Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/LGK1dDrppQMAH7T555ebFSctyT8.roa
File: LGK1dDrppQMAH7T555ebFSctyT8.roa (raw, json)
Hash identifier: ILNm7HBLIWcfwpg/cZ2ld8+QmBLn+J3FLyKRziWeGi8=
Subject key identifier: 2C:62:B5:74:3A:E9:A5:03:00:1F:B4:F9:E7:97:9B:15:27:2D:C9:3F
Certificate issuer: /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial: 0184EED246EF5211E47DC625961FC1F26F4C
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/LGK1dDrppQMAH7T555ebFSctyT8.roa
Signing time: Wed 07 Dec 2022 23:01:08 +0000
ROA not before: Wed 07 Dec 2022 23:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58007
IP address blocks: 194.8.28.0/24 maxlen: 24
2a13:4380::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:d2:46:ef:52:11:e4:7d:c6:25:96:1f:c1:f2:6f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Validity
Not Before: Dec 7 23:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c62b5743ae9a503001fb4f9e7979b15272dc93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:e6:4c:72:71:7e:3b:08:e9:28:dc:a2:a0:
be:1f:16:37:7e:67:d8:aa:33:3b:54:13:08:63:e2:
22:de:8c:2e:f2:60:ef:4a:b9:d5:22:03:c3:dc:8f:
03:a3:22:0c:34:1a:e1:66:fb:4d:c5:da:3c:9d:e6:
ed:da:cd:8e:2e:e7:20:a1:81:6e:73:b2:ec:df:8f:
72:1a:9b:38:1b:1d:44:ae:24:68:a8:22:ac:64:06:
ef:3d:c0:23:ed:8f:8f:5f:f3:cd:b8:7f:1d:3e:c3:
f2:fa:cc:cd:4e:e7:6b:90:8b:8d:32:81:bf:d1:55:
05:2f:51:6a:f4:6c:de:c2:8a:9e:bd:07:e8:dd:16:
7b:73:30:2a:03:ca:d8:b6:d1:83:6a:ee:14:aa:aa:
df:6e:e3:f6:dc:65:49:8d:61:b8:7a:b2:9c:ce:99:
5b:77:f5:00:61:be:10:2c:2c:0c:88:60:61:ee:a7:
3c:7c:1c:67:63:ee:9e:73:a7:b8:4f:ce:4e:42:a7:
4b:a9:1a:9c:26:22:b9:82:c5:90:c7:62:96:f0:5f:
f7:3e:20:23:88:25:ee:52:7d:90:15:b4:17:e3:1a:
5f:fa:39:0d:e2:13:7c:b4:b9:ed:68:17:15:71:7a:
5d:c9:66:66:ac:74:23:6b:50:7a:d1:6d:a2:83:30:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:62:B5:74:3A:E9:A5:03:00:1F:B4:F9:E7:97:9B:15:27:2D:C9:3F
X509v3 Authority Key Identifier:
keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/LGK1dDrppQMAH7T555ebFSctyT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.28.0/24
IPv6:
2a13:4380::/29
Signature Algorithm: sha256WithRSAEncryption
0d:37:45:7d:70:d0:ef:99:52:d8:61:3c:54:00:2f:13:55:9f:
f2:d7:1b:7b:ad:94:e2:57:39:53:79:2d:d9:6b:45:0c:6d:7e:
d1:a6:26:78:78:0c:a7:4d:be:27:26:fb:71:3e:62:63:35:49:
98:59:3d:8c:16:4c:28:24:f8:6e:1b:f8:06:55:34:d8:8a:da:
1a:69:14:a3:dc:87:83:0c:30:55:63:ec:75:35:83:f1:97:69:
3d:7d:ca:59:9f:e1:cf:99:62:a3:9f:ff:0b:7d:0a:e1:7d:d4:
54:e2:f7:00:ca:d8:10:95:23:87:03:1d:a4:d8:0b:63:5d:f5:
88:f9:06:43:26:ea:28:e8:f5:54:bd:f2:f2:9d:d4:30:1a:aa:
2b:4b:c9:87:18:fc:3c:71:89:99:9a:79:09:b1:77:3e:e3:21:
35:72:a5:0b:9b:cb:8f:fc:7c:8c:63:20:9e:93:f8:43:35:b5:
49:88:fb:14:99:77:02:f9:5a:18:0c:d1:bd:a0:08:ef:b1:89:
b6:73:4d:0f:b7:05:94:70:21:8e:a4:13:1c:e7:45:ad:2d:56:
d0:b8:84:5b:8f:f2:09:33:e7:bc:81:88:b1:3e:60:5f:8d:de:
a2:5b:38:72:3f:9e:e2:26:f8:06:79:f3:dc:c7:7d:6d:d1:48:
d0:da:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:07 2025 by rpki-client