Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/4lxwfa8xFTSDTIVLywBuiGbkBXI.roa
File: 4lxwfa8xFTSDTIVLywBuiGbkBXI.roa (raw, json)
Hash identifier: lVdWs73HFmZ+ADpgUctvBrzoS84RuZy9jxA4Vv9XOp0=
Subject key identifier: E2:5C:70:7D:AF:31:15:34:83:4C:85:4B:CB:00:6E:88:66:E4:05:72
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 0183DA26C2085486A2F84B5FCB00BA604C63
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/4lxwfa8xFTSDTIVLywBuiGbkBXI.roa
Signing time: Sat 15 Oct 2022 05:38:36 +0000
ROA not before: Sat 15 Oct 2022 05:38:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59625
IP address blocks: 185.240.17.0/24 maxlen: 24
185.240.16.0/24 maxlen: 24
185.240.18.0/24 maxlen: 24
185.240.19.0/24 maxlen: 24
204.154.202.0/24 maxlen: 24
204.154.200.0/24 maxlen: 24
204.154.201.0/24 maxlen: 24
204.154.205.0/24 maxlen: 24
204.154.206.0/24 maxlen: 24
204.154.203.0/24 maxlen: 24
204.154.204.0/24 maxlen: 24
204.154.207.0/24 maxlen: 24
185.84.69.0/24 maxlen: 24
185.84.68.0/24 maxlen: 24
185.84.70.0/24 maxlen: 24
185.84.71.0/24 maxlen: 24
185.244.178.0/24 maxlen: 24
185.244.179.0/24 maxlen: 24
2a03:7020:1::/48 maxlen: 48
2a03:7020:10::/48 maxlen: 48
2a03:7020:8::/48 maxlen: 48
2a03:7020:1300::/40 maxlen: 40
2a03:7020:800::/40 maxlen: 40
2a03:7020::/40 maxlen: 40
2a03:7020:1200::/40 maxlen: 40
2a03:7020::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:da:26:c2:08:54:86:a2:f8:4b:5f:cb:00:ba:60:4c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Oct 15 05:38:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e25c707daf311534834c854bcb006e8866e40572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:a0:78:60:aa:ae:8c:16:29:64:05:34:61:
f7:d7:71:11:b2:35:c5:75:7c:85:6a:9c:7f:62:2c:
fe:7b:99:6c:4b:dd:c1:32:bc:a1:66:ab:e8:cb:2d:
44:37:b2:15:ba:da:d4:0e:5c:d6:0e:c2:e9:7b:fd:
33:a6:ce:cb:d9:98:25:e9:75:88:9a:b8:f8:c6:f5:
f7:f3:c5:da:d6:f0:5b:4f:a2:f6:d2:56:d1:f3:96:
66:a2:8b:2f:ea:54:56:1a:d3:76:d4:fb:0a:c7:83:
d7:b5:30:40:42:04:db:c5:34:5e:fd:e6:59:6d:e5:
2e:6d:0d:2b:b3:85:ba:d5:ea:e6:ae:ed:43:01:81:
52:4e:31:c9:30:13:6d:47:95:3f:7d:93:42:f4:ec:
8e:f4:27:4a:cb:d2:9d:05:6d:04:fe:c7:d0:7d:2b:
77:36:c5:0f:c9:ac:b8:e7:05:d2:ef:9b:43:32:9b:
75:b2:c5:8c:46:0c:81:49:4f:4a:4c:21:9e:46:71:
4d:9d:42:2e:06:48:f5:d6:12:80:01:26:06:dc:70:
42:f0:e7:ef:f6:7f:81:e9:10:2d:86:8a:3e:91:24:
92:e6:9f:ec:e3:f0:a2:38:63:2f:c3:a4:21:e1:a8:
78:e4:9c:04:48:37:71:9a:5d:50:ab:f9:20:ba:b3:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5C:70:7D:AF:31:15:34:83:4C:85:4B:CB:00:6E:88:66:E4:05:72
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/4lxwfa8xFTSDTIVLywBuiGbkBXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.68.0/22
185.240.16.0/22
185.244.178.0/23
204.154.200.0/21
IPv6:
2a03:7020::/40
2a03:7020:800::/40
2a03:7020:1200::/39
Signature Algorithm: sha256WithRSAEncryption
21:e3:eb:37:47:ed:0d:ec:3d:cd:0e:cb:d4:6c:17:39:12:27:
33:36:ad:67:b2:3e:a3:40:6b:ec:a0:1b:b7:0f:e7:d0:d1:a2:
0d:01:f5:86:42:00:26:ee:58:c0:6e:b7:5b:6e:2f:c7:0d:9f:
f2:55:78:de:34:64:9f:ca:86:4a:44:00:86:b0:4f:68:d4:b6:
b6:a6:2e:2a:f8:0c:67:b9:51:e1:19:42:d3:c4:fc:18:e3:19:
03:5d:0f:c3:49:09:64:26:b1:50:06:1e:53:be:b1:cc:43:df:
4f:64:7f:55:79:52:0c:13:f1:6f:cb:67:71:f2:04:25:3f:33:
10:d2:59:42:f7:35:e4:66:aa:ce:62:d8:c0:f7:d2:8f:de:8b:
c4:48:4c:42:fd:97:e8:c6:7c:78:f9:23:e3:4e:f8:f2:62:24:
31:44:fd:1b:a1:0e:48:1a:0c:10:f1:44:39:cc:ff:d7:89:9b:
b1:b1:60:26:b0:f4:94:26:9c:9c:9f:7e:d4:64:9a:f2:a7:c7:
e0:c8:b9:6a:c7:2c:e5:f9:e3:55:af:9c:97:f6:35:0c:f2:68:
b9:e4:5e:4a:3d:1b:8b:43:5a:48:73:3b:2d:01:bc:57:b9:e0:
54:09:3d:da:04:6d:c0:d2:f6:52:11:c7:27:f4:17:0d:65:b1:
ac:11:fa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:48 2024 by rpki-client on console-fra.rpki-client.org