Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/lnr02twdNHlFgP5HLRh4M88fmA8.roa
File: lnr02twdNHlFgP5HLRh4M88fmA8.roa (raw, json)
Hash identifier: yaFLALpP+52ui9owjK2DszwQbFn3zy9czRtRIDyhhGo=
Subject key identifier: 96:7A:F4:DA:DC:1D:34:79:45:80:FE:47:2D:18:78:33:CF:1F:98:0F
Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Certificate serial: 01BA713B
Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/lnr02twdNHlFgP5HLRh4M88fmA8.roa
Signing time: Sat 01 Jan 2022 15:06:46 +0000
ROA not before: Sat 01 Jan 2022 15:06:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202544
IP address blocks: 185.151.136.0/22 maxlen: 22
185.149.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28995899 (0x1ba713b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Validity
Not Before: Jan 1 15:06:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=967af4dadc1d34794580fe472d187833cf1f980f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:67:6a:c4:c1:51:7b:6b:88:a3:bd:3e:a2:
57:4e:ad:79:f3:d0:4e:9f:17:45:f5:39:93:19:87:
b7:e2:39:31:5d:90:17:27:b3:b1:42:b9:92:1f:e1:
5d:55:ac:5c:7e:5d:2d:e4:30:f2:10:2b:37:7d:24:
83:11:ea:43:9d:5b:d6:d1:c3:dd:e5:44:84:b9:99:
a9:be:10:85:dd:97:f3:82:4f:69:bd:5e:fa:22:95:
0e:58:e4:9c:cc:f0:3d:d8:fa:db:cb:13:fb:3b:0b:
16:a1:6b:d1:db:da:eb:c4:29:ab:5a:00:dc:85:5d:
68:46:d4:30:a2:0b:b7:92:29:e4:71:5f:e9:92:d3:
6f:82:1e:6d:1f:3d:64:55:9d:af:06:b9:bf:c8:61:
73:82:4d:f9:3f:cc:82:f1:44:19:46:e4:74:c9:48:
20:80:49:be:f9:63:cc:0b:f2:c3:e7:80:35:42:56:
91:49:05:3e:e4:7c:cc:1d:fc:5d:8a:ea:43:be:d5:
30:49:dc:e2:17:54:0b:2c:2d:06:64:48:e1:10:33:
10:6a:44:46:d3:f3:b4:51:c2:be:9e:a4:61:f8:42:
06:f2:fa:0a:7a:8f:ba:ac:32:75:ef:85:ed:93:b6:
32:07:fc:a7:8c:f2:2f:f9:09:d0:c4:aa:c9:da:f4:
dd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:F4:DA:DC:1D:34:79:45:80:FE:47:2D:18:78:33:CF:1F:98:0F
X509v3 Authority Key Identifier:
keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/lnr02twdNHlFgP5HLRh4M88fmA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.168.0/22
185.151.136.0/22
Signature Algorithm: sha256WithRSAEncryption
06:72:04:b9:9e:76:67:49:9d:a5:02:60:3d:37:d8:aa:12:a8:
a0:51:9d:4c:e4:a7:c5:0e:6a:be:5e:a9:ae:15:01:67:cf:99:
c6:05:b6:23:dd:ef:72:11:05:83:8d:ec:20:d6:69:5f:f0:86:
01:bb:f3:55:97:80:f9:ed:c2:f4:49:ed:a8:70:9b:fa:a7:9c:
80:68:dd:e7:96:f4:b7:a9:c8:06:f5:40:3a:9e:e6:71:06:2d:
1f:7c:f8:3a:e9:2c:12:a6:31:b1:db:4a:03:5d:58:96:e6:d9:
93:c3:46:07:55:99:f8:1b:72:8c:12:ab:5e:e7:60:73:ca:9e:
02:c4:97:f2:e9:e3:73:a3:f6:aa:69:01:d1:01:37:5a:0c:43:
54:d4:0b:d4:7a:c3:b5:e7:bc:5e:30:86:19:e9:a9:82:22:49:
d3:37:2c:5e:fa:07:4f:94:a2:97:5b:0d:ba:13:91:75:79:0b:
ae:8c:b5:13:c7:10:6b:c6:d4:cc:64:16:ec:43:7c:03:fb:83:
5c:c0:e5:f4:0e:eb:78:9f:ea:04:51:dd:0a:43:2a:a9:93:2d:
72:84:db:2e:a2:40:15:95:ee:8d:44:91:81:1f:3f:18:61:57:
00:ce:53:a8:01:da:3f:60:62:b6:da:42:b8:45:16:33:98:73:
c2:fe:c2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:22 2024 by rpki-client on console-fra.rpki-client.org