Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LZ6M_vgCD76eeG_LsOtNEQ3ows0.roa
File: LZ6M_vgCD76eeG_LsOtNEQ3ows0.roa (raw, json)
Hash identifier: DT1xxUajm1irXXWkcRHHYoZKe4nMemZFSWnjlmzaj80=
Subject key identifier: 2D:9E:8C:FE:F8:02:0F:BE:9E:78:6F:CB:B0:EB:4D:11:0D:E8:C2:CD
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 03F240CA
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LZ6M_vgCD76eeG_LsOtNEQ3ows0.roa
Signing time: Mon 13 Jun 2022 20:36:44 +0000
ROA not before: Mon 13 Jun 2022 20:36:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29657
IP address blocks: 5.180.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66207946 (0x3f240ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 13 20:36:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d9e8cfef8020fbe9e786fcbb0eb4d110de8c2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:47:95:64:e8:ac:f4:ea:29:08:4d:cc:01:
26:12:f8:ba:19:73:09:3e:8d:18:39:48:bb:60:e3:
9a:e4:5a:d0:9f:84:33:3e:6d:00:e7:4d:bd:e8:7f:
93:81:00:41:03:2e:f4:04:e4:c6:1b:f5:8d:fe:ae:
b7:31:1a:1b:88:2d:04:e1:2d:00:e2:d2:7e:c3:bd:
a8:c3:fd:48:9f:e1:d8:a0:88:52:2d:b1:d8:11:33:
cf:b6:d7:3d:91:df:00:01:cf:90:f5:bc:46:9a:6f:
33:a5:b1:55:1a:ae:49:ee:37:8d:84:a2:ce:04:7c:
f0:d5:e0:f4:09:34:ca:45:e2:cc:3d:e6:a3:9d:0d:
e9:88:09:c1:9c:b5:f7:20:65:d8:0a:df:c2:b1:43:
1f:48:67:61:a5:27:f7:3b:87:55:97:23:98:45:8d:
2a:c6:f5:b2:6c:2d:5d:f2:7e:1b:bd:58:06:db:44:
dd:68:68:7c:03:d1:0b:6b:b3:76:34:65:a5:1f:8a:
bb:59:cf:eb:b2:5c:b9:36:0e:25:78:2c:d5:89:d6:
60:e7:d3:2c:8d:d3:ba:4d:95:e7:be:db:6d:30:92:
0b:42:b5:9a:31:7b:be:3d:2c:49:3b:68:08:34:d7:
84:e7:a7:48:4e:d8:32:f5:cf:8f:b7:c7:58:fd:8d:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9E:8C:FE:F8:02:0F:BE:9E:78:6F:CB:B0:EB:4D:11:0D:E8:C2:CD
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/LZ6M_vgCD76eeG_LsOtNEQ3ows0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.123.0/24
Signature Algorithm: sha256WithRSAEncryption
73:55:c3:11:e8:4d:0e:ba:83:da:28:e9:16:e0:71:f6:38:de:
3d:84:5d:3a:c6:6a:02:82:df:9e:48:ad:81:56:e9:22:ca:f5:
80:a5:96:79:8c:8e:91:41:7a:7c:bf:a5:2a:ac:6d:5b:73:c1:
6c:7e:4e:28:76:63:4e:d5:39:cd:13:1e:9f:ea:9f:d7:bf:dc:
6e:31:14:b1:c2:73:a9:7f:78:dd:ef:5e:5c:40:b6:5f:9a:fb:
fe:40:1d:2b:a5:d1:4b:28:bd:50:1a:30:fb:24:8c:27:26:80:
9d:1e:5f:9f:67:20:47:56:6e:dd:ca:30:a5:7d:25:64:cc:ec:
2e:70:96:0b:d9:8a:31:3c:df:dc:a0:d9:b7:ab:3c:88:63:c2:
da:0e:e0:cb:3b:2e:93:45:b7:92:5f:61:ed:ce:70:3a:9f:88:
2c:0f:73:92:16:79:fa:57:54:15:b5:5d:b2:f1:fd:0c:90:35:
c3:6c:7b:ba:a9:0c:1a:1b:8a:d6:36:d0:7a:34:32:7f:39:21:
16:68:8f:d1:a8:6b:34:91:3e:bb:0b:18:e8:98:31:36:83:71:
cc:90:f6:40:e7:27:15:1f:a6:1c:f3:1a:5e:e7:06:ed:d8:d0:
51:e1:5c:63:4c:da:47:6c:1d:63:4d:73:0f:a8:ae:17:c4:02:
ea:45:67:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org