Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/LISiW5s0pBc7HsdqWRq8ny2_X14.roa
File: LISiW5s0pBc7HsdqWRq8ny2_X14.roa (raw, json)
Hash identifier: q9tRtF+VOmmm6X0JVqL5gTGaEJGFhhUbDzzmz2pxeC4=
Subject key identifier: 2C:84:A2:5B:9B:34:A4:17:3B:1E:C7:6A:59:1A:BC:9F:2D:BF:5F:5E
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 05295E02
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/LISiW5s0pBc7HsdqWRq8ny2_X14.roa
Signing time: Mon 09 May 2022 05:27:24 +0000
ROA not before: Mon 09 May 2022 05:27:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25211
IP address blocks: 85.239.148.0/24 maxlen: 24
85.239.150.0/24 maxlen: 24
185.95.159.0/24 maxlen: 24
185.95.156.0/24 maxlen: 24
185.95.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86597122 (0x5295e02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 9 05:27:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c84a25b9b34a4173b1ec76a591abc9f2dbf5f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:31:1b:ed:2c:09:b2:f7:08:49:e1:75:84:
66:ae:e6:21:bf:37:05:bb:25:10:f9:4f:1b:06:0e:
cc:7f:d2:c6:16:e1:8a:9e:6a:eb:55:4b:ce:cd:4c:
1b:c8:c7:1f:ee:58:cd:c8:4a:af:a3:cb:ed:93:07:
3a:e0:79:97:41:0d:cb:91:b7:21:3c:ad:86:b5:fe:
1f:f7:3f:01:27:19:75:db:92:02:44:a9:73:cd:1b:
6b:5b:11:4d:2e:50:66:0d:36:85:9f:32:85:e1:5e:
57:9c:a1:31:ee:27:c7:6f:54:cd:19:df:69:ae:ab:
ef:a6:4f:af:13:fe:f2:5f:fe:88:b3:de:23:6d:1f:
7f:30:4c:83:a4:0b:ac:76:4c:4a:84:6d:43:25:e1:
f5:7b:12:e8:27:66:56:44:0e:92:a4:9d:4d:d2:60:
e1:93:1b:a4:a1:55:54:cb:21:94:75:88:80:5c:16:
f8:2c:9c:51:7c:69:dd:4d:8f:86:58:27:9b:00:88:
08:23:98:d4:e9:6a:b4:73:d8:45:01:3a:f9:a4:36:
09:14:0f:2b:6b:3b:dd:2e:24:88:d6:6e:4b:13:48:
7e:eb:28:ab:29:1d:16:1c:ef:d9:59:a0:99:f8:88:
f6:88:91:77:d2:ed:31:47:aa:c9:d5:e3:b6:ca:39:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:84:A2:5B:9B:34:A4:17:3B:1E:C7:6A:59:1A:BC:9F:2D:BF:5F:5E
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/LISiW5s0pBc7HsdqWRq8ny2_X14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0/24
85.239.150.0/24
185.95.156.0/23
185.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
56:56:7b:35:0a:3b:21:ce:00:22:f8:ab:70:b1:75:0b:29:09:
fd:93:3b:00:aa:77:40:de:68:63:01:31:c4:d3:87:b8:46:9d:
7c:65:22:10:d4:b1:14:e8:36:b5:2a:1e:a5:04:4e:0e:90:b8:
32:d6:f0:6f:d8:b5:09:69:51:39:b7:22:a0:41:7c:cf:d2:74:
8e:b7:e3:f8:f0:97:56:dd:8d:35:3a:55:e3:db:dd:db:e8:dc:
37:ac:a9:ce:0f:60:52:b0:a1:cf:af:b3:23:2d:78:9c:77:eb:
a0:0e:9e:78:34:08:cd:5b:23:09:94:ae:66:de:29:fe:d9:a3:
7a:80:50:20:56:bc:af:cd:21:4d:37:a5:ea:be:2c:93:84:c2:
fb:e2:21:38:5b:b0:60:85:21:c6:14:70:fc:61:53:df:e2:d1:
6f:80:e0:43:1f:5f:c2:8a:85:78:38:12:67:df:45:aa:9d:7a:
71:6f:dc:1b:e1:c3:19:0c:9c:c1:01:4e:69:b1:dc:3d:17:db:
fa:63:3b:d7:1e:92:4b:9c:49:fc:c3:2d:f3:33:4c:29:44:74:
ac:a8:96:63:6a:55:26:19:a2:51:ba:37:29:54:28:95:2f:f4:
8e:c6:d0:d8:31:6d:98:59:4a:71:6b:bc:da:e7:0e:b3:c8:f2:
37:a6:91:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org