Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/LdXT_EvHmxID3vfrhq1S8UA3VDw.roa
File: LdXT_EvHmxID3vfrhq1S8UA3VDw.roa (raw, json)
Hash identifier: 8z8mPjpqMW6cVmEKIsr93577zSGdhqCnfCTj7aYt2Ak=
Subject key identifier: 2D:D5:D3:FC:4B:C7:9B:12:03:DE:F7:EB:86:AD:52:F1:40:37:54:3C
Certificate issuer: /CN=000d0fee2cd566965ca08db550663cb20b412343
Certificate serial: 01856DAF586958C67ACED37FC7A43B2E65C2
Authority key identifier: 00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/LdXT_EvHmxID3vfrhq1S8UA3VDw.roa
Signing time: Sun 01 Jan 2023 14:14:46 +0000
ROA not before: Sun 01 Jan 2023 14:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208623
IP address blocks: 83.138.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:58:69:58:c6:7a:ce:d3:7f:c7:a4:3b:2e:65:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000d0fee2cd566965ca08db550663cb20b412343
Validity
Not Before: Jan 1 14:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dd5d3fc4bc79b1203def7eb86ad52f14037543c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:ed:ec:b8:51:0c:b3:fd:5b:a1:a1:32:3b:
11:e7:a5:06:31:dc:25:9d:3c:62:43:71:f4:e2:98:
bb:a6:ca:36:20:74:aa:5f:3e:f1:db:a3:52:15:24:
50:1f:a9:e8:a5:90:3e:0f:82:5a:02:81:b0:f5:77:
e6:3b:70:4d:36:6e:18:44:a8:27:55:e5:73:39:7b:
e2:40:66:29:d3:12:55:d8:e5:a9:0d:7a:f1:90:64:
f7:e7:29:31:40:be:83:02:29:d3:66:49:b6:a5:a3:
9a:a8:ca:0f:31:aa:71:cc:b9:fe:71:e3:59:b9:5e:
72:e9:bf:35:44:fb:0d:35:67:3f:13:11:81:6b:b7:
72:24:c0:10:f3:47:3b:60:69:77:2b:82:f3:27:a4:
7d:ae:0b:5d:80:b9:f8:f1:c9:58:a9:13:24:3c:f6:
c8:3f:2b:ea:8c:f0:f5:e6:eb:34:23:5c:54:7c:c7:
37:ab:f7:98:f3:99:e3:05:22:1d:4b:e7:f2:08:f7:
b6:f0:39:45:c2:ee:ac:7a:21:20:20:ba:a5:00:7c:
2d:b1:6f:2c:96:9f:9c:00:84:8e:90:e7:74:fe:85:
a7:95:f3:cb:01:02:37:c5:20:27:62:69:b4:22:b4:
41:f7:df:49:af:ea:c5:3b:42:15:80:2b:7e:a3:7d:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D5:D3:FC:4B:C7:9B:12:03:DE:F7:EB:86:AD:52:F1:40:37:54:3C
X509v3 Authority Key Identifier:
keyid:00:0D:0F:EE:2C:D5:66:96:5C:A0:8D:B5:50:66:3C:B2:0B:41:23:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AA0P7izVZpZcoI21UGY8sgtBI0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/LdXT_EvHmxID3vfrhq1S8UA3VDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/e6fe09-c22d-45b7-a599-b941ba921b3f/1/AA0P7izVZpZcoI21UGY8sgtBI0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.18.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2e:58:48:5d:e4:80:81:62:38:8f:f0:63:df:ed:42:f9:cb:
fd:fe:89:9a:42:a7:60:80:6a:00:40:8e:a0:31:94:11:8e:7c:
b9:4b:64:44:b7:37:4e:13:e0:76:59:85:d3:60:ab:33:e2:f7:
11:e2:8d:ed:9b:bb:82:eb:dd:69:21:d9:74:d5:36:f8:41:48:
3a:76:d4:d9:60:5f:70:2a:c6:e9:d1:7f:ba:89:be:18:ea:7e:
1a:ee:25:4a:0d:ae:fd:b7:50:94:3e:4c:12:69:32:c9:1c:19:
c4:64:88:8a:3e:76:00:a4:62:61:d6:51:d8:1e:be:1d:5e:e8:
dd:9e:f0:e9:47:e6:29:f7:ef:28:20:47:f0:79:90:0f:e9:c8:
28:a3:e8:46:f2:fe:0c:f3:e6:4d:aa:c3:8c:98:62:b7:f4:a4:
ab:4d:a2:9b:1f:56:76:dd:0c:d8:94:71:7c:b7:3c:86:ed:99:
a2:51:0b:6b:ae:f5:20:85:cb:69:88:91:9d:23:bd:74:27:db:
da:2a:6c:2f:68:06:fb:c8:19:a0:9c:99:09:36:2b:e0:e7:80:
f0:56:00:4c:b6:ea:be:c0:2e:89:8d:3f:3c:c5:5c:f5:94:24:
7a:76:92:d6:3f:7e:03:f1:ef:92:5f:50:87:86:53:03:54:cc:
37:17:ab:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:27 2025 by rpki-client