Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/LPu4lrH5AM4JVBanJs6zcOqsbxk.roa
File: LPu4lrH5AM4JVBanJs6zcOqsbxk.roa (raw, json)
Hash identifier: 72UcREvJsQrnUzCdNcwLtrZLIHjQUQE4KGFxc6MLuc8=
Subject key identifier: 2C:FB:B8:96:B1:F9:00:CE:09:54:16:A7:26:CE:B3:70:EA:AC:6F:19
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 09F9E9CD
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/LPu4lrH5AM4JVBanJs6zcOqsbxk.roa
Signing time: Sat 01 Jan 2022 03:59:46 +0000
ROA not before: Sat 01 Jan 2022 03:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202227
IP address blocks: 185.177.40.0/24 maxlen: 24
185.177.41.0/24 maxlen: 24
185.232.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167373261 (0x9f9e9cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 1 03:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cfbb896b1f900ce095416a726ceb370eaac6f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:d8:7d:c7:d9:c3:cc:82:10:6a:a8:5a:78:
ac:87:3e:69:35:96:c4:dc:af:07:87:75:0a:9f:8e:
62:1a:d5:70:3f:1f:6b:2b:32:fc:48:3f:98:16:57:
db:97:98:a2:a0:c2:af:6f:d3:a7:70:2f:0c:1b:f0:
3a:00:b2:db:dd:66:39:eb:a8:12:f7:cd:eb:0a:02:
9f:9a:d1:3e:c7:b9:8a:3e:d3:5c:cc:0b:c5:05:9f:
3a:49:f7:bd:b1:be:3c:71:ec:8d:38:c8:0a:11:83:
73:24:b4:e9:e3:12:bc:80:76:82:3b:89:5f:62:1c:
ee:db:4d:33:0f:51:de:19:73:f9:46:7d:df:3d:40:
43:38:40:15:74:3c:9f:81:21:b5:f2:b7:a3:8f:e4:
5b:a0:60:f3:04:b5:bb:25:bc:28:ac:ab:98:ae:4d:
83:a9:de:c8:f0:ea:91:60:c1:ea:74:99:eb:11:6b:
48:e3:f6:3f:53:41:65:2a:67:d8:b8:e8:56:6e:d0:
1f:fc:84:9c:20:43:4c:b5:c6:86:63:4d:75:01:32:
f4:bc:0b:41:0c:89:3f:71:50:7c:69:e8:b1:d9:7d:
02:3f:16:67:3b:c8:2d:10:f8:25:de:ea:a2:4f:7b:
d7:29:04:33:da:c1:9e:87:1f:51:b1:f6:82:ec:44:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FB:B8:96:B1:F9:00:CE:09:54:16:A7:26:CE:B3:70:EA:AC:6F:19
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/LPu4lrH5AM4JVBanJs6zcOqsbxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.40.0/23
185.232.135.0/24
Signature Algorithm: sha256WithRSAEncryption
79:45:65:10:c7:0b:d8:51:ed:15:91:9e:4f:43:f6:e0:61:eb:
78:65:d4:a8:ce:2b:8a:2c:2c:98:91:a4:16:67:69:71:57:94:
90:04:1a:f2:9d:4f:17:c9:54:c7:66:ee:63:a1:22:64:07:36:
88:5b:c4:0e:5e:77:16:65:75:73:db:bf:64:4e:1a:e0:10:d6:
2b:f6:21:ee:1d:2e:5a:e4:44:22:41:11:44:71:cb:80:f6:85:
74:5f:26:44:42:51:8e:d3:f0:e3:31:d0:b1:25:ce:65:07:67:
f4:6f:d7:e2:78:35:5e:21:4a:5f:50:e0:78:bc:e3:82:3c:84:
85:08:0f:88:96:19:da:aa:33:fa:ad:df:40:29:a1:04:4d:fe:
ee:2f:8c:d2:e3:7f:fc:4d:73:83:f5:4e:ab:ac:4f:7c:4f:cb:
56:33:8a:6a:6c:f3:9a:69:e6:88:27:c6:46:51:cb:6d:7e:1d:
77:68:d0:1d:a2:4b:b0:b7:ca:8e:c0:4e:69:a6:b4:9c:b5:27:
88:64:c1:a8:3a:da:95:ac:28:ac:d4:44:ff:c5:d2:f1:59:1f:
27:9e:e0:52:0b:b2:df:c6:35:04:5c:ca:a5:29:8a:0a:10:16:
fb:1e:8b:77:e3:29:c3:03:07:e5:02:8b:48:06:14:25:82:4e:
22:d5:6b:19
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECfnpzTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ODQ5MjA0Y2E0ZjBlYjRlNTZlMDhlMDk5ZmUzNzg1Y2UwNmZmZWFhMB4XDTIyMDEw
MTAzNTk0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmNmYmI4OTZiMWY5
MDBjZTA5NTQxNmE3MjZjZWIzNzBlYWFjNmYxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJrJ2H3H2cPMghBqqFp4rIc+aTWWxNyvB4d1Cp+OYhrVcD8f
aysy/Eg/mBZX25eYoqDCr2/Tp3AvDBvwOgCy291mOeuoEvfN6woCn5rRPse5ij7T
XMwLxQWfOkn3vbG+PHHsjTjIChGDcyS06eMSvIB2gjuJX2Ic7ttNMw9R3hlz+UZ9
3z1AQzhAFXQ8n4EhtfK3o4/kW6Bg8wS1uyW8KKyrmK5Ng6neyPDqkWDB6nSZ6xFr
SOP2P1NBZSpn2LjoVm7QH/yEnCBDTLXGhmNNdQEy9LwLQQyJP3FQfGnosdl9Aj8W
ZzvILRD4Jd7qok971ykEM9rBnocfUbH2guxEB6MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQs+7iWsfkAzglUFqcmzrNw6qxvGTAfBgNVHSMEGDAWgBSoSSBMpPDrTlbg
jgmf43hc4G/+qjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FFa2dUS1R3NjA1VzRJNEpuLU40WE9Cdl9xby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvNDViMjNmLTMwMmItNDFmMi05NDk2LTljY2JiMDg0MjhmYS8x
L0xQdTRsckg1QU00SlZCYW5KczZ6Y09xc2J4ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
NDViMjNmLTMwMmItNDFmMi05NDk2LTljY2JiMDg0MjhmYS8xL3FFa2dUS1R3NjA1
VzRJNEpuLU40WE9Cdl9xby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAbmxKAMEALnohzANBgkqhkiG9w0B
AQsFAAOCAQEAeUVlEMcL2FHtFZGeT0P24GHreGXUqM4riiwsmJGkFmdpcVeUkAQa
8p1PF8lUx2buY6EiZAc2iFvEDl53FmV1c9u/ZE4a4BDWK/Yh7h0uWuREIkERRHHL
gPaFdF8mREJRjtPw4zHQsSXOZQdn9G/X4ng1XiFKX1DgeLzjgjyEhQgPiJYZ2qoz
+q3fQCmhBE3+7i+M0uN//E1zg/VOq6xPfE/LVjOKamzzmmnmiCfGRlHLbX4dd2jQ
HaJLsLfKjsBOaaa0nLUniGTBqDralaworNRE/8XS8VkfJ57gUguy38Y1BFzKpSmK
ChAW+x6Ld+MpwwMH5QKLSAYUJYJOItVrGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:06 2024 by rpki-client on console-ams.rpki-client.org