Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/lKdmYY7MBz-nTUbZSIqBQmoB7AM.roa
File: lKdmYY7MBz-nTUbZSIqBQmoB7AM.roa (raw, json)
Hash identifier: TgDERzbWQJbz0igwnbNxI/ZOvVrsptgYHRSmGY/Tk68=
Subject key identifier: 94:A7:66:61:8E:CC:07:3F:A7:4D:46:D9:48:8A:81:42:6A:01:EC:03
Certificate issuer: /CN=c54eac151ffa9e997aa2ee60f3b38132deccd49c
Certificate serial: 020D24
Authority key identifier: C5:4E:AC:15:1F:FA:9E:99:7A:A2:EE:60:F3:B3:81:32:DE:CC:D4:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU6sFR_6npl6ou5g87OBMt7M1Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/lKdmYY7MBz-nTUbZSIqBQmoB7AM.roa
Signing time: Wed 05 Jan 2022 09:44:44 +0000
ROA not before: Wed 05 Jan 2022 09:44:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35617
IP address blocks: 185.225.128.0/22 maxlen: 24
109.239.240.0/20 maxlen: 24
85.204.42.0/24 maxlen: 24
212.81.60.0/22 maxlen: 24
86.104.135.0/24 maxlen: 24
185.59.132.0/23 maxlen: 24
178.132.88.0/21 maxlen: 24
185.59.135.0/24 maxlen: 24
185.59.134.0/24 maxlen: 24
2a04:e240::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134436 (0x20d24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54eac151ffa9e997aa2ee60f3b38132deccd49c
Validity
Not Before: Jan 5 09:44:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94a766618ecc073fa74d46d9488a81426a01ec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:46:d2:a1:26:04:08:e1:23:02:c1:61:41:
ab:33:55:32:64:62:41:62:e0:c9:ea:b0:3e:2e:4b:
17:34:e4:a7:f8:95:aa:dd:b8:59:e9:b3:e6:42:02:
1d:7a:98:c9:22:45:83:26:96:8e:16:4f:e7:6e:10:
d1:f1:66:93:d4:7f:1d:17:d2:13:c1:53:75:72:a0:
7b:6b:f8:a0:04:e0:b4:32:74:92:93:8f:ca:07:e4:
e6:99:60:24:ee:ea:24:71:95:29:59:32:9a:a1:6d:
b9:88:82:e0:52:b8:fa:48:f3:0f:ef:29:56:be:56:
90:77:e0:65:ac:75:52:bd:55:e1:64:9b:d7:00:5c:
b9:83:00:9a:1d:50:98:2f:d6:99:ba:31:20:6c:f1:
32:ee:66:10:3e:ed:51:24:31:53:5b:a6:1f:9c:69:
20:d8:a8:34:b4:a7:49:45:94:a6:65:2b:a9:1e:29:
ba:4f:16:5b:49:68:4c:ec:3c:a6:a0:30:f8:34:8b:
89:69:c4:bf:90:17:2f:2e:aa:43:e7:1d:f0:7e:9d:
4c:0a:3e:27:c4:70:e8:c1:8c:42:e4:3f:3c:c1:59:
db:5e:37:49:68:6a:bb:92:8d:d8:42:08:84:ca:fd:
34:8d:81:a0:27:96:96:62:c9:78:85:0d:7a:aa:45:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A7:66:61:8E:CC:07:3F:A7:4D:46:D9:48:8A:81:42:6A:01:EC:03
X509v3 Authority Key Identifier:
keyid:C5:4E:AC:15:1F:FA:9E:99:7A:A2:EE:60:F3:B3:81:32:DE:CC:D4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU6sFR_6npl6ou5g87OBMt7M1Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/lKdmYY7MBz-nTUbZSIqBQmoB7AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/xU6sFR_6npl6ou5g87OBMt7M1Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.42.0/24
86.104.135.0/24
109.239.240.0/20
178.132.88.0/21
185.59.132.0/22
185.225.128.0/22
212.81.60.0/22
IPv6:
2a04:e240::/29
Signature Algorithm: sha256WithRSAEncryption
3b:b1:52:02:76:a7:00:8b:c0:54:b0:e2:0a:77:3d:fc:3f:21:
a2:d1:ab:2c:fa:58:30:f8:b8:b8:d4:ac:f6:74:3c:74:ba:61:
f9:e2:10:9d:26:3c:83:39:ff:31:3c:81:23:e5:a1:87:86:37:
ba:7e:bd:31:07:f3:90:fe:ba:06:0a:0b:b0:3f:4e:d1:0c:40:
b5:63:26:a7:cb:e1:b8:c1:13:9e:2b:91:a0:74:6f:ae:f0:be:
5c:fc:c9:ca:63:c2:cd:5e:b2:db:65:a3:f2:52:2c:e5:aa:14:
fd:1f:66:0b:e4:21:91:51:bb:c4:5b:ea:4a:d6:6e:50:b5:0f:
6b:27:b6:d5:55:44:7c:db:fb:3e:11:5c:82:5e:74:db:9b:d4:
79:b2:91:5c:48:7e:d4:ab:87:bc:07:2e:39:07:3d:de:9e:07:
47:20:da:0e:3e:87:b0:10:7d:f5:25:f0:94:be:c7:7a:a0:3f:
0e:64:81:03:f4:b6:76:03:da:53:f9:0e:6a:59:6c:ff:a1:88:
de:eb:1b:85:3a:62:b7:8f:2e:5a:99:b4:72:75:d8:69:eb:12:
7b:09:56:11:f1:e9:94:3a:be:92:7c:b0:16:65:a8:3b:2e:6a:
4c:8c:d3:9d:3a:b7:54:ec:01:30:85:6f:67:ce:e0:bb:93:0d:
cf:52:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:46 2024 by rpki-client on console-ams.rpki-client.org