Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lkW3bLAubcAFSo5AvCyRq6bC0P4.roa
File: lkW3bLAubcAFSo5AvCyRq6bC0P4.roa (raw, json)
Hash identifier: dGLfKYMcdpHk+jFpW4rHTK7ExBGqLrPhkr7eI8oyTEM=
Subject key identifier: 96:45:B7:6C:B0:2E:6D:C0:05:4A:8E:40:BC:2C:91:AB:A6:C2:D0:FE
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0184F0B1E2542F6491569EC05B51AB6E736E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lkW3bLAubcAFSo5AvCyRq6bC0P4.roa
Signing time: Thu 08 Dec 2022 07:45:00 +0000
ROA not before: Thu 08 Dec 2022 07:45:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 81.5.156.0/24 maxlen: 24
82.153.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:b1:e2:54:2f:64:91:56:9e:c0:5b:51:ab:6e:73:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 8 07:45:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9645b76cb02e6dc0054a8e40bc2c91aba6c2d0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:48:c6:08:ec:51:cb:84:8b:a2:fd:e2:78:80:
3c:a7:62:17:b4:6f:8f:0d:d7:93:98:3f:84:aa:ff:
00:ba:46:4c:c0:d5:a3:c4:ce:13:23:04:68:a8:2b:
4c:52:45:9f:51:00:29:0e:a8:21:57:e1:4b:84:e8:
c6:55:4c:3e:c9:c7:ba:e4:65:55:cf:33:4a:92:86:
f0:ca:b9:88:89:32:c1:80:ba:e2:b6:55:5c:38:36:
76:12:4e:b9:a9:4f:7d:9a:09:36:3a:82:fa:4a:1b:
59:44:31:fd:be:ac:14:76:37:f0:46:49:03:de:1e:
ec:da:7b:a3:0e:da:59:04:02:74:65:40:31:05:30:
9d:60:3a:30:45:4f:9d:0f:04:2f:80:fa:4b:52:2a:
3a:ae:1a:e7:98:dd:2d:5e:d5:52:d4:32:0e:8f:18:
f2:57:1b:1d:a9:c0:88:3d:c3:ef:9e:73:c7:28:25:
6f:01:5e:92:4d:8e:61:f1:7c:60:ef:7e:98:93:c7:
a5:a3:43:d6:98:31:33:6b:d6:ef:de:6c:a1:71:33:
f7:54:57:94:5b:05:63:de:e6:ce:dc:01:4a:38:72:
9f:80:41:a1:55:bd:e7:b9:0a:75:fc:75:1f:1f:d8:
b7:90:b0:aa:5c:70:b4:73:2c:f5:75:2f:65:87:55:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:45:B7:6C:B0:2E:6D:C0:05:4A:8E:40:BC:2C:91:AB:A6:C2:D0:FE
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/lkW3bLAubcAFSo5AvCyRq6bC0P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.156.0/24
82.153.224.0/24
Signature Algorithm: sha256WithRSAEncryption
21:0f:e3:bb:14:7c:ed:df:6e:96:c7:86:38:c4:02:c0:38:f1:
37:d5:6c:91:bb:ca:77:1d:ee:03:4f:43:a5:e1:33:30:a7:1e:
5f:99:a0:14:0b:fd:e2:3f:5f:8f:a6:e5:c0:7b:f5:6c:2a:cf:
6d:4c:a2:34:fb:9c:4e:19:7f:a9:61:60:d6:b3:6d:38:1a:b1:
b2:b9:ef:1d:2e:d5:e4:5e:fa:11:a1:6b:ac:c6:82:db:59:96:
5c:22:4f:22:3b:89:59:96:f9:08:b5:87:6a:b9:d1:82:da:c0:
98:e7:fe:5e:44:ff:64:03:05:a1:7a:b1:2f:fd:80:0c:70:91:
6f:2e:56:58:63:8c:6b:34:f3:73:63:40:92:77:bc:c5:e6:e6:
24:a4:2b:cc:fc:78:6e:21:4f:d6:43:3c:06:b5:c1:86:cf:63:
7a:a0:d3:b8:30:94:b4:11:d8:be:40:a3:ba:36:48:a7:11:d4:
2f:e8:1e:b0:46:9b:2d:8b:1a:01:83:98:40:bf:4d:16:4c:75:
2a:36:56:d1:de:31:92:0b:a0:5b:3d:93:26:6c:01:bc:3f:a2:
29:58:74:f9:e0:df:69:36:ea:30:e7:6e:2e:e3:6b:fa:18:2a:
9b:ba:a6:40:44:6a:de:0e:d9:76:7a:d2:55:cf:bc:06:37:25:
cd:a6:38:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-fra.rpki-client.org