Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/LGXKMBCtbHQKe5AxjqEHgtSReK4.roa
File: LGXKMBCtbHQKe5AxjqEHgtSReK4.roa (raw, json)
Hash identifier: znr+EFnMhRwkRBrnnBZ2fIj9EcNHDndPXYbJhSvPAwQ=
Subject key identifier: 2C:65:CA:30:10:AD:6C:74:0A:7B:90:31:8E:A1:07:82:D4:91:78:AE
Certificate issuer: /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial: 35214687
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/LGXKMBCtbHQKe5AxjqEHgtSReK4.roa
Signing time: Sat 01 Jan 2022 11:02:03 +0000
ROA not before: Sat 01 Jan 2022 11:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51703
IP address blocks: 212.174.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891373191 (0x35214687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Validity
Not Before: Jan 1 11:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c65ca3010ad6c740a7b90318ea10782d49178ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:eb:aa:1c:c2:0f:98:f3:52:b8:80:c6:59:
d6:64:4b:b8:43:61:5e:77:55:6f:67:69:c6:17:84:
4b:63:62:46:21:af:47:4c:6f:9f:24:d7:43:47:ce:
73:8b:ef:88:84:62:f0:29:3b:97:ff:68:3e:80:8d:
a4:9f:92:f2:f7:6a:53:dd:d3:af:3c:1e:43:74:a6:
f0:f7:21:e5:ed:a5:98:e4:19:b7:1b:c3:75:26:05:
2c:ed:67:2e:15:a9:54:81:0e:f8:0f:4c:32:9c:d8:
f0:7f:6e:81:ef:8a:ab:66:93:79:1f:80:e7:36:fb:
f3:97:de:80:98:24:7c:be:4c:ef:0b:b9:a0:19:17:
c8:c3:27:02:8c:bf:80:b4:11:2a:79:47:20:d1:02:
48:81:8f:37:fa:31:63:c1:5d:67:b7:97:33:fa:b7:
fa:b9:e7:1d:e9:05:e0:97:4a:bb:50:4b:c8:c7:9f:
8b:d0:a4:b5:80:6f:54:53:b3:ba:c4:be:7d:eb:32:
33:70:10:cc:89:d9:f9:eb:60:44:ab:03:72:f0:39:
2c:63:dc:e2:19:d0:86:13:29:61:34:f7:fb:ed:af:
3a:74:9b:15:f5:07:d1:db:75:3d:e3:e6:44:e9:86:
ed:e7:d4:c1:7e:38:37:ec:66:5e:54:44:75:22:ea:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:65:CA:30:10:AD:6C:74:0A:7B:90:31:8E:A1:07:82:D4:91:78:AE
X509v3 Authority Key Identifier:
keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/LGXKMBCtbHQKe5AxjqEHgtSReK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.174.139.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:00:b4:fa:c1:16:f4:e9:10:5a:72:5c:0b:29:bd:f6:77:00:
b1:14:02:74:7b:6d:53:8f:5a:0d:fa:95:a2:22:c8:12:f7:d9:
73:66:13:d5:e5:12:c6:74:d9:56:9e:25:ce:23:c8:03:c5:37:
c5:1b:a2:59:82:c0:d1:3a:c3:84:7e:8f:a2:0f:1f:4e:e0:8e:
52:1f:d4:a0:eb:44:14:db:88:54:90:c8:3b:41:c4:f9:5c:36:
ab:d1:d7:f0:b0:61:55:28:3b:7c:aa:52:fc:a3:25:9b:3e:e5:
61:06:a7:a2:75:9e:df:fb:8c:52:2e:21:c3:f0:75:df:ee:bc:
b2:bc:f7:ef:cc:18:39:c2:43:9f:81:65:09:48:c2:aa:3f:9c:
19:d1:65:7c:ac:cb:0f:45:21:eb:b0:04:23:bc:63:78:76:ae:
2c:b5:4f:7e:1c:e5:1a:80:74:b9:77:84:e4:c2:df:3b:fc:cb:
2e:35:58:0e:60:3e:52:e1:10:18:cd:e5:22:23:4f:03:54:ac:
eb:1e:de:9a:3c:ea:21:67:b5:a3:e6:e6:8f:13:1e:1c:bf:90:
b0:0c:94:04:77:d0:64:c3:08:d4:10:75:17:fb:fb:aa:c4:c4:
46:44:f7:f8:10:75:47:f0:f5:ed:85:41:36:9f:63:df:cf:aa:
07:f2:b9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:14 2025 by rpki-client