Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Lppo7Um-1EFSOQVHM3NRzRe1BAA.roa
File: Lppo7Um-1EFSOQVHM3NRzRe1BAA.roa (raw, json)
Hash identifier: D/piphqKqHXczW3O56CjDFGWjyiLqf5d+fA7YsG2tkw=
Subject key identifier: 2E:9A:68:ED:49:BE:D4:41:52:39:05:47:33:73:51:CD:17:B5:04:00
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 018AB6B6558BD921AB9981A0E79A23F8E486
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Lppo7Um-1EFSOQVHM3NRzRe1BAA.roa
Signing time: Thu 21 Sep 2023 07:48:37 +0000
ROA not before: Thu 21 Sep 2023 07:48:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.28.40.0/22 maxlen: 24
46.28.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:b6:55:8b:d9:21:ab:99:81:a0:e7:9a:23:f8:e4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Sep 21 07:48:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e9a68ed49bed44152390547337351cd17b50400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:25:19:f2:c6:0a:57:44:c1:99:be:09:08:
bf:bf:76:3e:e3:16:0a:9b:05:6e:32:1f:db:52:36:
6a:bc:41:d4:82:97:9d:4d:9c:37:79:4b:c4:cf:d8:
b6:59:fa:e3:c7:0e:a9:68:61:f0:74:62:b9:76:b2:
7e:9c:06:69:37:47:5f:6e:b5:bd:c3:d3:cb:33:c4:
90:b5:c5:b3:e9:8d:93:37:8e:fc:15:5c:7d:e3:d7:
72:ef:08:9c:9b:5b:fa:23:e2:3a:6e:21:ea:b0:37:
27:c4:18:cd:1a:a0:6a:48:88:a4:e1:d4:47:fc:c5:
ee:be:f3:1f:7d:f6:fd:e5:81:ed:2c:11:8e:2d:03:
51:ce:83:79:ac:31:07:13:f7:22:ad:29:16:ee:17:
2a:da:c9:f1:74:8c:c7:82:55:fd:5d:36:8a:2d:90:
dd:ed:6e:d3:77:fd:94:a8:22:5a:16:af:ba:35:ab:
66:f4:fe:4c:bb:f8:2a:9c:2e:65:7c:bd:c2:c5:a6:
c7:f2:ce:56:9a:2d:59:16:93:d6:6a:e3:da:65:2c:
f8:90:ec:5c:28:e5:15:b1:d6:ee:ad:d7:a5:3a:96:
d0:ac:18:d5:00:6f:da:54:5c:fb:f4:d0:c4:07:2a:
7a:87:d2:5f:55:74:03:a9:b6:89:c3:a7:b6:98:46:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9A:68:ED:49:BE:D4:41:52:39:05:47:33:73:51:CD:17:B5:04:00
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Lppo7Um-1EFSOQVHM3NRzRe1BAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.40.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:8e:6d:f8:b5:09:ee:24:ab:64:f1:bb:e5:78:fa:8d:6f:2d:
2e:4e:f5:eb:8b:c2:67:7e:47:bd:00:20:aa:f6:b9:92:b1:fb:
8c:4e:c5:9a:72:1e:1a:64:ba:d6:54:82:06:15:14:b2:33:66:
a6:0c:0d:10:17:dd:89:da:f0:63:1e:35:7f:96:89:40:af:d5:
b7:9e:73:f1:2f:e8:de:c1:66:59:16:41:80:a2:ae:fe:e6:ab:
dc:e1:8f:00:5d:9c:86:f8:3b:ad:6e:93:3c:6e:59:c8:5d:58:
84:86:c7:75:39:c9:91:4d:2b:25:16:88:2e:6a:20:cb:9a:30:
da:68:08:21:6b:48:5d:96:a9:4f:13:f4:02:4e:e1:9f:94:98:
12:d5:ee:f9:0d:5b:7e:8a:b1:59:33:b0:39:2f:bc:02:40:18:
8b:ce:b0:4a:e5:7e:e1:8e:55:ef:8b:90:3d:dc:92:be:0d:97:
42:ff:a6:14:f5:20:ed:85:4f:da:da:16:41:2f:a2:7a:5c:45:
09:65:11:ad:62:b1:c0:0b:92:95:8c:45:7b:cd:c0:cf:70:b4:
6e:da:ac:86:0a:61:1d:f3:8f:40:e0:45:e8:57:f6:7e:99:0b:
c7:a5:d2:81:1b:80:89:58:21:2c:28:c3:f6:54:79:4d:ed:73:
70:e7:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:58 2025 by rpki-client