Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/LQyukrDk2a2zYT9OF_9C0jg-rGk.roa
File: LQyukrDk2a2zYT9OF_9C0jg-rGk.roa (raw, json)
Hash identifier: rNXv0agBy1+atixw8SipW3zcJRSvooBwLjzIqnAMnpY=
Subject key identifier: 2D:0C:AE:92:B0:E4:D9:AD:B3:61:3F:4E:17:FF:42:D2:38:3E:AC:69
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 018477F7919C80D947C084C23FA616788BBD
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/LQyukrDk2a2zYT9OF_9C0jg-rGk.roa
Signing time: Mon 14 Nov 2022 21:07:04 +0000
ROA not before: Mon 14 Nov 2022 21:07:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202013
IP address blocks: 185.105.248.0/24 maxlen: 24
185.105.251.0/24 maxlen: 24
185.105.250.0/24 maxlen: 24
185.105.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:77:f7:91:9c:80:d9:47:c0:84:c2:3f:a6:16:78:8b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Nov 14 21:07:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d0cae92b0e4d9adb3613f4e17ff42d2383eac69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:45:25:07:8b:3d:8a:19:bf:76:e8:e4:4e:
1b:d7:2c:46:a2:6b:d2:d9:8c:73:6b:70:35:c9:e2:
b0:3e:1b:73:73:2b:01:f4:9a:f0:1f:66:b0:c2:37:
48:9c:b1:08:ae:25:07:03:b8:cd:be:c5:34:e1:c1:
43:f6:d8:48:9d:de:5b:56:2e:a3:88:5f:97:70:e5:
b4:8f:ae:b4:21:55:f0:d8:07:8a:fb:b7:f2:46:bb:
eb:3a:59:f5:93:b5:9c:e7:79:c3:c9:29:e2:bf:d2:
51:39:ba:87:d8:42:6b:79:b5:08:78:bc:c1:25:f9:
c6:2d:9d:65:c4:ba:23:8e:74:a1:92:fb:e3:fc:a5:
0e:8e:da:50:76:b6:b4:8f:2f:a3:78:ad:69:bd:f3:
9f:11:18:d5:c7:e8:c8:85:b7:ac:3e:28:f2:4c:3e:
f4:5a:20:57:22:d6:98:ff:39:18:29:07:3a:cf:02:
64:da:ca:a4:f0:cf:55:19:ce:d9:ac:39:ba:eb:4d:
9c:cd:a7:ab:45:e8:33:2e:59:23:5d:56:27:3b:86:
fd:db:11:a0:e2:74:fd:10:19:f5:65:88:2d:bb:58:
bd:9c:76:d5:4a:6a:64:11:12:dc:f2:86:95:08:47:
73:f5:9d:88:fe:e4:23:c7:0e:9b:96:f6:83:e0:91:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0C:AE:92:B0:E4:D9:AD:B3:61:3F:4E:17:FF:42:D2:38:3E:AC:69
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/LQyukrDk2a2zYT9OF_9C0jg-rGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.248.0/22
Signature Algorithm: sha256WithRSAEncryption
63:23:b4:4e:9f:04:03:51:36:4a:21:7b:f1:e1:dc:4a:fc:f0:
d7:f5:2b:1a:6d:6c:d8:f9:5c:1c:56:aa:5d:2f:08:1c:a9:02:
9f:d0:7a:00:4a:23:a7:cf:97:ad:94:36:d0:b2:56:9d:9a:1e:
dc:fd:a8:c8:92:f6:9b:a5:57:a7:55:d0:3c:c7:73:f2:74:7e:
49:b9:28:d6:17:e3:ca:af:76:6b:98:05:c5:9b:ea:d5:a9:90:
b8:2a:37:60:31:7c:7c:1f:52:83:be:bf:c5:ef:72:33:50:6f:
c4:02:4c:5d:a6:73:70:1b:a6:a4:ca:1d:57:18:65:51:11:8f:
89:bd:74:b4:7f:70:ef:b0:df:b7:51:f9:67:13:d1:44:d7:0e:
83:58:6e:f5:13:7d:74:1a:0e:a7:20:69:52:83:14:7d:ed:7c:
a9:ba:d9:70:68:51:cf:9d:12:35:fd:f8:45:03:a2:ea:57:17:
ba:ed:bb:a6:41:9d:7d:da:95:c2:dd:54:46:f6:e7:b1:d7:16:
78:4e:b7:87:1c:23:2d:e5:fc:d8:78:0e:26:bb:db:1a:01:51:
53:08:58:67:19:42:6a:67:34:9e:95:3e:22:1b:ca:d9:b4:58:
38:1d:70:39:f0:b7:f4:6a:db:01:67:cc:18:c7:43:da:51:ea:
e4:28:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:43 2024 by rpki-client on console-fra.rpki-client.org