Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/lsd5AC-TF15GCckY302T1HB4lfI.roa
File: lsd5AC-TF15GCckY302T1HB4lfI.roa (raw, json)
Hash identifier: 2PNX0kfOmx7KaGv6pU32fZFp1stFQIZHNyPrfxLI/jM=
Subject key identifier: 96:C7:79:00:2F:93:17:5E:46:09:C9:18:DF:4D:93:D4:70:78:95:F2
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 01856B9344DA752A1E1E5A2A13F8664FD024
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/lsd5AC-TF15GCckY302T1HB4lfI.roa
Signing time: Sun 01 Jan 2023 04:24:51 +0000
ROA not before: Sun 01 Jan 2023 04:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43413
IP address blocks: 78.41.16.0/21 maxlen: 21
92.63.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:44:da:75:2a:1e:1e:5a:2a:13:f8:66:4f:d0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jan 1 04:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96c779002f93175e4609c918df4d93d4707895f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e6:f9:8a:62:bc:44:ca:d8:2a:6d:59:c5:0e:
60:13:b2:81:e8:36:c3:08:a7:9d:dd:fc:87:eb:ff:
f6:1d:51:8d:13:9e:55:23:40:ad:1d:df:76:53:e7:
95:73:aa:92:ee:61:ee:3d:9a:88:6f:1c:42:03:4c:
97:7e:f4:73:6b:d5:82:ae:eb:d4:5a:3c:92:06:ec:
0f:0f:dd:f4:86:dc:19:94:46:d7:06:21:b8:4e:9f:
13:7d:6f:4a:75:1c:d1:02:0e:01:d7:b8:f2:e9:72:
aa:09:41:0c:3c:36:46:64:b1:8e:3f:76:12:2b:5c:
e1:d2:31:53:95:98:04:09:d7:61:f0:4b:25:a4:4f:
f1:c4:b9:d6:99:e6:6c:cd:7e:d3:b6:cc:3c:9c:0e:
5a:d6:59:46:4c:47:0c:77:d5:ad:43:8c:e7:c9:ca:
d9:5d:66:48:c8:dc:76:b7:13:86:53:89:a7:e1:02:
5f:14:2e:42:f2:ae:93:64:b1:36:d9:2c:00:15:b7:
eb:47:0f:fe:14:7a:f0:d7:5a:37:a5:b3:91:4f:62:
29:20:cd:70:61:5e:00:b1:f4:32:1a:c7:aa:89:d7:
7a:17:5d:91:d5:de:18:5d:65:92:a8:b6:b4:2c:d0:
09:0d:2a:b2:ad:12:c5:2b:c3:03:71:b3:c5:d8:15:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C7:79:00:2F:93:17:5E:46:09:C9:18:DF:4D:93:D4:70:78:95:F2
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/lsd5AC-TF15GCckY302T1HB4lfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.16.0/21
92.63.48.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:8d:64:84:20:bb:d9:6f:4c:1e:15:ae:23:0b:ae:96:e3:21:
7b:06:4d:6f:19:e6:bc:d9:45:13:ef:45:73:82:c1:28:2b:fb:
e6:f4:3c:1e:44:d0:17:8a:44:93:61:7b:97:98:7c:60:e2:51:
98:06:18:65:b4:cd:0e:a5:ba:1b:83:a9:e0:35:7b:20:f6:7c:
76:08:63:6d:32:0e:01:ff:33:2f:a0:e3:fc:de:de:2d:62:cc:
2a:27:20:d3:2d:0e:06:48:14:15:d3:5d:2b:e8:12:3c:28:1f:
42:f7:77:e8:78:e8:a2:d2:21:1e:02:b2:22:8f:89:b5:8c:a1:
d1:dd:bc:87:bd:c2:91:66:99:37:e7:6f:02:c3:85:17:e3:fb:
c3:9f:bf:27:bc:24:f0:53:b7:72:fb:66:88:94:a3:a4:9b:7b:
29:d7:25:ca:5c:d3:91:8d:8c:ef:2e:26:09:3c:d9:c4:59:07:
6c:56:9d:a4:a3:bd:a9:da:df:d5:e1:00:bd:dc:42:b8:8e:16:
b1:6f:4e:b6:3a:17:1d:4b:64:55:47:8a:d4:86:2d:30:80:c4:
f3:c8:16:0f:6d:38:2d:91:af:fc:1b:7f:f0:dc:13:a4:d3:36:
7b:f9:74:eb:38:d7:86:ca:d3:0b:3b:7a:94:17:96:a4:58:91:
44:a0:0b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:30:12 2025 by rpki-client