Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/LpXHufEA_OE4GdAmP7TeFwbNPCU.roa
File: LpXHufEA_OE4GdAmP7TeFwbNPCU.roa (raw, json)
Hash identifier: xtG44tn8+CNlodWmgVDGLg3ppauGGBSbOUgPh4XOnbs=
Subject key identifier: 2E:95:C7:B9:F1:00:FC:E1:38:19:D0:26:3F:B4:DE:17:06:CD:3C:25
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 3903F275
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/LpXHufEA_OE4GdAmP7TeFwbNPCU.roa
Signing time: Mon 14 Feb 2022 11:19:48 +0000
ROA not before: Mon 14 Feb 2022 11:19:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 85.254.76.0/22 maxlen: 22
85.254.80.0/22 maxlen: 22
85.254.104.0/21 maxlen: 21
85.254.112.0/21 maxlen: 21
85.254.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 956559989 (0x3903f275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Feb 14 11:19:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e95c7b9f100fce13819d0263fb4de1706cd3c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f2:ed:eb:9d:bf:b2:e3:09:f5:48:39:d0:c9:
da:6b:b2:98:b8:55:9d:af:6b:b4:2c:3e:44:c5:66:
ee:19:0c:84:0a:96:4c:3a:ba:6b:76:45:56:bb:02:
c8:f7:68:36:54:18:46:04:b0:a5:c9:1a:41:65:5e:
93:3b:ee:4d:2b:0b:ce:e7:9b:6a:be:0d:fe:48:8b:
e3:df:97:60:2c:36:1b:2e:da:1d:f2:6a:12:9a:22:
cc:20:be:16:89:20:0a:f3:3e:9a:ec:df:d4:56:c7:
ea:3d:b1:a8:15:95:1e:c1:6a:30:49:e0:07:b4:5d:
07:dd:c2:f5:c8:7a:15:9f:02:d6:97:8d:b1:2b:0f:
36:63:09:bf:fe:ba:6e:a0:97:d0:bb:51:fa:14:d8:
f0:2d:95:a1:a7:d6:c6:4a:8e:64:48:a9:73:b8:d8:
30:1e:0c:1f:ff:e5:2b:41:c7:aa:f8:80:9f:d7:e6:
b1:f1:ef:c2:c5:13:a7:29:fc:d7:19:c7:34:b8:9f:
bd:a9:3f:90:a9:c5:1c:5a:0c:80:d7:40:7f:c3:c6:
55:cd:0d:19:55:bc:bf:d1:07:b4:71:8c:ce:d9:a3:
3f:a6:fc:98:a2:4c:1b:58:19:9f:ea:53:8e:76:40:
55:1f:79:e9:63:2f:df:48:2c:34:36:aa:5d:03:38:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:95:C7:B9:F1:00:FC:E1:38:19:D0:26:3F:B4:DE:17:06:CD:3C:25
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/LpXHufEA_OE4GdAmP7TeFwbNPCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.76.0-85.254.83.255
85.254.104.0-85.254.119.255
85.254.128.0/22
Signature Algorithm: sha256WithRSAEncryption
50:13:3d:3d:8d:eb:97:2b:75:bb:49:bb:90:c1:4c:f5:3f:7b:
65:83:a1:dd:05:2e:68:76:66:48:3c:de:3d:89:9b:6c:63:9e:
9b:b9:4a:e6:f3:78:ab:c2:37:7c:dd:c8:cc:df:94:97:89:90:
f3:a3:57:55:90:ed:3b:37:cb:20:8d:99:d1:7b:34:e5:36:30:
e0:a2:8b:a8:be:e9:46:4d:19:9e:cf:79:f7:e3:dd:a0:86:c8:
dc:5c:16:ad:8a:05:56:31:77:cf:0d:e4:bb:c6:ef:52:fe:73:
54:25:30:69:6a:f4:76:4c:a6:9b:6f:bc:47:6d:c5:b6:c2:9b:
b9:5a:12:db:36:55:53:bd:90:1b:f4:35:ca:57:28:48:b8:bd:
0f:d8:7a:82:56:28:62:5d:53:46:f4:86:76:09:7f:ef:76:64:
4f:aa:93:4b:3b:08:dc:24:fd:20:1f:01:3d:34:45:8d:af:9f:
49:10:ec:71:95:0a:1a:99:af:27:94:3a:5c:22:2d:a4:90:fb:
aa:21:e6:37:a1:ef:60:56:c3:ed:72:bc:20:63:67:ad:b8:07:
88:25:91:c9:ed:27:41:34:05:8b:ac:c1:86:bb:d2:16:96:7d:
77:51:32:f4:80:67:27:cf:80:46:a3:80:f8:72:7a:6c:1d:dd:
77:33:a1:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-ams.rpki-client.org