Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/LkbpqWaAaABUK-PdMu1Wrad61sU.roa
File: LkbpqWaAaABUK-PdMu1Wrad61sU.roa (raw, json)
Hash identifier: 6ZUFDLExv8PnNBrw9oSIUBSw2K87F51H7JWqNmUzdmw=
Subject key identifier: 2E:46:E9:A9:66:80:68:00:54:2B:E3:DD:32:ED:56:AD:A7:7A:D6:C5
Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial: 018446E1BD59D7C62DDADC98E56D5A31A3C5
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/LkbpqWaAaABUK-PdMu1Wrad61sU.roa
Signing time: Sat 05 Nov 2022 08:21:49 +0000
ROA not before: Sat 05 Nov 2022 08:21:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42073
IP address blocks: 194.169.233.0/24 maxlen: 24
194.102.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:46:e1:bd:59:d7:c6:2d:da:dc:98:e5:6d:5a:31:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Validity
Not Before: Nov 5 08:21:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e46e9a966806800542be3dd32ed56ada77ad6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:70:2e:6f:52:06:21:41:33:7b:d0:da:69:5b:
d7:6c:50:98:3b:4c:ae:3a:9c:36:21:d7:d7:47:97:
d5:bb:a2:14:53:da:db:93:a6:36:e6:99:4b:59:24:
3f:a5:c8:6c:52:9b:bb:b5:2b:3b:5f:88:91:65:fd:
00:c8:ac:80:37:fa:25:15:7e:db:8f:c3:f1:5e:08:
95:81:a2:25:2c:48:4d:31:c9:98:25:4f:b4:f3:03:
cb:74:62:18:73:da:21:0e:cb:a0:75:db:22:18:f1:
af:ca:fd:e8:16:ee:bb:a8:f4:db:54:f3:f5:d0:d6:
19:ec:76:41:d0:e0:e9:c9:19:6f:34:0a:64:d4:db:
c1:de:01:f6:f7:60:0e:f6:d2:98:e8:5f:ee:75:54:
ca:02:3c:c7:48:a4:07:f0:30:5d:6d:c5:5c:c3:41:
3e:97:ee:22:54:a2:8a:d0:2b:29:71:08:7b:5a:aa:
23:06:e1:23:1b:3c:cd:1b:4e:6a:b3:dd:ca:f5:d5:
d4:ec:bc:e9:e2:fc:7f:66:31:aa:ba:5d:58:a1:5d:
77:60:f2:ea:6b:e2:6d:08:10:ba:ae:42:0a:57:30:
62:d4:e3:43:c6:c4:fb:7a:be:61:16:2a:5b:28:c6:
c8:b2:bd:2c:40:06:7f:2d:bb:7b:b3:e8:2e:ab:34:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:46:E9:A9:66:80:68:00:54:2B:E3:DD:32:ED:56:AD:A7:7A:D6:C5
X509v3 Authority Key Identifier:
keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/LkbpqWaAaABUK-PdMu1Wrad61sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.202.0/24
194.169.233.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3d:c7:b2:60:ea:bf:52:d0:b8:b2:1b:0d:61:51:76:a9:e3:
35:cd:1e:8e:12:d4:4e:b5:4c:e2:9d:f3:2a:05:2e:e4:09:88:
12:1f:77:d8:11:fe:6f:47:30:1c:6f:b5:19:24:90:03:10:41:
17:b0:3c:63:d3:2c:95:b3:fe:c5:5c:e8:d0:9d:08:be:a9:f1:
a8:7f:ab:62:d6:ca:8e:19:7b:65:8f:8f:ad:bf:c5:a0:04:5e:
92:b6:04:52:02:2c:b5:9a:c0:17:7d:1d:68:43:ac:6c:4b:ad:
13:4e:9a:9c:ff:d4:89:10:09:9b:1b:c5:47:7d:c3:ac:60:ed:
7a:ac:f4:4c:9e:1e:79:5a:d0:cd:b5:81:42:4f:50:a8:34:75:
1b:80:20:b8:50:e8:f7:8a:70:29:a6:7c:f7:7d:9e:38:b7:42:
55:a6:67:27:3e:4a:69:17:af:e7:59:37:80:53:bd:1f:e7:ff:
ac:4f:25:c1:12:ae:81:8b:39:da:19:af:2e:57:68:9a:93:11:
12:7a:be:82:b2:54:64:88:fc:4b:8d:ba:5c:d4:21:ae:85:f0:
e1:89:6a:7b:63:ee:78:b4:c2:e5:ee:a8:f0:e7:24:24:b7:2e:
df:d8:b6:af:75:17:ca:da:cc:0e:ee:dd:57:7f:63:5d:b7:48:
5d:a9:2e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:17 2024 by rpki-client on console-fra.rpki-client.org