Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/LHXJkE3TlMbWeOu4fg2HJwMAvKU.roa
File: LHXJkE3TlMbWeOu4fg2HJwMAvKU.roa (raw, json)
Hash identifier: 9mAx7xSXgCtAQbelO0nO5Rw88MUGa2TnUnr1vI4H5lE=
Subject key identifier: 2C:75:C9:90:4D:D3:94:C6:D6:78:EB:B8:7E:0D:87:27:03:00:BC:A5
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 03D6A019
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/LHXJkE3TlMbWeOu4fg2HJwMAvKU.roa
Signing time: Sat 01 Jan 2022 11:54:45 +0000
ROA not before: Sat 01 Jan 2022 11:54:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15377
IP address blocks: 94.240.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64397337 (0x3d6a019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Jan 1 11:54:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c75c9904dd394c6d678ebb87e0d87270300bca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:e6:fd:f7:32:79:8d:dd:b6:6a:5b:04:0d:
91:e3:1e:39:9f:7f:89:24:b4:19:ea:91:9b:c7:14:
a6:17:21:5e:ba:ba:86:da:93:23:cb:cb:bf:10:32:
3e:1e:25:fd:16:44:80:b6:7e:93:61:89:10:a6:01:
fc:91:1e:6b:f5:6f:97:ec:99:79:1b:c8:46:f5:6a:
4c:53:f2:ed:2e:0e:28:a2:21:e9:c8:28:4a:9a:cb:
e6:e0:5e:00:e0:04:97:23:ae:cf:e1:17:08:82:13:
f5:fd:8e:39:c7:3a:14:8a:7e:d5:2d:21:f0:78:1a:
89:e7:31:b5:62:cb:27:d2:d8:29:05:fa:4b:e4:74:
85:50:22:c6:7b:60:ff:1e:53:27:cd:70:53:a8:ee:
71:ae:8c:44:e1:5e:6f:ab:56:87:e7:bb:bc:e2:4e:
78:97:68:4f:a9:1a:ab:21:80:2b:26:26:be:b0:92:
65:93:54:6c:3f:21:aa:64:83:27:20:fb:a9:e7:2a:
cb:dc:64:ba:50:cf:65:33:90:f4:43:16:f8:bd:78:
ac:64:e1:8b:56:4a:84:8a:f5:b4:dc:d7:07:6d:7b:
14:8e:97:e1:27:5d:a0:5a:48:17:c2:b8:bd:0a:70:
69:e3:20:56:ff:e1:28:a7:b6:77:c4:44:da:a5:97:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:75:C9:90:4D:D3:94:C6:D6:78:EB:B8:7E:0D:87:27:03:00:BC:A5
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/LHXJkE3TlMbWeOu4fg2HJwMAvKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:ac:02:0a:26:bc:c5:db:51:2a:a4:25:47:5e:b1:28:4e:cc:
20:77:14:08:4d:25:69:e4:62:03:94:7f:7c:ee:08:d5:16:9d:
ac:6e:42:19:2d:3a:15:fa:a0:fa:35:d0:b2:12:cd:0c:c2:fb:
0f:8c:bf:8e:24:8b:1d:2e:46:0d:3f:28:18:94:72:d8:d3:a0:
6e:52:09:b2:0d:78:21:a2:af:a1:a7:a9:c0:8d:48:07:13:c2:
db:3f:db:5b:e1:9d:07:78:ff:f2:69:fd:28:7f:9a:22:08:9c:
4f:66:e4:8a:b7:ff:9c:d5:d0:9d:00:85:48:b7:dd:3e:47:a2:
97:aa:9c:f9:1b:0e:67:d1:17:86:fa:c6:cc:28:8c:27:ab:f0:
a9:a0:80:3c:f3:05:5c:bd:0f:79:40:55:9c:17:80:b2:78:0d:
c2:27:85:47:9a:1e:9f:0d:e4:bf:e9:88:2d:a4:0c:c7:34:c9:
84:d1:01:00:14:9b:01:15:a7:da:6b:9a:6f:6a:ab:63:e0:9c:
28:52:e2:44:87:b5:aa:ce:3c:8a:82:40:9b:48:30:7b:52:69:
54:78:42:e7:c4:ce:a9:4c:e1:08:71:40:b8:fa:66:6e:af:ea:
ec:c2:3c:0c:bf:ba:ea:aa:23:76:e7:e8:16:c0:0d:03:f7:2f:
70:6d:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:31 2025 by rpki-client