:77:af:7d:21:a0:
52:c5:a3:40:90:cc:e4:db:b5:6d:67:52:e6:a8:fe:
5a:d4:09:0b:88:b2:09:a7:d0:94:35:e2:58:db:a6:
3b:9d:2d:b6:b5:3a:98:89:9a:d5:0a:ad:4c:59:24:
17:0f:9d:aa:ee:cb:ea:85:99:c5:d7:8f:03:34:e8:
ed:d0:1c:fd:12:23:c5:52:aa:5c:3a:d7:84:5c:03:
32:b4:39:bf:cf:0c:4f:a9:98:9e:38:30:44:33:e2:
f5:11:cc:f4:49:a0:55:90:6a:84:6e:cb:4b:bf:c1:
55:32:d2:a2:12:a6:f9:10:1e:3e:26:57:87:29:09:
f7:a5:7f:3c:40:83:d1:fb:d1:fc:97:8b:40:7a:4e:
8c:ec:2a:f2:9b:d5:c8:d0:ba:39:7a:53:f5:39:8d:
73:0b:94:50:21:20:db:bb:0c:42:4d:52:89:84:6c:
7b:9b:24:8a:9c:dd:20:16:16:36:6b:3b:a5:23:25:
26:03:42:ee:83:63:8a:90:67:38:55:61:28:87:ac:
d8:56:98:9c:a0:6b:0d:c8:f2:5a:4b:0c:a9:4b:9c:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C7:3E:C6:E9:47:B1:23:F5:C2:1B:B3:78:41:F5:3B:7E:6C:89:EA
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/LMc-xulHsSP1whuzeEH1O35sieo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.216.0/24
IPv6:
2001:67c:18d4::/48
2a0d:2d40::/32
2a0d:2d42::-2a0d:2d45:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:c6c0::/32
Signature Algorithm: sha256WithRSAEncryption
83:53:72:c7:34:61:29:0a:77:8f:34:66:c5:f2:bf:9f:6e:3b:
2a:7e:3c:b4:71:04:1c:b8:bb:ff:6f:92:96:86:e4:7f:f6:0c:
4d:88:9d:f9:9a:57:0d:7a:ca:68:51:e5:da:bc:fc:5b:ad:3f:
c4:ca:69:b1:81:69:4c:4f:2c:f8:8d:b7:43:68:53:d1:30:85:
95:26:29:50:9a:21:d5:fc:f9:1e:f2:e1:8a:19:57:80:d6:7e:
f7:e1:04:c7:f3:84:40:e0:b5:5a:66:48:47:a4:24:48:2d:77:
46:c7:69:98:ca:71:15:16:35:6c:f9:69:8e:71:82:da:6a:4e:
6e:56:ea:ca:bc:7e:d4:17:fb:0e:32:09:34:a5:89:74:dd:5e:
55:a7:8f:c1:6c:54:81:60:fc:c8:68:d4:45:9f:31:66:c7:bc:
05:fc:5d:be:13:e8:34:ff:64:30:85:03:67:cd:36:9c:02:b6:
51:3e:e2:9a:b4:75:55:e0:df:4b:93:d5:22:9d:a1:fc:88:fe:
f9:58:6c:9a:b3:7e:2d:ba:e0:65:ea:fa:5e:0f:3d:2c:15:cb:
fa:a7:8f:26:1a:b7:97:76:5c:86:2f:57:23:78:d6:61:bd:fb:
c4:c2:0d:28:dc:23:10:28:6e:6e:f6:61:ec:2b:15:7b:a4:78:
9c:5a:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:00 2024 by rpki-client on console-fra.rpki-client.org