Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/LKSBsmMEB_A8VpOxtntxSw6dtS8.roa
File: LKSBsmMEB_A8VpOxtntxSw6dtS8.roa (raw, json)
Hash identifier: 3er19ezOeBRgfuTx7V6XW/3wr65hxv4lFtjwblQLMYY=
Subject key identifier: 2C:A4:81:B2:63:04:07:F0:3C:56:93:B1:B6:7B:71:4B:0E:9D:B5:2F
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 018419DA5A10A99170FD9487730C4949A002
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/LKSBsmMEB_A8VpOxtntxSw6dtS8.roa
Signing time: Thu 27 Oct 2022 14:30:51 +0000
ROA not before: Thu 27 Oct 2022 14:30:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61118
IP address blocks: 212.15.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:da:5a:10:a9:91:70:fd:94:87:73:0c:49:49:a0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Oct 27 14:30:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ca481b2630407f03c5693b1b67b714b0e9db52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:24:46:6b:56:bd:09:bb:f5:f4:39:ce:35:
2e:7b:62:3f:d4:e7:da:63:55:4f:6a:b8:03:1a:0f:
0f:33:b7:fe:e8:fd:ac:45:f4:ac:cb:b2:b0:b6:5a:
5b:ad:1c:d9:6a:98:78:44:f1:53:d2:16:85:eb:06:
ca:66:24:99:f7:f2:7c:1e:cd:01:cc:bf:41:98:8d:
09:ab:d0:4b:4e:6d:a2:c1:7b:a6:42:2e:fe:9e:aa:
99:7d:2e:b3:26:bc:d3:fc:72:4f:cf:c4:15:03:25:
27:0c:a9:50:dc:1f:ac:e0:38:56:e4:31:f7:b1:0c:
a2:b0:56:fb:9a:28:96:d5:a4:f8:70:7a:c0:cc:0e:
60:5e:1a:9d:ad:a0:f0:f7:52:25:c1:0c:e1:01:31:
23:78:53:c5:71:aa:df:82:ec:68:a8:ad:9d:4e:0b:
53:74:8f:96:b9:06:c0:13:d2:e5:12:46:ec:3b:93:
75:ed:be:0b:dc:7a:28:91:08:15:51:ed:4a:a2:ea:
5d:7a:20:1f:8a:b6:df:b4:0d:5d:d7:4e:c8:e3:30:
23:28:bf:3e:a7:56:c9:48:95:26:42:55:76:f8:28:
bc:7f:91:bd:8e:f3:10:05:f6:98:91:96:5f:88:ad:
9d:37:21:92:71:74:34:f6:58:d2:da:a2:71:f1:2d:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A4:81:B2:63:04:07:F0:3C:56:93:B1:B6:7B:71:4B:0E:9D:B5:2F
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/LKSBsmMEB_A8VpOxtntxSw6dtS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.60.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ed:b9:39:bf:b1:93:e0:1d:ca:bc:67:47:04:c9:6a:06:e2:
ef:07:38:69:51:27:6d:b0:fb:5e:d4:2e:f7:a7:88:3f:1f:33:
fb:ed:c7:44:d2:33:79:0c:11:19:c3:fe:16:fd:52:ac:1c:71:
6c:e9:da:6f:d3:b5:dc:66:1e:2e:ef:fb:c6:a3:f3:a8:61:6b:
33:a4:61:bf:48:f1:a2:a2:03:fe:5a:19:b8:9b:80:ca:ad:bf:
92:2f:ec:ef:54:5a:89:b7:e4:05:91:36:4a:7b:9d:8a:e2:8e:
28:60:d9:c1:9a:3c:98:fe:27:1a:0e:40:10:38:2e:ec:08:f5:
36:fa:37:dc:a3:c5:7f:0b:32:fc:2d:19:c5:7d:37:18:91:61:
e6:c0:f0:01:6a:bf:bd:fb:41:4a:b5:5e:8b:fd:b3:9a:3f:be:
c8:63:e5:48:80:23:5e:89:21:62:9a:a6:43:36:6c:42:a4:ba:
89:df:56:55:26:f6:fe:d8:d6:9c:d6:e2:0f:37:de:68:8d:30:
a9:70:c8:8c:29:1b:a5:ce:ae:39:09:9b:75:c2:9a:f3:a0:29:
57:7d:52:f2:39:f9:20:46:c3:60:d0:fa:a8:a8:a1:67:4d:28:
b9:e2:84:53:bb:b3:30:c8:26:a1:59:0a:d4:b0:8c:59:e5:57:
98:f2:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:58:54 2025 by rpki-client