Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/lg0vVVvmbQwMHcGaf8mwJ1kgpnk.roa
File: lg0vVVvmbQwMHcGaf8mwJ1kgpnk.roa (raw, json)
Hash identifier: r7/Z+CG7+F7+XdM5dJs+yC1uQlbzzI7fdAEiWzP/KPU=
Subject key identifier: 96:0D:2F:55:5B:E6:6D:0C:0C:1D:C1:9A:7F:C9:B0:27:59:20:A6:79
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 0183562A841F64E16FA7B023DDDDDE4EDE1A
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/lg0vVVvmbQwMHcGaf8mwJ1kgpnk.roa
Signing time: Mon 19 Sep 2022 14:32:50 +0000
ROA not before: Mon 19 Sep 2022 14:32:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3261
IP address blocks: 195.184.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:56:2a:84:1f:64:e1:6f:a7:b0:23:dd:dd:de:4e:de:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Sep 19 14:32:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=960d2f555be66d0c0c1dc19a7fc9b0275920a679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:4a:ab:d0:b3:33:50:71:19:c8:6a:8b:a8:
14:14:a5:7f:c9:f1:a2:aa:94:48:9f:52:01:c0:b4:
4b:8c:13:08:a3:ae:f2:f0:ea:b4:33:37:35:cc:be:
7e:2e:f1:67:76:34:12:cc:26:1d:81:a9:33:2b:e2:
50:26:ad:fe:c7:ef:ca:79:00:cd:af:42:d0:8c:21:
17:98:29:88:7a:a5:65:99:3d:e7:7b:4e:03:81:6d:
be:9d:84:1c:e9:7f:c4:57:b9:92:f3:d9:4c:9e:3d:
45:44:25:e4:28:d5:01:c5:3f:da:0d:6f:3b:3b:41:
72:7c:3b:47:83:c6:6a:1e:d4:24:37:7e:e9:4b:00:
e7:33:d0:51:5e:9f:db:17:db:41:4c:e7:21:82:b7:
ac:28:98:82:8a:95:05:0f:52:d3:37:dc:8f:13:37:
08:f8:58:b5:d2:29:0b:91:8e:1c:a0:fc:ff:f2:8f:
7f:31:48:f5:cc:a9:d4:99:2d:df:66:3e:c3:37:34:
44:0b:2e:d6:d6:b5:b0:65:d0:27:c1:ee:2d:82:43:
24:b1:dc:28:43:80:c0:ab:dc:5d:1c:72:3f:05:e5:
0b:41:93:64:38:d9:f8:d6:18:3e:4a:a3:c6:42:e9:
9b:4c:35:cb:ec:6b:c4:79:b5:f8:f1:b3:1d:70:14:
22:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0D:2F:55:5B:E6:6D:0C:0C:1D:C1:9A:7F:C9:B0:27:59:20:A6:79
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/lg0vVVvmbQwMHcGaf8mwJ1kgpnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.192.0/19
Signature Algorithm: sha256WithRSAEncryption
74:7e:ba:d6:16:9f:d0:ec:46:4f:fb:8b:4d:3a:28:41:02:09:
72:4f:b9:dd:c5:1c:82:20:ba:21:0b:df:30:21:ee:22:07:6b:
62:22:4c:37:59:d4:16:9a:5d:c0:cf:49:98:9c:05:84:e4:f9:
8c:d3:f2:dd:82:fe:a0:3f:20:ec:ae:32:0a:4b:ae:64:e8:54:
bb:dc:55:49:e8:e0:06:41:60:e3:9b:de:39:2a:2c:50:69:f1:
ec:58:57:47:dd:a6:35:06:9a:d4:3f:13:73:1a:d6:5d:14:f4:
72:91:7f:0b:83:64:44:d8:27:6e:6f:b4:36:70:ee:6c:8b:2c:
c7:7d:8e:f9:ec:fd:fe:d6:6c:b2:69:79:92:2c:c9:24:f8:79:
ca:21:55:d5:90:e8:94:bd:c5:f7:01:00:39:6d:47:c8:a5:58:
01:e2:19:9d:be:16:05:e4:86:09:91:0c:e4:d4:c3:88:b6:bf:
b7:f5:f8:c5:55:ae:26:e8:d6:c2:40:d2:60:d0:08:db:f2:1c:
21:7e:25:04:56:8b:4c:ea:ab:83:67:cd:e2:09:4e:9e:5a:61:
84:af:ee:a3:eb:c2:22:25:d3:95:b1:bf:c4:af:2e:5f:97:fb:
bb:7c:b2:66:ca:fd:c6:b1:3b:d4:50:94:34:c5:9d:27:79:4c:
2b:b5:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:35:40 2025 by rpki-client