Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/LrExsYowscEfv9fWGq0h6__zZhQ.roa
File: LrExsYowscEfv9fWGq0h6__zZhQ.roa (raw, json)
Hash identifier: OCzx/n/HlHXGrOpNQllrwqVOadfawqTkX7zR0p65a7U=
Subject key identifier: 2E:B1:31:B1:8A:30:B1:C1:1F:BF:D7:D6:1A:AD:21:EB:FF:F3:66:14
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 07649B86
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/LrExsYowscEfv9fWGq0h6__zZhQ.roa
Signing time: Thu 09 Jun 2022 05:09:05 +0000
ROA not before: Thu 09 Jun 2022 05:09:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 88.218.18.0/24 maxlen: 24
193.228.168.0/23 maxlen: 24
193.228.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124033926 (0x7649b86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jun 9 05:09:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2eb131b18a30b1c11fbfd7d61aad21ebfff36614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:c2:c1:a8:ed:72:48:3d:72:30:fa:31:e2:
e4:09:b6:6d:fc:16:68:c3:fd:84:a5:6f:67:0d:b3:
bb:8f:40:7a:80:96:1e:4f:14:ad:a4:8c:b8:3c:7f:
f4:fd:af:7d:07:02:3c:17:00:07:b9:ab:8a:aa:09:
33:18:75:39:ce:53:c4:b3:8f:f8:f7:68:f1:4a:92:
39:af:3d:d0:e5:f2:dc:37:83:42:d3:5c:fb:ab:e6:
cd:c6:2f:55:fc:08:d6:4e:bf:62:67:c3:63:b9:2e:
ed:e7:25:8f:02:04:88:3f:13:a5:df:a9:2c:0e:d4:
b1:74:27:67:48:1c:e2:93:74:4c:52:a0:45:50:25:
c4:6c:fa:0c:ee:28:d1:f8:d7:d4:d7:b7:43:e8:c4:
d9:47:66:47:9a:43:ab:ac:c9:56:fc:3b:5c:81:e2:
55:ce:18:c9:85:f1:c5:18:76:77:d1:1f:96:d4:5a:
6e:1c:91:6e:24:a4:d3:2a:93:87:39:8e:91:c6:11:
ea:65:c4:6b:de:f1:5d:29:cd:3a:24:7f:5c:d2:b7:
93:26:c2:7b:43:21:53:d5:00:5a:e9:66:14:07:a4:
4f:e7:ac:3c:24:fb:ee:93:c7:c3:d8:28:91:73:88:
40:1b:e9:5e:41:13:d2:d4:6d:0a:6a:63:25:b1:d8:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B1:31:B1:8A:30:B1:C1:1F:BF:D7:D6:1A:AD:21:EB:FF:F3:66:14
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/LrExsYowscEfv9fWGq0h6__zZhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.18.0/24
193.228.90.0/24
193.228.168.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:d7:a5:74:93:62:28:6d:ec:ec:f4:f4:b4:92:d0:3c:39:44:
44:a5:50:0e:ad:5e:50:70:fb:b1:c6:c4:15:ee:d6:6f:3d:b3:
29:31:ad:c5:d3:1f:02:aa:59:8d:5b:13:79:61:96:a6:34:da:
25:95:ac:39:fc:d1:07:47:21:0b:28:bb:59:f4:e9:1f:cb:26:
43:05:fd:9e:5b:1b:41:5f:13:eb:dc:ab:f2:fe:e9:1a:4c:14:
a1:a4:b0:25:cb:0a:74:c1:86:f9:60:1d:5a:04:44:17:7e:31:
c1:91:85:41:f6:4f:cc:c1:43:35:6c:f2:f8:35:4a:0d:93:74:
44:52:c1:bd:6a:bc:f4:43:a8:d3:04:d3:a2:39:76:54:4e:61:
c9:c5:d3:8e:90:b2:21:ee:c2:c2:27:ae:cd:f6:8b:39:da:70:
6a:7f:59:55:b1:37:de:05:8a:c5:3a:d5:fc:4d:4c:e8:24:13:
80:9f:67:7f:98:2b:99:b4:76:86:6b:1a:9f:1e:3f:56:c0:56:
1c:76:ca:c3:2d:ab:08:a8:aa:b8:41:cc:48:bd:6e:a4:a2:5b:
e6:57:8f:44:1d:c9:3a:59:d5:87:7f:b5:a6:79:20:13:30:1c:
77:2c:4b:97:47:90:06:cb:c5:70:4f:25:6c:8f:f4:33:62:c4:
32:89:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:50:10 2025 by rpki-client