Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/LKOLBHCPSO7sTGqsAf9ZhmtZadc.roa
File: LKOLBHCPSO7sTGqsAf9ZhmtZadc.roa (raw, json)
Hash identifier: OLsdgJ213Bae4lOieh0pSURCa6tEpXWgxJ5o3LBAm5M=
Subject key identifier: 2C:A3:8B:04:70:8F:48:EE:EC:4C:6A:AC:01:FF:59:86:6B:59:69:D7
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 31B064E9
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/LKOLBHCPSO7sTGqsAf9ZhmtZadc.roa
Signing time: Fri 01 Jul 2022 13:50:25 +0000
ROA not before: Fri 01 Jul 2022 13:50:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62174
IP address blocks: 87.246.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 833643753 (0x31b064e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jul 1 13:50:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ca38b04708f48eeec4c6aac01ff59866b5969d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:dc:78:f8:08:b1:7a:bc:8e:fc:e0:c7:20:
f0:e2:91:98:bd:10:ab:0b:31:87:ed:4f:5b:4a:3d:
89:02:90:fb:df:4d:0b:64:39:43:a2:fa:39:e8:40:
fe:da:df:34:2b:70:11:5d:76:5f:c4:6f:fe:eb:35:
40:b2:7e:ac:76:e0:4f:cf:3a:fe:12:1c:f5:03:36:
fb:04:77:c0:45:af:cc:47:66:d2:f8:00:c5:d9:f0:
75:bc:0a:35:0e:7c:47:aa:90:e6:11:26:10:9e:21:
50:f0:53:2a:cc:1c:73:ce:25:03:84:96:93:33:0f:
ee:7b:3c:2b:0c:ff:61:02:e4:74:b0:74:bb:a7:b4:
00:83:d5:0b:c9:f9:fa:c5:a3:21:f1:88:f1:25:d1:
a9:ba:2e:ee:ae:b7:5c:95:de:b1:f5:86:4c:22:bc:
35:9d:77:0f:0a:58:20:e3:e1:45:b1:b8:0e:34:02:
9b:2c:22:e7:ff:8c:d5:b1:6d:b9:16:f8:b8:c5:b4:
79:7b:20:92:ef:3c:09:8d:20:2e:0a:01:9f:b7:4b:
4c:0d:19:2f:a0:cb:e3:8d:c8:79:71:1c:2e:90:44:
ee:37:70:b1:af:d4:78:52:db:d1:41:af:f6:51:d5:
98:dc:85:57:b8:f2:06:57:5a:29:56:21:81:f9:b8:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A3:8B:04:70:8F:48:EE:EC:4C:6A:AC:01:FF:59:86:6B:59:69:D7
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/LKOLBHCPSO7sTGqsAf9ZhmtZadc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d3:96:d1:08:7a:82:8f:5d:a6:c7:11:14:a6:52:db:06:d1:
9a:59:c0:da:96:e8:5b:25:7c:49:30:99:42:66:2c:1d:8d:19:
78:62:fe:f2:71:0c:62:41:3e:65:e3:53:32:8f:63:bf:ef:e5:
4f:d3:02:1a:2d:20:84:dd:e7:81:9a:81:b3:94:52:c6:29:11:
f6:63:3e:dd:df:5c:d2:1e:7c:9e:bc:24:1e:35:8a:6b:59:83:
23:2a:41:86:4e:08:36:21:c6:2c:11:5c:bc:f8:5a:3d:ec:41:
27:9b:9e:23:3f:9c:c7:f7:05:7d:50:c4:b8:f3:b0:50:42:04:
77:54:4c:c2:4a:52:4c:27:50:21:36:0e:a2:ce:a5:d2:05:13:
0b:8c:9f:67:a9:c0:1a:7d:5f:49:b1:e4:74:c3:ef:b6:f0:be:
48:59:80:0f:f7:95:51:e4:e3:d9:05:6d:2a:5d:64:37:7b:83:
62:cc:5d:e1:15:00:49:54:23:75:1c:bb:7b:d8:eb:3d:47:eb:
0d:1a:9f:75:be:45:fb:a3:b1:a2:7e:ac:23:dc:53:47:10:1f:
17:24:65:06:1f:3e:ae:69:d5:17:d2:66:65:bc:ff:ab:71:cb:
f9:86:6d:92:4b:f2:b3:02:98:1c:9f:63:54:18:eb:be:3b:76:
2f:54:41:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:32 2023 by rpki-client on console-ams.rpki-client.org