Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/LepEDvmac09aBu8SsnSZeX_U4JU.roa
File: LepEDvmac09aBu8SsnSZeX_U4JU.roa (raw, json)
Hash identifier: OykO2JrEgJsi+hRBrCdc8o8giRp0FlldLHIBnfsv0q8=
Subject key identifier: 2D:EA:44:0E:F9:9A:73:4F:5A:06:EF:12:B2:74:99:79:7F:D4:E0:95
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 0183EA1954D4ECD9237662A9185629F69B66
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/LepEDvmac09aBu8SsnSZeX_U4JU.roa
Signing time: Tue 18 Oct 2022 07:57:51 +0000
ROA not before: Tue 18 Oct 2022 07:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34666
IP address blocks: 81.16.240.0/24 maxlen: 24
81.16.241.0/24 maxlen: 24
81.16.246.0/24 maxlen: 24
81.16.244.0/24 maxlen: 24
81.16.245.0/24 maxlen: 24
81.16.242.0/24 maxlen: 24
81.16.243.0/24 maxlen: 24
81.16.247.0/24 maxlen: 24
81.16.248.0/24 maxlen: 24
81.16.253.0/24 maxlen: 24
81.16.251.0/24 maxlen: 24
81.16.252.0/24 maxlen: 24
81.16.249.0/24 maxlen: 24
81.16.250.0/24 maxlen: 24
81.16.254.0/24 maxlen: 24
81.16.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:19:54:d4:ec:d9:23:76:62:a9:18:56:29:f6:9b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: Oct 18 07:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dea440ef99a734f5a06ef12b27499797fd4e095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:32:a8:c8:31:db:bd:7d:f2:cc:fc:08:38:77:
a3:9d:9b:be:8b:3d:fa:7d:11:73:b6:06:b2:64:be:
12:31:c2:dd:64:57:a2:59:89:27:5d:d8:07:90:e3:
10:32:ac:c7:4f:89:a3:cb:b9:48:40:9c:50:4c:6b:
a7:e9:4f:30:70:63:76:89:86:0e:81:b3:89:a3:dd:
dd:5e:f9:25:fd:a1:08:a7:4e:41:4a:ec:fa:a1:46:
e2:8f:01:ad:1b:fb:f6:5f:31:16:24:b1:f0:d4:a9:
9d:d1:b1:92:7f:5a:ed:4b:1c:ec:c6:d4:e0:a7:f2:
82:d6:47:e4:23:a2:f9:74:5e:8e:ae:a1:e8:d1:bc:
a1:37:fb:84:f9:ac:8b:d6:fa:a3:f2:ad:b6:a1:65:
39:3e:d6:73:f5:a5:47:75:36:7c:50:ce:6a:79:5d:
8b:6d:4c:4f:3f:ff:98:ea:a1:c8:30:f5:be:fa:e3:
e6:ca:14:ac:7a:30:ef:60:e8:1e:e8:76:e3:82:1d:
ef:44:10:f8:1c:7e:26:2d:d9:05:bb:cc:1f:16:fa:
47:2d:a9:54:97:25:38:35:17:17:4f:3d:0a:4f:bb:
c1:ac:29:53:a0:60:3e:58:87:b1:d8:75:ed:7c:61:
da:07:b5:df:04:07:10:ca:66:f4:c2:2a:a3:f4:ca:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EA:44:0E:F9:9A:73:4F:5A:06:EF:12:B2:74:99:79:7F:D4:E0:95
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/LepEDvmac09aBu8SsnSZeX_U4JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.240.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:85:2f:5b:e6:d3:3e:84:d9:2a:03:f8:33:1a:42:e1:0b:84:
79:64:63:22:02:f8:b3:f4:b8:6f:0f:9b:06:39:6e:8f:f1:99:
e0:88:09:7b:97:d9:87:1c:41:5f:ee:a4:63:00:71:d5:a0:fe:
bf:e9:09:a3:81:ba:87:f8:db:94:fc:22:54:97:d6:aa:af:b8:
46:49:40:e3:a7:d5:49:a7:af:bd:68:77:4d:11:71:4d:f5:3f:
f6:58:bc:22:1e:5d:d6:c1:c0:00:fe:9a:56:dc:30:52:03:ad:
4d:dd:bf:e9:52:1f:63:49:26:b3:00:ee:dc:1a:4e:3a:12:1c:
99:d9:e1:30:5e:73:02:a7:17:e9:74:3a:2f:1a:4f:ba:84:e5:
9f:3d:d6:ce:ce:33:6b:1d:1c:2d:3c:86:0c:4c:54:be:c9:d1:
8f:c0:1d:d5:31:a4:19:ac:1b:41:0d:5a:33:f9:14:87:14:23:
2a:5d:1a:ed:fe:80:41:4e:53:13:8b:ae:26:fe:50:36:0a:f6:
56:eb:98:24:57:29:36:d7:49:9c:26:d1:ff:55:cf:84:6f:72:
51:9d:55:f8:34:b1:09:32:6f:f4:96:13:53:96:d4:1b:44:a1:
9f:3d:62:73:b1:4a:25:0a:dd:94:c7:90:92:89:97:7e:7a:a3:
c8:1a:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:19 2024 by rpki-client on console-fra.rpki-client.org