Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/LcD-tFUfVwLkgLs8N4vsgWGxSks.roa
File: LcD-tFUfVwLkgLs8N4vsgWGxSks.roa (raw, json)
Hash identifier: r37Ii06+zEE1QavGonAQs9BA+JI+andry0sGl7FX/nk=
Subject key identifier: 2D:C0:FE:B4:55:1F:57:02:E4:80:BB:3C:37:8B:EC:81:61:B1:4A:4B
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 01131D
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/LcD-tFUfVwLkgLs8N4vsgWGxSks.roa
Signing time: Tue 28 Jun 2022 08:47:04 +0000
ROA not before: Tue 28 Jun 2022 08:47:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44704
IP address blocks: 91.206.100.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70429 (0x1131d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Jun 28 08:47:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dc0feb4551f5702e480bb3c378bec8161b14a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:31:08:41:e3:0e:6c:7d:df:07:9b:db:ce:6d:
bc:e3:e5:dc:f7:18:a8:5d:9b:f3:bf:2c:08:da:e9:
c3:ee:fd:93:76:47:df:31:1e:3b:8b:c9:e2:cc:d1:
64:93:f4:b4:2b:d0:12:84:4b:ff:91:76:bf:c9:87:
f8:99:07:90:3c:e2:3f:85:57:ae:41:f6:38:9a:29:
d0:e1:6c:40:34:cc:49:e5:4c:d4:1f:28:49:19:95:
0e:67:7c:f3:a4:c1:c6:2a:87:3b:91:02:b8:da:cf:
e3:10:99:b5:16:d1:5c:cf:cc:e2:c6:7d:e4:40:bc:
5c:7e:5a:90:ec:c4:21:c6:0b:56:a8:5b:df:0b:2a:
ee:e1:7d:71:f4:c1:45:e6:e1:4a:d4:c6:6f:14:bc:
6a:1f:d1:21:81:fd:ba:e4:55:89:22:d8:a7:c5:bd:
02:3d:bd:3f:e9:a8:67:bf:57:bd:1f:93:b1:72:d9:
09:9e:01:e1:f2:ee:aa:91:52:b0:ec:9b:c8:a3:3d:
84:52:98:97:23:51:e3:44:69:e6:ad:8f:39:b2:f8:
d0:f1:2f:a8:a4:c8:2d:5e:80:05:2f:7b:c8:b5:8d:
e6:ed:89:80:cc:d9:49:da:d1:70:dd:a3:06:c5:be:
19:3d:8d:62:cf:b9:6d:cc:69:9e:fb:81:60:d8:81:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:FE:B4:55:1F:57:02:E4:80:BB:3C:37:8B:EC:81:61:B1:4A:4B
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/LcD-tFUfVwLkgLs8N4vsgWGxSks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.100.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:fc:19:31:3b:ad:14:67:7c:07:ac:8c:df:14:77:7c:7e:bd:
4d:65:f8:84:44:14:65:0a:97:cd:29:6a:f5:0a:50:35:ad:a6:
fd:dc:af:a9:70:c7:45:05:68:b4:f0:c1:2c:20:61:70:7a:04:
37:2e:34:fc:cd:6c:00:83:be:32:7a:93:3e:96:5d:c1:75:90:
3f:af:3f:85:9f:c9:09:c1:e3:fe:92:91:a3:f6:b4:7c:5b:91:
49:75:e8:8c:d1:23:4f:2e:d8:bf:79:ff:3b:ca:35:91:9f:e9:
31:69:5e:0c:20:c9:af:19:4a:dc:37:76:2e:a1:f7:75:92:22:
54:00:a9:f6:21:50:a6:17:86:24:ec:b3:b5:a3:f5:33:60:2b:
f6:e3:a7:f5:75:26:f0:14:de:c7:c1:83:b5:7d:14:2f:a6:86:
f9:d2:fa:75:83:2d:0e:64:69:f5:6e:ce:fc:64:1f:62:41:a8:
f6:19:28:86:a4:8b:f5:e7:6b:af:da:7b:fa:e4:e4:ca:de:96:
cc:e1:63:60:bb:40:f4:dd:0d:96:80:91:f9:99:c2:f4:3c:4d:
ec:fc:0f:05:7d:6b:af:b7:b0:a2:07:cd:8c:eb:77:83:ff:9d:
c5:9f:f1:39:ca:0a:ff:eb:3a:64:5b:f7:90:48:64:79:09:89:
cd:12:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:33 2025 by rpki-client