Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/LGzBgI_AIQEwjgey2fswUzEupJk.roa
File: LGzBgI_AIQEwjgey2fswUzEupJk.roa (raw, json)
Hash identifier: 0hmxCPuj928vtI5UwW5SraWa6XxjwvZg+upOmiu2VHk=
Subject key identifier: 2C:6C:C1:80:8F:C0:21:01:30:8E:07:B2:D9:FB:30:53:31:2E:A4:99
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 4541A634
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/LGzBgI_AIQEwjgey2fswUzEupJk.roa
Signing time: Tue 28 Jun 2022 04:08:20 +0000
ROA not before: Tue 28 Jun 2022 04:08:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60077
IP address blocks: 193.151.128.0/19 maxlen: 32
193.151.159.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1161930292 (0x4541a634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jun 28 04:08:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c6cc1808fc02101308e07b2d9fb3053312ea499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:b9:49:e5:b8:19:be:e4:4a:7c:c8:ec:ef:
d9:c2:d1:9f:a7:5f:65:84:ea:67:5c:bd:20:cd:02:
8b:8c:c2:16:4d:ea:39:52:3a:9a:6f:8e:e9:05:e7:
85:a3:d5:ed:b5:8a:e4:44:2d:ac:40:53:82:22:f3:
60:3c:ac:a8:46:a1:a2:1f:9e:d9:79:1d:d2:b8:eb:
39:ae:58:78:8e:1d:9e:79:ef:56:c0:2e:7b:47:55:
ff:20:51:a4:d0:f9:f5:bd:21:97:86:32:48:71:49:
eb:1a:c9:c8:b8:80:df:3f:2e:11:3a:62:f1:c6:27:
ed:e5:4f:05:bc:f9:fe:dd:70:7e:65:f0:cd:b0:a6:
27:c7:aa:f2:17:f2:33:7a:ea:3e:61:27:d5:86:7d:
c6:28:91:3c:98:af:07:82:0d:e6:9a:74:89:e7:c3:
03:c7:87:94:07:12:f3:bc:c7:fa:01:e7:e1:9a:3f:
e7:a6:8c:fa:03:97:ff:e2:59:ed:e6:4b:42:45:9a:
16:6e:18:96:b7:86:90:06:9f:d1:71:ee:ec:c1:c0:
c5:ba:dc:05:45:26:09:85:b1:3a:46:de:9b:bf:00:
50:db:a7:d2:2d:76:ac:9f:78:de:b1:5b:50:a8:a5:
21:3d:d2:5d:33:53:c7:53:11:21:ab:aa:da:3b:2e:
0a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6C:C1:80:8F:C0:21:01:30:8E:07:B2:D9:FB:30:53:31:2E:A4:99
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/LGzBgI_AIQEwjgey2fswUzEupJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.128.0/19
Signature Algorithm: sha256WithRSAEncryption
db:ee:e7:19:23:75:30:77:68:c5:b2:2c:2b:4b:b7:12:32:4c:
bb:26:1d:c1:57:7f:d0:2b:78:2e:68:8e:21:c8:1c:b6:8c:82:
82:cb:c1:f6:9b:be:9f:7b:3c:f8:77:7b:ab:cc:e9:b1:d9:17:
86:2c:6e:81:6c:90:cc:b3:39:d4:ff:34:02:d6:0f:e5:a0:b8:
98:bd:f2:45:8b:1f:2e:7f:c1:79:40:e5:06:57:8f:98:a4:b9:
ef:df:a8:8b:78:2a:01:42:ba:20:c8:99:ea:09:71:0d:8b:4a:
4d:82:af:87:23:34:69:6f:d5:c0:1d:c0:78:2e:00:95:e2:75:
a4:af:1f:93:b5:1d:4e:07:80:0f:64:15:34:77:e2:ee:8f:59:
f8:85:87:97:75:98:f3:d5:bb:7e:a6:c5:c0:4c:19:e4:05:c8:
39:90:98:05:c7:08:01:ff:a6:ca:15:3b:86:cb:10:80:bc:cb:
d7:7d:35:98:69:3b:2a:4d:b4:8b:95:f3:b7:63:d6:1e:0c:06:
4f:77:bc:66:fa:d0:8b:60:dd:26:2a:a6:5a:2e:97:8b:3d:4d:
b4:71:40:3a:ad:8c:af:bb:87:aa:a0:c6:8f:f8:a7:11:02:76:
6e:21:3f:df:b1:02:47:43:6e:8d:52:f2:0b:cf:83:e9:8e:d5:
20:3d:ec:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:48:01 2025 by rpki-client