Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/lvcn8mDHS4RqzrgdRjolUimVRmo.roa
File: lvcn8mDHS4RqzrgdRjolUimVRmo.roa (raw, json)
Hash identifier: tR4BftVs1ZDJECtx6R2xukM/QJ//rxtb5bGq+Y+0J3Y=
Subject key identifier: 96:F7:27:F2:60:C7:4B:84:6A:CE:B8:1D:46:3A:25:52:29:95:46:6A
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 44F19823
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/lvcn8mDHS4RqzrgdRjolUimVRmo.roa
Signing time: Thu 26 May 2022 15:33:13 +0000
ROA not before: Thu 26 May 2022 15:33:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203000
IP address blocks: 176.65.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1156683811 (0x44f19823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: May 26 15:33:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96f727f260c74b846aceb81d463a25522995466a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:d8:05:66:72:79:a8:bb:1d:f3:29:48:b7:
cf:7f:e7:c3:1c:ce:19:30:0f:38:93:7b:0b:98:bc:
3a:98:5b:8e:e5:5f:a8:54:96:4e:f8:6d:70:b3:fe:
8a:30:4c:bf:5d:f7:d0:42:93:45:b4:06:8e:d9:5c:
06:ac:93:22:1e:54:6c:94:f4:15:97:84:14:01:78:
b2:94:c9:9f:fb:98:1e:28:14:40:69:c2:33:d5:87:
75:14:ca:7f:d1:b6:0e:0e:3e:b1:da:36:8c:28:22:
ab:53:84:d4:d8:1c:b3:48:52:57:7f:91:9b:1e:48:
96:28:0d:f9:08:79:03:de:1a:6a:55:92:d0:36:d9:
00:10:ee:34:37:c3:2b:dc:42:2f:1d:2a:68:ae:46:
76:1d:6d:b8:e6:14:0a:33:c2:c9:ac:81:7c:3c:33:
ae:6a:18:45:fa:f1:4c:8a:47:be:b3:ff:8c:6a:39:
ba:b2:89:8e:53:13:71:ea:a5:86:e2:01:9a:d6:33:
76:3b:3d:4c:c3:f1:63:77:a9:12:97:1c:eb:37:02:
e2:97:33:02:0b:49:cf:52:fd:de:4a:be:ba:a2:0f:
d8:f5:7c:ab:0d:17:d7:14:ff:57:64:fa:22:58:91:
ae:e3:df:c0:da:85:99:87:9d:74:e1:a1:4f:b9:42:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F7:27:F2:60:C7:4B:84:6A:CE:B8:1D:46:3A:25:52:29:95:46:6A
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/lvcn8mDHS4RqzrgdRjolUimVRmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a4:df:96:ab:bc:e7:6d:01:39:a6:5c:06:bf:5b:20:62:38:
19:b7:80:8f:5c:7b:f4:31:fb:6a:9a:5e:f3:17:1b:8e:b6:1d:
23:e2:33:57:ec:57:01:87:80:93:b4:b3:02:d6:c5:14:ff:27:
c0:35:06:56:28:d9:b7:77:0d:ec:a5:ba:bf:40:47:c6:d8:4f:
51:79:87:4f:25:1c:1c:f3:21:fa:e0:3f:ca:23:d3:73:de:e1:
8b:74:a8:ad:b8:7c:11:20:27:c9:cf:cb:59:c1:67:9e:6d:be:
c3:03:9c:14:0c:cc:f7:10:72:53:b8:60:a5:5f:a7:ef:83:14:
cc:9a:7d:a5:31:f4:3f:12:a5:70:f4:29:8e:ec:3f:ff:f0:c3:
fc:c0:ae:b7:64:ad:9c:14:b6:51:ae:9a:d7:6f:01:e1:14:d3:
a7:3c:a7:b6:2e:ad:55:e5:da:26:0a:28:55:b4:6a:ca:f9:3c:
11:4a:54:51:7c:ac:fc:b6:5c:4f:97:26:e8:e1:7e:3e:48:9b:
eb:5d:97:e1:34:ad:4e:90:46:f7:b1:65:1a:3e:85:38:69:ab:
aa:ee:4e:e9:d5:6f:8a:a0:39:f1:44:8f:40:04:3c:c3:28:f3:
36:31:38:44:32:96:3f:d6:f3:83:37:77:1e:17:f4:74:fc:a1:
b4:02:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:30 2025 by rpki-client