Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/lfbeRp10xc_CMiDdF9dIp5I4uFY.roa
File: lfbeRp10xc_CMiDdF9dIp5I4uFY.roa (raw, json)
Hash identifier: BWV+k8y1+/8i28JFQArrUYVXHKC8ZeRY77I5/uVrgoE=
Subject key identifier: 95:F6:DE:46:9D:74:C5:CF:C2:32:20:DD:17:D7:48:A7:92:38:B8:56
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 018AE00245D21FAA21619255A470E3113705
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/lfbeRp10xc_CMiDdF9dIp5I4uFY.roa
Signing time: Fri 29 Sep 2023 08:15:59 +0000
ROA not before: Fri 29 Sep 2023 08:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60089
IP address blocks: 185.206.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:02:45:d2:1f:aa:21:61:92:55:a4:70:e3:11:37:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Sep 29 08:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95f6de469d74c5cfc23220dd17d748a79238b856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:0d:08:0c:7d:b4:95:32:14:d2:4f:1a:d6:
c3:a7:30:0e:9a:8f:87:de:7d:47:f9:13:91:8e:54:
85:96:d7:1d:83:ef:a5:7d:b9:83:12:6b:f4:a1:04:
de:59:ed:d0:b2:15:42:b0:69:59:14:9c:f1:8d:96:
f3:be:7d:3b:c8:ec:43:a9:20:46:d2:15:0e:70:77:
5d:5a:53:69:c5:8c:d0:21:92:ee:eb:54:a5:67:e6:
1f:b7:07:67:e4:5c:ee:0b:62:a5:7d:62:92:8a:81:
48:96:13:a9:0c:01:18:ac:dc:a1:11:35:94:cb:4d:
8a:a2:6e:4c:6b:b6:60:8e:55:47:34:f4:80:e3:15:
78:27:f0:a0:84:70:30:f7:e5:3b:6a:e8:5a:fb:c4:
a0:23:9e:44:41:13:f4:72:a1:86:bd:0f:f4:47:54:
81:3d:bf:5c:0d:dc:f4:eb:0f:33:e3:7a:72:ea:05:
c7:11:9a:49:66:f3:17:96:36:c8:60:3c:8b:f7:a5:
da:4c:a8:22:98:a3:c3:08:89:9c:b2:61:36:2d:32:
62:82:a2:e4:26:92:79:39:e1:82:7a:0f:cc:7d:20:
ef:17:1d:c6:8c:03:a1:6b:56:fb:8f:14:1b:7d:05:
38:74:72:ea:90:40:f5:22:9e:29:ad:54:02:11:e4:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F6:DE:46:9D:74:C5:CF:C2:32:20:DD:17:D7:48:A7:92:38:B8:56
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/lfbeRp10xc_CMiDdF9dIp5I4uFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:62:0d:5c:75:8a:73:4d:22:c8:0a:c6:ed:0d:c2:80:e1:dd:
a0:50:d1:f7:28:6f:ab:fe:29:9d:ee:dc:a4:97:52:61:b8:eb:
cd:a5:e7:b8:bd:34:79:de:42:56:76:e7:73:87:37:5f:1c:ae:
a2:64:5f:30:b8:ec:65:a9:82:8a:b9:69:1f:99:f2:74:d0:4b:
4c:44:01:3f:28:fa:30:d9:f9:97:90:a3:cb:59:2a:84:6d:b9:
cc:df:0b:11:0d:fe:50:19:0a:42:43:b5:c8:e9:9d:47:4a:ca:
e6:1b:df:1e:4f:0b:f8:e4:3c:b5:3b:a0:5f:d3:0f:e8:86:53:
70:d8:bf:f9:99:27:2e:9b:5e:8a:4c:be:53:d0:d5:87:1e:91:
45:33:2a:20:0c:35:3e:ce:ec:cb:1b:e6:b9:3f:df:81:15:d1:
cd:2f:2b:1a:87:8d:36:76:ad:85:74:c3:94:d7:48:43:75:8f:
31:1e:4f:45:57:71:0a:bb:6a:5f:b3:57:61:e4:43:40:e6:3e:
bf:c0:62:48:e7:5d:0c:74:65:00:e1:f3:72:81:83:8b:50:d3:
bc:49:4a:62:a8:a8:45:e2:f8:6b:25:05:5f:e7:cf:63:af:03:
d6:12:33:26:11:99:75:bc:98:6b:b9:0b:86:a2:e0:3d:cd:65:
be:61:dd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:06:27 2025 by rpki-client