Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/ltEBALrVSpTXV-lRVksdDN0ms6A.roa
File: ltEBALrVSpTXV-lRVksdDN0ms6A.roa (raw, json)
Hash identifier: bbGBR7ctywFcFyeGvCxtx/Wq3FBvk0dQGrtk+4kHZAY=
Subject key identifier: 96:D1:01:00:BA:D5:4A:94:D7:57:E9:51:56:4B:1D:0C:DD:26:B3:A0
Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial: 01C218AB
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/ltEBALrVSpTXV-lRVksdDN0ms6A.roa
Signing time: Sat 01 Jan 2022 06:55:38 +0000
ROA not before: Sat 01 Jan 2022 06:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21217
IP address blocks: 83.97.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29497515 (0x1c218ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Validity
Not Before: Jan 1 06:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96d10100bad54a94d757e951564b1d0cdd26b3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:7d:05:b9:8d:46:74:f0:4c:e3:92:d4:8e:
f9:42:57:b7:a7:e1:e3:f8:ed:a0:f4:c9:24:a4:c5:
25:db:52:a2:0a:5a:cb:13:7f:a8:b9:61:e5:2e:74:
59:2d:ce:dd:de:04:60:34:46:f2:5a:73:f0:0f:7c:
aa:77:34:b8:e9:b5:06:c8:7e:50:29:5a:65:9a:4a:
11:e7:8b:ce:ea:ee:e2:98:b3:9c:85:b5:ed:3e:d8:
57:d1:75:1c:42:8c:31:a0:10:79:c0:50:ff:bd:1f:
59:7b:3f:b6:ca:da:7a:bd:26:ff:d1:82:7b:13:66:
c0:8a:e1:68:43:37:5a:24:69:8b:eb:72:8a:d8:51:
8e:d4:cb:3a:a9:cc:1b:ab:d0:77:82:a5:a1:eb:06:
2c:51:37:e5:b3:c4:92:84:35:f1:23:4f:78:ec:0a:
05:2c:26:66:5f:c4:10:f5:f8:b4:ca:3e:1d:da:a9:
f3:a2:c2:68:9d:45:fa:69:2c:d5:e3:c4:c8:3a:44:
09:fa:b5:5c:57:1b:90:1b:57:09:5c:31:18:bc:68:
87:b2:67:1f:14:87:4d:af:fa:f9:dd:6a:bc:62:2f:
f3:69:f2:60:71:be:3f:0b:84:54:f1:0d:8f:8b:c7:
5d:4e:3a:d5:fa:fb:3a:a0:4a:6b:0b:00:53:91:dd:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D1:01:00:BA:D5:4A:94:D7:57:E9:51:56:4B:1D:0C:DD:26:B3:A0
X509v3 Authority Key Identifier:
keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/ltEBALrVSpTXV-lRVksdDN0ms6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.120.0/22
Signature Algorithm: sha256WithRSAEncryption
49:8d:c2:ad:0c:d6:f6:48:be:0e:c6:7f:07:20:97:07:6d:26:
64:0f:f8:5e:18:9e:0c:9c:80:b7:be:78:d2:a1:8e:41:02:4a:
8f:bc:c8:57:55:ba:99:18:dd:dd:4d:43:28:9f:71:a3:bd:30:
11:d0:d5:c2:ec:40:97:31:b9:b3:e5:be:cb:69:1b:41:80:6c:
40:39:77:f5:7e:c9:cc:e3:78:83:81:c2:72:67:ae:12:97:12:
dc:84:d6:fb:be:14:82:e6:96:49:c7:fc:b6:cf:04:17:cb:17:
1c:c7:6f:24:e8:f9:9b:43:b0:9a:46:b2:c5:1b:db:6e:7c:14:
96:74:20:c2:42:c7:79:6d:bb:9d:61:8f:45:cc:24:d3:6c:f6:
2b:90:f9:51:ef:95:13:90:e5:fc:e2:06:10:2a:19:cf:2b:fb:
8c:99:c8:50:d7:b0:29:9c:fa:c4:e0:04:d1:76:80:af:6b:cf:
5a:0f:07:09:1c:c6:6c:c0:a0:23:8a:94:02:af:fc:15:2c:90:
ee:76:e1:b9:88:f7:59:56:96:ce:9a:a5:ee:77:cc:a2:33:2e:
1b:0c:c0:bd:d3:b8:ea:c6:48:15:c2:4b:bf:52:2d:17:91:77:
c9:6d:7a:53:1f:1f:3c:00:fe:7a:fd:c5:8a:fe:48:5d:e0:28:
f1:a9:df:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:59 2025 by rpki-client