Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ljCFI_-G26Kz-L4JEHGQlXxhgwY.roa
File: ljCFI_-G26Kz-L4JEHGQlXxhgwY.roa (raw, json)
Hash identifier: mygJhJ+6WmoA2dSb9wnM6/FClmqRG5ORCZ9f4aOP5xQ=
Subject key identifier: 96:30:85:23:FF:86:DB:A2:B3:F8:BE:09:10:71:90:95:7C:61:83:06
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018BC99A23523B04265DF72C2FECD54078B6
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ljCFI_-G26Kz-L4JEHGQlXxhgwY.roa
Signing time: Mon 13 Nov 2023 16:53:23 +0000
ROA not before: Mon 13 Nov 2023 16:53:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19762
IP address blocks: 194.69.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:9a:23:52:3b:04:26:5d:f7:2c:2f:ec:d5:40:78:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 13 16:53:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96308523ff86dba2b3f8be09107190957c618306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c2:82:59:b4:17:b3:94:91:b7:97:86:c7:9e:
85:4c:e8:ce:b3:78:ff:a4:69:b7:fd:15:6d:cf:6a:
27:f3:37:b6:20:29:ad:ae:a0:6b:79:b3:d4:ae:8c:
a6:94:4d:7c:e9:f4:fb:83:ea:63:79:d7:87:b0:4c:
b1:37:ff:93:6d:57:c5:1d:5e:99:93:02:f1:03:74:
3a:63:10:24:25:08:b2:ac:1f:58:00:29:a9:12:39:
13:4a:29:d8:d1:0b:23:3c:f5:42:7d:92:ac:6c:d3:
94:71:96:71:37:8b:97:0b:b6:5f:ac:7d:2f:7e:c0:
ed:f0:8c:01:3d:7c:74:71:97:cb:e7:87:ad:76:6e:
9f:1f:54:bd:20:58:5f:5e:29:42:4f:9b:aa:3f:23:
47:fe:2d:5f:7b:0c:93:27:b2:80:97:d6:36:77:7c:
07:9b:d0:76:01:7a:19:20:e7:5d:b3:06:f3:36:68:
52:4e:ad:6b:33:f1:5e:f3:3f:a1:33:94:1d:b3:d1:
75:86:0e:79:0b:9d:99:12:97:63:5f:a5:b8:87:f6:
0a:54:c6:3e:27:f1:f6:59:86:4d:af:ae:e4:55:12:
30:0d:87:30:a0:ba:19:ad:47:16:2e:77:e6:66:98:
92:eb:13:f0:7f:63:d8:1a:9c:aa:4d:c8:df:25:4b:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:30:85:23:FF:86:DB:A2:B3:F8:BE:09:10:71:90:95:7C:61:83:06
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/ljCFI_-G26Kz-L4JEHGQlXxhgwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.160.0/24
Signature Algorithm: sha256WithRSAEncryption
12:89:93:0f:00:4e:43:94:e4:aa:4f:79:b2:52:5d:a9:3d:56:
93:cc:62:fe:ed:1f:d8:91:9f:38:e3:05:61:54:c7:87:2f:a0:
ac:c1:a3:74:20:eb:a1:50:6e:67:3c:57:70:95:5f:64:03:dd:
7f:dd:a3:de:9a:e8:61:0b:83:28:b1:73:b8:aa:db:0d:73:70:
29:2a:38:b2:9e:aa:f9:4c:3c:56:e0:d3:68:b7:86:14:23:e4:
d7:b3:30:16:17:a7:d8:6e:75:e3:1d:59:37:20:d6:38:e8:61:
32:e2:fd:34:3f:fd:9a:51:03:69:81:73:03:73:db:8e:06:98:
57:e8:28:fb:18:ab:1d:89:c0:c6:80:1e:98:fa:17:40:e2:da:
93:5e:67:26:db:2e:79:4f:ac:a1:42:f1:6a:29:9c:55:7d:4a:
dc:b2:75:5e:41:c8:ad:43:2e:de:e6:2f:1f:21:76:e4:5a:02:
f3:6a:f7:78:4b:43:60:29:5c:d9:a8:37:af:b1:af:be:cc:97:
e7:0c:5b:cd:b0:e5:b2:ec:1a:a6:83:53:f7:dc:8e:8b:48:02:
3e:1a:1b:0d:ee:d1:ce:a2:93:23:7d:48:6f:9f:ed:ea:8c:cf:
fb:bf:0c:e2:3b:42:5b:4a:12:34:ba:e9:62:43:db:56:7b:03:
bf:c0:4f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:08 2025 by rpki-client