Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/LWV-G2fd3Ft14K1sR5SCyfqu3qg.roa
File: LWV-G2fd3Ft14K1sR5SCyfqu3qg.roa (raw, json)
Hash identifier: h31EGH/2Dxd2QoSzxfy1mRfzzvy2XiLNG1sqhl7SJsI=
Subject key identifier: 2D:65:7E:1B:67:DD:DC:5B:75:E0:AD:6C:47:94:82:C9:FA:AE:DE:A8
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1B73BD9B
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/LWV-G2fd3Ft14K1sR5SCyfqu3qg.roa
Signing time: Tue 15 Mar 2022 13:02:00 +0000
ROA not before: Tue 15 Mar 2022 13:02:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460570011 (0x1b73bd9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Mar 15 13:02:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d657e1b67dddc5b75e0ad6c479482c9faaedea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:98:e0:38:e1:98:67:5d:1b:74:dc:88:ff:
36:ea:d4:52:3e:38:32:24:0e:16:d9:d1:07:62:c2:
a3:ea:08:20:01:2a:53:e4:27:d1:30:56:f5:a5:6a:
c1:dc:63:fd:29:85:5a:45:ac:25:18:cd:46:d1:36:
f4:18:aa:f3:29:b9:17:1c:7c:7d:36:87:d4:1e:92:
eb:f5:b4:ca:7b:a8:10:03:6a:01:e5:37:e0:44:87:
57:30:ad:fd:b0:bb:e5:5f:b9:1f:d1:1b:3f:91:90:
56:b5:b5:99:b3:9d:d2:99:17:ca:d3:94:02:32:f8:
50:4e:fb:81:1d:cb:f9:bc:17:33:f9:1a:54:71:04:
82:0c:ce:c7:c9:14:3a:38:a3:fb:96:d8:0f:8a:7f:
7b:6e:c5:2c:f2:79:7c:34:7a:e3:ab:1c:de:fc:b4:
af:65:3c:44:14:18:c6:13:f8:0e:f2:06:0c:4f:36:
84:71:aa:67:2a:40:a5:da:b1:14:4a:09:48:61:85:
98:75:29:55:7e:97:f8:82:45:28:51:2f:e4:61:0a:
59:87:1d:06:d5:61:e5:fc:74:f9:7c:5b:26:7a:e1:
eb:8c:79:a3:4f:ae:2b:d1:d6:a1:6e:ea:49:6e:68:
eb:f2:b0:e9:c3:5a:92:46:1e:5e:b8:1a:15:5c:0c:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:65:7E:1B:67:DD:DC:5B:75:E0:AD:6C:47:94:82:C9:FA:AE:DE:A8
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/LWV-G2fd3Ft14K1sR5SCyfqu3qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/24
87.248.158.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f7:72:72:8f:4f:9a:a7:2b:3e:81:80:78:5a:15:45:61:82:
94:00:5b:5c:78:c3:64:bb:c8:6d:db:bf:50:39:56:82:62:5d:
51:0b:0d:f0:9c:0e:17:3a:63:78:00:31:c8:04:21:59:c2:60:
5a:39:05:60:c0:d5:69:f9:f7:7d:71:1e:bc:5e:92:27:dc:bd:
19:b0:d5:12:23:61:d3:ea:3d:66:15:49:d6:76:5f:55:f2:46:
31:60:a6:0b:a8:a9:dd:54:9a:4d:dd:04:2b:b1:b7:d2:d7:15:
13:6c:04:38:9d:d9:09:9a:3b:7b:00:4c:9f:8b:67:64:87:01:
9a:19:ce:56:fb:69:37:0b:e5:c3:a3:9e:6a:03:42:c0:01:68:
d1:f5:c6:62:81:ae:72:58:14:ab:47:7b:d1:83:a8:fe:82:a8:
45:20:b5:04:fc:07:bb:53:97:7c:5c:15:57:fd:3b:7b:14:2f:
7d:e9:63:bf:75:8f:f7:d0:1d:17:fe:3a:3f:7c:6d:85:fe:96:
01:b3:5d:b2:8f:6f:30:3a:3d:76:ef:92:e8:7d:68:cc:0f:9e:
a9:94:fc:41:bd:3d:fd:31:a3:2c:7b:4f:80:2c:3e:f8:1e:8d:
a6:fb:f4:18:9b:a7:50:dd:8f:ec:c3:4f:1c:85:65:a3:62:a0:
f6:a3:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org