Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LxT4NtLNFk_lZOd2q2yblFLEsyY.roa
File: LxT4NtLNFk_lZOd2q2yblFLEsyY.roa (raw, json)
Hash identifier: y1tfcefhKdQ9GdRrg/SKGEF6crj9gBrxeoLekfkdCh8=
Subject key identifier: 2F:14:F8:36:D2:CD:16:4F:E5:64:E7:76:AB:6C:9B:94:52:C4:B3:26
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01890251ECCBD3EE931B53ED2881D1DCFBC4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LxT4NtLNFk_lZOd2q2yblFLEsyY.roa
Signing time: Wed 28 Jun 2023 14:04:30 +0000
ROA not before: Wed 28 Jun 2023 14:04:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 82.152.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:51:ec:cb:d3:ee:93:1b:53:ed:28:81:d1:dc:fb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 28 14:04:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f14f836d2cd164fe564e776ab6c9b9452c4b326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:81:ad:fc:d0:56:a3:b1:08:4d:49:a0:41:
3f:dc:b6:df:57:83:0c:cb:88:70:b4:c7:94:c1:a1:
cd:d4:e6:f8:b9:1e:26:d1:c3:8b:2b:a2:f2:96:ce:
c2:ff:bb:c3:ce:63:43:f9:89:36:82:d4:7f:e5:24:
8a:d5:e0:6d:12:0d:77:87:b6:07:a7:87:b5:58:2e:
f6:e1:de:b3:ff:f7:db:c5:55:75:06:34:2d:6e:0c:
a1:d2:d9:ff:af:95:9c:79:1c:30:02:ae:10:b9:f4:
98:27:df:8f:1c:d5:b4:aa:61:b8:57:e6:1e:a6:5a:
25:74:fd:00:e4:85:fa:99:72:ab:f7:98:aa:cc:12:
9c:7c:9c:0d:87:f9:18:59:32:5c:ca:37:94:5d:ea:
f2:5c:f2:d3:8b:98:c9:bc:fc:0f:02:b0:61:dd:07:
92:bf:52:15:2f:92:41:9d:fd:d8:82:33:fa:be:0a:
3f:81:d9:4f:d3:c8:d1:ed:26:bb:85:e1:7d:04:27:
93:7b:eb:9c:2d:47:30:0f:8e:37:4c:a3:e2:38:c0:
65:68:9c:03:eb:4e:6d:f8:e4:5b:45:37:16:67:d8:
d3:ff:d2:41:8b:0e:4c:c6:68:b3:4b:bd:1b:60:93:
45:e9:fa:9d:3a:73:bd:fd:04:2d:17:f0:b5:ca:37:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:14:F8:36:D2:CD:16:4F:E5:64:E7:76:AB:6C:9B:94:52:C4:B3:26
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/LxT4NtLNFk_lZOd2q2yblFLEsyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.111.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a0:f6:fd:43:41:f1:da:a9:f6:b9:fc:42:26:bf:01:88:e5:
4b:b0:59:ef:15:ae:1b:94:44:d3:ec:80:ac:12:60:e6:0d:51:
31:25:30:bf:65:ac:20:5f:67:23:c4:3b:ac:ae:09:30:f3:f6:
75:33:ed:d7:dd:ed:46:47:63:30:9b:92:75:a0:67:7f:d1:5d:
3e:eb:cc:dd:fe:b7:26:d9:20:15:43:20:26:d9:ea:96:1e:ca:
16:42:fb:e8:74:86:8e:43:5d:f5:b3:5b:9f:53:cf:55:d9:66:
5c:9c:15:80:30:70:88:57:6e:8d:a1:57:25:ac:3d:76:a7:25:
57:48:0f:41:c2:5e:33:d5:1f:44:5a:03:60:c2:ab:76:54:b3:
bf:79:7e:1d:43:de:d7:11:47:7b:24:77:bc:c3:bf:9d:8a:fb:
97:74:c5:e6:7a:dd:04:52:33:e3:29:f8:7b:8a:8d:b0:4f:93:
4e:b5:c6:ce:3f:64:4c:18:50:2d:0a:30:cb:60:b0:39:7a:35:
7e:37:9d:8b:d3:24:82:ab:5d:7b:7f:0e:fb:3a:d5:e1:4b:94:
c3:d1:01:8e:bc:45:cb:2a:23:d7:2f:7e:6b:fb:14:28:9a:09:
5b:10:04:36:c8:ad:16:a6:18:6e:72:d8:00:2a:68:6f:77:c7:
03:6d:d1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:07:00 2025 by rpki-client