Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/lr-y-inCM8M-Hv5f5lc5SeZx10Y.roa
File: lr-y-inCM8M-Hv5f5lc5SeZx10Y.roa (raw, json)
Hash identifier: q36GEu1WP9z0kU+feItmmOYKTHhb5CuJGy551KcuscM=
Subject key identifier: 96:BF:B2:FA:29:C2:33:C3:3E:1E:FE:5F:E6:57:39:49:E6:71:D7:46
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A863E09
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/lr-y-inCM8M-Hv5f5lc5SeZx10Y.roa
Signing time: Sat 01 Jan 2022 04:52:06 +0000
ROA not before: Sat 01 Jan 2022 04:52:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200103
IP address blocks: 81.15.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981876233 (0x3a863e09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96bfb2fa29c233c33e1efe5fe6573949e671d746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:13:d6:91:ee:9b:dc:9d:30:6f:1a:3d:6c:
20:cd:fb:c4:5f:9e:ce:64:e5:64:e7:0c:4c:52:41:
28:f9:07:c7:23:3a:cf:c5:7e:1d:e5:a4:cf:d9:f5:
1d:8e:69:eb:52:ea:6e:4e:cc:a1:90:e7:78:14:cc:
fe:03:64:e8:cd:04:05:00:66:3c:e6:51:98:c7:61:
00:f8:ab:a6:c9:3c:97:b8:dd:3e:d1:4b:c0:c3:cf:
55:9c:f0:12:81:09:c4:c6:dc:d4:0b:f2:93:f6:ea:
18:1c:ed:56:29:e8:dc:b6:4b:fb:72:5d:30:c7:c3:
5b:35:88:95:da:4d:4c:1f:73:6a:ce:5f:0a:13:b0:
d9:13:ec:e1:a7:cf:04:c3:0b:94:49:41:d7:f7:36:
72:5d:2d:40:b1:72:64:24:39:14:21:50:a6:6c:06:
90:b3:c7:61:68:ca:bc:8d:0c:75:cc:a8:c9:73:12:
05:f9:98:0f:b7:3b:ad:6f:e4:68:96:c6:4c:a0:14:
f2:0c:6d:1a:71:ed:cc:d6:4f:32:79:f5:85:ae:60:
5e:4c:38:cd:d0:ce:6a:4b:29:de:29:33:8d:e1:e1:
26:9d:73:3e:f9:e8:ac:fb:6b:51:36:a4:ba:23:5e:
db:ff:34:53:d5:0d:dc:66:c9:e4:5c:4e:6a:1a:e2:
35:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BF:B2:FA:29:C2:33:C3:3E:1E:FE:5F:E6:57:39:49:E6:71:D7:46
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/lr-y-inCM8M-Hv5f5lc5SeZx10Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:03:22:ef:88:d6:49:58:45:69:c0:1d:af:6c:69:cb:df:83:
f6:fb:e3:07:5f:75:ea:6f:60:16:3a:2c:70:70:00:24:19:8c:
d9:11:e0:ae:4a:6f:1e:bd:ee:c8:9c:d3:a9:3a:35:67:68:1a:
6c:c4:f0:4f:97:e2:77:db:49:e4:81:7c:09:a7:5a:51:70:35:
66:a1:66:20:58:cb:d7:4a:d5:12:e3:8d:68:82:17:d6:53:54:
36:a7:96:2d:48:9c:bd:5a:f1:de:15:c1:40:b1:60:37:79:8d:
e1:94:b7:5a:df:1c:11:7c:c8:85:d3:0b:b9:25:37:96:60:a0:
27:03:3b:f7:80:7d:1e:30:0a:4c:0e:f2:68:1d:92:16:65:dc:
77:31:89:d2:a7:15:31:4f:81:d4:16:17:f1:51:8b:28:52:01:
e0:d7:10:50:36:b6:f1:70:78:06:c6:28:26:32:3b:16:0b:d9:
e4:e3:23:97:f4:20:cd:f2:23:d2:fd:ec:d7:de:27:f0:64:6c:
06:df:76:9c:1e:78:c4:1e:e5:7b:93:1e:f3:ba:9f:df:37:c5:
88:12:54:e2:8a:73:00:df:cb:c6:63:cd:2c:7d:66:10:86:79:
f2:a0:b7:fa:49:2e:2f:aa:bd:0a:57:a8:64:ec:ae:e8:fb:7e:
21:dd:18:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org