Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/15b08a-0299-401a-947f-69967100f868/1/LSvl-Gj8-pG5-a2gSk9h5DKkZ0Y.roa
File: LSvl-Gj8-pG5-a2gSk9h5DKkZ0Y.roa (raw, json)
Hash identifier: rCD8x8M31RyhKoYXoYGO24uUaYbyeFwhujWQkasEnCs=
Subject key identifier: 2D:2B:E5:F8:68:FC:FA:91:B9:F9:AD:A0:4A:4F:61:E4:32:A4:67:46
Certificate issuer: /CN=e4adcd7a10cea1b5bd27ac8582e7d8062620dae7
Certificate serial: B977E0
Authority key identifier: E4:AD:CD:7A:10:CE:A1:B5:BD:27:AC:85:82:E7:D8:06:26:20:DA:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5K3NehDOobW9J6yFgufYBiYg2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/15b08a-0299-401a-947f-69967100f868/1/LSvl-Gj8-pG5-a2gSk9h5DKkZ0Y.roa
Signing time: Sat 01 Jan 2022 09:06:28 +0000
ROA not before: Sat 01 Jan 2022 09:06:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15626
IP address blocks: 62.204.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12154848 (0xb977e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4adcd7a10cea1b5bd27ac8582e7d8062620dae7
Validity
Not Before: Jan 1 09:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d2be5f868fcfa91b9f9ada04a4f61e432a46746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:11:76:e7:5f:41:e7:44:39:1e:a1:c9:2d:
80:dc:97:65:9b:60:39:f4:e8:ba:62:94:5b:00:ce:
4f:41:13:ae:bb:ea:19:eb:be:9d:ea:12:9d:04:2b:
93:31:82:b5:e7:15:37:83:1d:e5:07:67:f2:14:5f:
d1:85:b0:c0:27:58:77:f0:d0:3e:56:5a:c7:98:f1:
41:89:51:df:99:85:7e:5f:52:b3:bc:ab:3b:39:c6:
a1:31:21:49:09:71:29:7d:84:a4:6d:06:21:4f:4d:
e9:c5:42:44:ef:d3:4d:d6:44:2b:b4:31:9a:28:55:
0e:f6:ec:ec:63:32:fe:c5:d9:95:ca:cf:11:41:fa:
fe:a2:68:19:8b:cd:da:0c:ac:2d:90:fd:0a:7b:24:
7f:af:eb:2b:fa:e1:97:80:b8:4a:8d:01:0d:8d:8d:
33:08:bf:58:49:4f:04:b2:2b:ff:14:35:ec:7f:ee:
8e:85:d5:a2:20:95:dc:27:59:bb:5c:47:79:c2:6d:
48:16:cb:4c:d1:14:7a:48:19:75:df:2c:78:c2:41:
4a:d7:fa:70:85:2d:55:31:a7:03:b7:70:ea:05:17:
a3:d6:74:b4:ad:07:bf:aa:76:bb:68:49:5a:20:61:
ad:fe:b5:d7:b6:ab:ad:a5:d3:2f:1b:de:f0:f5:3c:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2B:E5:F8:68:FC:FA:91:B9:F9:AD:A0:4A:4F:61:E4:32:A4:67:46
X509v3 Authority Key Identifier:
keyid:E4:AD:CD:7A:10:CE:A1:B5:BD:27:AC:85:82:E7:D8:06:26:20:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5K3NehDOobW9J6yFgufYBiYg2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/15b08a-0299-401a-947f-69967100f868/1/LSvl-Gj8-pG5-a2gSk9h5DKkZ0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/15b08a-0299-401a-947f-69967100f868/1/5K3NehDOobW9J6yFgufYBiYg2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.57.0/24
Signature Algorithm: sha256WithRSAEncryption
71:39:7e:b4:27:d5:59:db:ed:18:a5:51:0c:3b:44:79:17:18:
2e:4a:66:19:7a:bd:97:6f:82:1b:5d:d3:08:65:75:1a:d3:53:
8e:f5:ff:52:df:cb:49:b3:38:2c:06:1d:e6:66:d5:ae:f5:76:
01:d9:3a:29:09:f7:bf:11:65:2e:6c:06:72:59:d2:77:35:f2:
3e:ec:99:7e:fc:e6:e9:77:39:ba:dd:e4:43:40:d5:80:53:da:
08:60:69:a1:09:07:d7:9c:4c:c2:d0:a9:fc:8f:e2:9b:90:bb:
47:ad:11:7d:9b:e7:52:37:7b:35:07:8a:4f:cd:2d:d8:9e:ac:
6b:b4:10:21:44:50:bf:0d:99:7d:42:1c:a7:af:69:73:27:57:
8a:33:57:48:5a:0c:88:45:6e:4d:1e:c7:36:89:52:83:65:a2:
f0:cd:eb:2a:bf:7e:49:b3:b8:e7:20:51:59:9e:3d:99:78:d8:
09:c6:62:f0:2b:29:43:e6:86:16:a2:a8:c5:dc:24:a5:41:6f:
d1:3e:3c:44:be:a7:42:78:3c:db:31:1f:63:99:56:b6:8b:2f:
a3:4e:6a:c2:ee:70:18:d5:4b:d4:ad:e5:77:61:7b:54:8e:c0:
c6:c1:9a:ec:93:cb:62:ea:8e:ee:5f:6f:bb:08:04:b9:b9:7b:
98:70:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:55 2023 by rpki-client on console-fra.rpki-client.org