Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/LviT_KW2UhBqBRyNwpVuoHPH0j0.roa
File: LviT_KW2UhBqBRyNwpVuoHPH0j0.roa (raw, json)
Hash identifier: P0ObIvaUOdOnkHzm2U1P5YvfxxT0aE9rpNPi+eCVEpg=
Subject key identifier: 2E:F8:93:FC:A5:B6:52:10:6A:05:1C:8D:C2:95:6E:A0:73:C7:D2:3D
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 151CC8A0
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/LviT_KW2UhBqBRyNwpVuoHPH0j0.roa
Signing time: Sat 01 Jan 2022 13:58:52 +0000
ROA not before: Sat 01 Jan 2022 13:58:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60455
IP address blocks: 195.69.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354207904 (0x151cc8a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 13:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ef893fca5b652106a051c8dc2956ea073c7d23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:83:c0:77:d6:c9:4c:85:86:6b:f3:20:4e:
32:fb:6c:ab:29:7b:4c:a6:7d:61:f1:57:83:bb:11:
cb:27:4c:db:52:f1:5f:14:b5:28:84:cb:10:4c:13:
0e:88:62:b6:ac:b5:6e:d9:c9:de:bd:d1:88:81:c7:
17:2a:aa:71:cf:7f:a5:64:84:f9:98:34:60:19:27:
63:7c:9b:e5:7c:b9:bf:cb:fb:da:d2:b3:9b:b1:21:
f5:2c:8f:af:8f:82:b3:ae:8a:5a:8c:ed:eb:ac:21:
02:91:3d:85:e7:57:88:3e:93:e4:3a:44:44:90:be:
a7:c1:73:6f:e1:0c:6a:1c:cc:be:13:0f:d7:c4:9f:
1d:9f:a1:82:73:10:ba:dd:53:34:bf:85:6a:af:41:
d7:8c:9f:83:7a:41:77:1a:73:ff:74:c4:f0:38:f6:
22:87:22:78:b5:65:5d:40:b4:2f:d7:54:cf:73:60:
8a:58:61:cb:76:ea:2d:7e:bb:fb:19:8f:ff:88:e4:
5c:5c:0a:c3:f9:e8:b5:c0:32:29:74:fb:53:f0:c1:
66:d0:d8:cf:02:22:85:6c:4c:4c:5c:14:30:af:ba:
a5:e3:90:75:45:ae:96:1b:8b:ea:93:40:df:32:c5:
8f:a1:0f:99:cd:55:c0:03:62:8a:26:e5:61:78:4a:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F8:93:FC:A5:B6:52:10:6A:05:1C:8D:C2:95:6E:A0:73:C7:D2:3D
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/LviT_KW2UhBqBRyNwpVuoHPH0j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.187.0/24
Signature Algorithm: sha256WithRSAEncryption
88:cb:32:4e:26:bb:fc:85:4d:a4:85:ef:be:71:82:48:dd:f8:
93:9b:fc:97:8a:62:b9:e9:34:ff:95:de:df:ed:a7:28:73:7f:
4d:25:41:8d:78:d7:72:46:91:15:b5:9b:9c:81:16:fd:d7:74:
73:1f:f3:ed:fe:71:e8:76:04:d9:57:c9:01:60:2d:98:0b:39:
04:d5:7c:30:2f:21:7c:e6:89:31:93:7d:be:c9:83:40:7b:6c:
f4:29:20:4e:23:51:a4:7f:cd:47:0a:1c:f4:90:85:54:f7:62:
f0:cb:d9:3d:3c:b2:3a:9d:43:bd:c8:ca:24:a7:c8:71:cc:03:
97:7b:2d:ef:35:b1:a4:4d:b1:31:a3:43:64:34:c1:f2:fe:ed:
2d:ac:63:71:49:49:91:56:7b:7e:91:79:9d:47:20:e4:97:6b:
db:14:3c:7f:86:f6:34:c4:ec:76:c1:7e:91:94:bf:28:9b:c6:
2a:39:12:7e:ad:97:c0:ef:eb:b6:9c:fc:f3:9a:48:12:b6:22:
49:f1:d5:80:51:67:f9:57:12:fc:35:10:61:10:25:74:02:34:
b3:34:8e:64:45:62:47:f0:f0:fc:73:48:2b:23:df:ca:8d:c4:
1b:1e:f5:b9:5d:c6:53:62:35:46:e9:d3:1b:28:10:0f:89:93:
10:46:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:46 2023 by rpki-client on console.sobornost.net