Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/lbCRerFjdvovOvaYz3hwrNzedEY.roa
File: lbCRerFjdvovOvaYz3hwrNzedEY.roa (raw, json)
Hash identifier: hPT8AjxjGUIaGQpEMDOT+FtNdACO6ShHTVD4hejo1/0=
Subject key identifier: 95:B0:91:7A:B1:63:76:FA:2F:3A:F6:98:CF:78:70:AC:DC:DE:74:46
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 01856C1CC345DA4191ED979B0900B0CB7481
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/lbCRerFjdvovOvaYz3hwrNzedEY.roa
Signing time: Sun 01 Jan 2023 06:55:02 +0000
ROA not before: Sun 01 Jan 2023 06:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204870
IP address blocks: 185.174.154.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:c3:45:da:41:91:ed:97:9b:09:00:b0:cb:74:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Jan 1 06:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95b0917ab16376fa2f3af698cf7870acdcde7446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:87:27:48:b1:48:ca:3e:42:e1:d9:08:40:
e1:41:49:b6:ef:28:c9:cb:b0:83:af:f7:b9:00:e5:
72:37:28:ca:bc:c4:d0:a9:83:17:49:a5:6f:37:8a:
ec:c0:c9:08:52:f1:83:43:84:98:09:76:a6:2b:23:
1b:88:6b:e5:e6:cd:f4:67:59:fc:bb:2d:26:10:98:
5e:ba:d5:c5:7d:43:48:4e:71:75:a6:9e:57:45:a1:
41:80:00:e9:29:51:78:17:62:2f:b3:c4:f9:6f:21:
11:17:bc:a0:31:ee:94:e8:8c:45:5b:de:4d:7d:fc:
61:bf:f7:0d:2b:68:05:51:dd:d4:fa:1b:7f:19:25:
3a:bb:af:2e:54:31:64:09:d5:df:ad:b8:d4:8c:51:
78:28:ee:35:40:63:34:75:47:df:be:b5:75:e4:7d:
63:2f:68:66:5f:a5:81:fe:b9:7d:01:71:7e:cb:58:
95:eb:64:e2:38:60:27:f7:a6:de:b8:14:74:77:6a:
ac:9b:d2:ce:41:1c:d9:17:85:e9:d8:e9:4c:d7:58:
38:2e:6c:3c:0a:d7:04:9a:41:4e:88:84:3c:04:e2:
a0:0c:73:9b:97:2f:8f:b0:ea:88:68:3e:77:6b:16:
e6:35:08:8f:db:3e:c4:70:18:53:3e:19:4b:55:8c:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:91:7A:B1:63:76:FA:2F:3A:F6:98:CF:78:70:AC:DC:DE:74:46
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/lbCRerFjdvovOvaYz3hwrNzedEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.154.0/23
Signature Algorithm: sha256WithRSAEncryption
27:50:79:03:89:59:7f:c0:c2:4b:df:0d:61:65:c8:b1:f7:b2:
ac:65:0a:2f:62:b7:dc:09:d2:b6:1d:63:3f:79:2a:04:70:61:
79:3f:4c:45:fd:c4:06:89:74:1d:d1:cb:17:a1:16:7b:f6:c9:
13:50:be:3a:72:a8:32:54:cc:d1:50:ae:e4:83:7d:5c:6a:7d:
b5:4a:d4:e1:80:b7:cf:22:40:b3:af:66:c4:fe:3c:c1:c3:43:
41:d2:dc:8c:91:c9:83:2c:ce:29:6f:fb:0a:57:a0:13:a0:4e:
0d:f9:0b:95:0b:88:b0:92:0e:09:a6:4a:6d:b6:2d:6b:22:c1:
75:9b:b5:34:f8:ad:e8:ba:2e:7a:3b:6e:8a:1e:06:da:88:cd:
81:cf:c9:59:11:83:99:ed:bc:22:92:cf:45:57:55:2f:59:48:
f4:08:21:33:00:ff:d6:52:19:4d:30:97:0a:fa:c4:63:17:ef:
60:2a:24:e2:7a:00:03:41:43:fa:41:fa:b1:5f:f8:8a:65:f0:
18:44:c6:60:10:19:a2:13:b7:70:86:6f:cf:e1:3c:a9:37:f9:
3a:58:d9:23:31:7e:dc:5c:95:52:b7:95:77:dd:a5:41:ee:ee:
8e:5a:bc:61:0f:72:7f:03:ed:e6:c6:ab:e5:05:64:d3:cc:32:
a7:5c:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:39:55 2025 by rpki-client