Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/LZ-cFrpbBymXUAyRF7SsXL-K-fc.roa
File: LZ-cFrpbBymXUAyRF7SsXL-K-fc.roa (raw, json)
Hash identifier: ppnIrCMJ3PJo8aTFrK8EWczOtkA2ROPDCcZh1viKxDA=
Subject key identifier: 2D:9F:9C:16:BA:5B:07:29:97:50:0C:91:17:B4:AC:5C:BF:8A:F9:F7
Certificate issuer: /CN=e8477159d65b22568098b95952487300771b3ce5
Certificate serial: 01846C2DF9BF20C15308FAFAF1954242C308
Authority key identifier: E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/LZ-cFrpbBymXUAyRF7SsXL-K-fc.roa
Signing time: Sat 12 Nov 2022 14:11:03 +0000
ROA not before: Sat 12 Nov 2022 14:11:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208171
IP address blocks: 2a12:8d40:1024::/48 maxlen: 48
2a12:8d40:2022::/48 maxlen: 48
2a12:8d40:2048::/48 maxlen: 48
2a12:8d40:4096::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6c:2d:f9:bf:20:c1:53:08:fa:fa:f1:95:42:42:c3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8477159d65b22568098b95952487300771b3ce5
Validity
Not Before: Nov 12 14:11:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d9f9c16ba5b072997500c9117b4ac5cbf8af9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4b:86:19:b1:1d:de:90:1b:a8:a0:4f:6a:ad:
5d:c8:d7:40:51:6f:c4:5f:85:67:80:83:9a:ed:c7:
6c:6b:ed:30:19:73:73:fe:fc:bf:8b:2c:5b:ab:01:
45:27:e3:58:10:f6:2c:9e:e7:22:46:28:1a:a0:58:
fa:b2:d2:79:1a:ef:c4:32:a6:1f:80:3a:3c:30:e2:
28:dd:c9:d8:e3:90:ff:66:23:89:69:22:df:18:db:
f6:2a:21:2d:22:cb:88:6f:10:48:6f:8b:bd:9f:1e:
79:16:93:05:47:c5:0d:67:32:34:88:57:8d:bb:9e:
ed:97:c8:82:7a:de:7d:7b:f2:78:d8:eb:b3:7a:16:
93:f8:5b:8b:ea:3f:05:97:69:1e:74:15:a5:94:ad:
ad:ca:44:00:19:70:76:ef:bb:ab:3e:a0:92:d0:bd:
47:82:12:ba:6f:b8:b9:b8:9a:03:f8:91:7a:bd:c8:
db:63:0d:a1:5c:da:94:9f:a7:21:eb:2b:d1:d4:6d:
cf:3a:ab:23:6c:6a:af:be:6b:c1:40:6a:e3:da:a7:
e1:b8:bc:21:8b:c2:5c:3a:2b:17:05:13:0e:8f:63:
d3:0a:6f:10:0b:07:55:9e:98:7f:bd:e4:6e:42:be:
11:be:6a:42:4a:d8:9d:1c:ee:94:15:a5:59:a7:ac:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9F:9C:16:BA:5B:07:29:97:50:0C:91:17:B4:AC:5C:BF:8A:F9:F7
X509v3 Authority Key Identifier:
keyid:E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/LZ-cFrpbBymXUAyRF7SsXL-K-fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8d40:1024::/48
2a12:8d40:2022::/48
2a12:8d40:2048::/48
2a12:8d40:4096::/48
Signature Algorithm: sha256WithRSAEncryption
8f:0a:7b:9d:0f:f1:1d:a3:e9:2f:a3:37:33:4c:fc:53:a4:24:
d6:1d:3e:57:18:4a:97:35:b0:e2:98:bd:0f:b5:6b:3a:cb:d5:
1e:1a:0f:11:3f:cf:ac:00:3b:0f:64:44:b4:6c:57:5f:91:23:
6d:13:6a:55:a9:95:6f:9e:42:62:03:d9:87:6c:94:1e:ad:c7:
68:16:06:9d:61:35:19:56:6d:6a:e0:db:3c:fa:8d:f8:d3:15:
72:f1:d0:c7:c3:b1:91:6e:de:5e:c2:48:4f:c3:c7:e2:83:0b:
08:ee:00:54:5c:9b:3c:b1:ff:a6:7d:cf:11:79:ce:6a:21:dd:
79:59:74:ac:c8:5b:54:d6:ff:ef:d8:99:5b:b8:64:f7:4c:a6:
08:3a:83:a7:89:85:33:d8:c8:38:ae:4a:80:26:e9:49:5f:89:
79:06:85:58:22:9b:0f:6d:e2:80:3c:54:fc:fa:96:dd:9f:36:
32:52:f5:5b:cd:e2:61:6a:8f:04:f7:10:b7:8e:25:f3:1a:ec:
4d:cb:69:56:29:9c:c8:52:e1:f8:e2:17:35:a2:a2:04:bf:4a:
35:d3:83:a9:49:d6:63:7a:9f:b4:d2:65:cc:ae:8b:49:a3:01:
11:ce:24:3e:e9:50:39:17:b0:c2:75:3e:1d:33:da:c3:3d:82:
91:c2:a7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:16 2024 by rpki-client on console-ams.rpki-client.org