Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/LPSLI74ODTcfHLSKeWiBwP5s53c.roa
File: LPSLI74ODTcfHLSKeWiBwP5s53c.roa (raw, json)
Hash identifier: JTAz2ZzXQXn7UiZk1dZcH5OZl5AzjR+rUwgaJ7BYyxw=
Subject key identifier: 2C:F4:8B:23:BE:0E:0D:37:1F:1C:B4:8A:79:68:81:C0:FE:6C:E7:77
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018B8594AFBB59003EDA0D3CBF0DCBF9B634
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/LPSLI74ODTcfHLSKeWiBwP5s53c.roa
Signing time: Tue 31 Oct 2023 11:53:15 +0000
ROA not before: Tue 31 Oct 2023 11:53:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3175
IP address blocks: 2a11:4b42::/32 maxlen: 32
2a11:4b41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:94:af:bb:59:00:3e:da:0d:3c:bf:0d:cb:f9:b6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Oct 31 11:53:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cf48b23be0e0d371f1cb48a796881c0fe6ce777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:a8:b7:19:9a:f9:6a:ab:20:2c:51:1a:e9:
3c:c2:81:fc:08:b7:0e:ff:41:44:4e:7c:b8:d7:c2:
fa:6a:7a:42:9c:f6:6f:7d:7e:e2:f6:96:f3:18:7e:
a2:db:d3:60:23:39:86:d4:5e:ab:8f:94:e2:7f:81:
b3:95:cb:ad:77:8b:77:3d:03:d7:6b:c6:bd:86:3a:
32:88:6e:e4:12:e0:54:03:96:8d:5b:46:c0:d7:0e:
c9:f9:6b:17:db:c8:e9:13:ca:e5:7c:a4:53:df:53:
d7:92:bf:ea:c5:7f:c0:8e:f8:07:c9:ef:63:79:65:
96:fb:92:d2:b5:fd:1b:3b:99:9e:b9:3b:29:d9:35:
49:5d:ca:77:4e:34:f0:67:6d:7c:f0:d5:c1:0c:81:
8d:2e:47:fc:e4:21:6a:a2:03:09:89:55:7f:40:b6:
f2:82:eb:d3:ba:cb:72:7e:21:d9:19:1c:3c:06:72:
3a:af:f1:b4:45:cf:22:4c:77:38:ef:07:63:75:5b:
1e:77:80:b4:1e:d5:61:32:a3:6d:af:66:cc:5a:49:
db:14:ef:27:c5:26:b5:71:86:bc:f1:47:a9:7e:6f:
3e:7d:88:d6:8a:1b:2f:8e:a9:ab:70:7b:e0:98:c4:
ba:99:32:83:cd:fa:c0:2b:99:65:36:27:41:32:70:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F4:8B:23:BE:0E:0D:37:1F:1C:B4:8A:79:68:81:C0:FE:6C:E7:77
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/LPSLI74ODTcfHLSKeWiBwP5s53c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4b41::-2a11:4b42:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6e:3a:72:38:d5:4f:20:31:45:bb:03:d0:ba:1c:8e:25:4b:2b:
38:ed:b0:fc:9a:0b:b7:6f:50:2b:ec:13:5b:43:47:2c:89:8f:
62:bb:37:19:49:80:95:f9:e2:25:03:63:5c:6a:32:51:fc:38:
d0:f7:8b:ee:fb:28:9d:38:de:ff:a3:70:81:b2:bc:58:5d:21:
41:86:09:2d:cb:89:4f:09:d6:4a:b2:ac:04:87:70:0c:40:1e:
1e:42:14:b7:4d:5b:92:8c:3d:07:8d:eb:ea:0a:f8:15:00:e7:
1a:33:31:1d:ad:fe:11:5d:9a:b3:bf:e6:1f:d0:bc:f1:d6:27:
c3:f2:21:3a:19:96:98:bf:9d:3f:2f:39:4b:85:53:7d:29:5b:
22:b9:4b:c0:8f:8b:78:16:bd:b7:ed:45:41:7f:20:2a:0c:cc:
14:05:f6:71:e0:88:fc:bb:1d:34:74:4b:9c:48:6b:91:36:12:
0a:a5:5f:49:1f:0e:82:42:0d:4a:30:d4:67:cd:c1:ca:d1:9a:
0d:09:30:23:c3:37:ff:79:e7:08:15:49:0e:c7:3a:39:b4:c8:
eb:b1:30:3b:7c:0b:11:b1:7e:34:e5:cc:af:0e:10:26:18:77:
1f:60:33:fb:1c:04:2f:18:57:06:1b:5d:6a:3f:01:42:8e:83:
75:d5:e6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:27 2025 by rpki-client