Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/LJmwOsumk4MOr_DvB66_4uuyIT4.roa
File: LJmwOsumk4MOr_DvB66_4uuyIT4.roa (raw, json)
Hash identifier: Dge8657XWK0nKxO5eNZA6eXnB1/m6bmzcrdylIBQvJQ=
Subject key identifier: 2C:99:B0:3A:CB:A6:93:83:0E:AF:F0:EF:07:AE:BF:E2:EB:B2:21:3E
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 0184CE00F86087962248C45D3F07D42DAC37
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/LJmwOsumk4MOr_DvB66_4uuyIT4.roa
Signing time: Thu 01 Dec 2022 14:04:40 +0000
ROA not before: Thu 01 Dec 2022 14:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201115
IP address blocks: 45.157.175.0/24 maxlen: 24
2a13:3840::/47 maxlen: 47
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ce:00:f8:60:87:96:22:48:c4:5d:3f:07:d4:2d:ac:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Dec 1 14:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c99b03acba693830eaff0ef07aebfe2ebb2213e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f0:eb:c4:a6:ed:33:d4:db:f7:59:29:c3:43:
9e:0d:e6:85:89:b5:be:9c:bd:6b:a4:89:15:bb:84:
a7:7a:1a:f0:ae:59:01:91:07:e3:ee:1c:17:11:fd:
2b:94:d9:a5:45:db:15:7a:09:c8:a8:f9:31:65:ce:
ef:8e:93:60:87:09:55:8e:6c:ff:83:32:84:02:5b:
02:ef:e2:16:a5:dc:40:16:cd:75:32:78:bc:1f:52:
c7:a7:f8:b9:af:f4:e6:5b:d1:51:60:55:3a:11:a5:
3c:f7:d6:1f:fd:a8:67:7f:07:eb:bd:40:06:04:93:
b6:05:97:cb:13:05:69:3b:1f:71:30:fa:4d:d3:a3:
d2:99:c4:25:67:ee:c0:c6:6e:2d:1e:c1:04:5d:60:
8d:09:77:fe:53:8c:24:76:3c:2b:9f:e5:a7:2a:4a:
e7:57:62:a6:26:30:f1:72:0f:5f:ad:80:e5:95:17:
de:c9:4a:77:82:f7:18:6e:92:91:c2:58:d7:3d:0c:
9c:23:8b:55:9c:93:0e:f3:30:34:6c:22:31:24:3d:
41:e6:60:9c:23:8c:37:07:f1:73:23:bf:32:89:0f:
a1:c8:be:85:a5:8c:26:89:13:4d:86:69:e4:51:b3:
3d:c7:47:49:e7:74:03:b3:b3:ea:c9:31:73:7b:80:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:99:B0:3A:CB:A6:93:83:0E:AF:F0:EF:07:AE:BF:E2:EB:B2:21:3E
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/LJmwOsumk4MOr_DvB66_4uuyIT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.175.0/24
IPv6:
2a13:3840::/47
Signature Algorithm: sha256WithRSAEncryption
2c:af:a5:26:a8:0c:e1:56:9f:f8:27:bb:9e:35:a7:01:c1:b9:
b0:c9:e0:8d:c6:98:59:f3:93:e1:7c:71:f3:c0:5b:c3:5d:e1:
2e:db:05:1f:8d:9c:ae:eb:ad:17:80:02:50:e3:08:ee:ba:ba:
fd:a4:89:32:db:e8:f2:d5:ce:c4:84:d8:10:eb:37:0d:74:4f:
5a:e6:38:6e:18:f3:db:64:e1:98:ab:c9:7c:13:ff:24:e4:70:
18:d6:7a:46:7b:52:5c:1d:49:cd:75:69:e1:ca:53:65:e6:0c:
5f:34:84:58:1e:43:e7:75:c6:ce:23:1c:cc:90:ab:1e:19:a9:
b4:93:01:e5:f2:32:f7:4b:40:01:c2:33:f5:3d:72:89:f7:c8:
29:f0:46:1a:66:f2:d1:4e:31:1f:e5:72:82:f5:f5:32:12:ef:
14:3e:4c:2b:21:68:d5:b4:ed:2a:c9:dc:a3:3f:18:a3:9f:00:
bf:9e:d8:ab:13:ff:6c:56:1d:fa:30:59:20:f0:8f:1a:1f:8e:
5f:53:c6:c5:30:3e:fe:d8:ff:39:78:78:6a:ec:3c:05:ef:9d:
a0:88:e0:16:c9:d8:21:23:36:4f:fd:bc:f5:a7:35:f0:c5:48:
d4:8a:55:03:d0:05:49:87:f7:11:0a:64:36:d5:1f:02:34:7c:
b0:f8:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:19 2025 by rpki-client