Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/LXH1zjBOaKu6G4BCKKo4FXAtiKg.roa
File: LXH1zjBOaKu6G4BCKKo4FXAtiKg.roa (raw, json)
Hash identifier: oM8Fl73DvuK3AKbUfxqMDMAEIWE8HJo4xbgYArVlHxM=
Subject key identifier: 2D:71:F5:CE:30:4E:68:AB:BA:1B:80:42:28:AA:38:15:70:2D:88:A8
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01826C9D96CBA2A7F3D8CCA2ABD95AB6C1E1
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/LXH1zjBOaKu6G4BCKKo4FXAtiKg.roa
Signing time: Fri 05 Aug 2022 06:07:23 +0000
ROA not before: Fri 05 Aug 2022 06:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212219
IP address blocks: 185.115.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6c:9d:96:cb:a2:a7:f3:d8:cc:a2:ab:d9:5a:b6:c1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Aug 5 06:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d71f5ce304e68abba1b804228aa3815702d88a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d6:1e:bb:34:8b:b3:4a:00:1f:f2:e4:08:9b:
39:3b:3e:80:68:64:77:82:d4:78:c4:8a:8c:5b:49:
53:bf:da:42:b8:56:a3:d4:c6:2f:7c:8f:ea:d4:7b:
54:f0:50:68:77:f0:d3:dc:60:f9:79:02:2a:63:f8:
ea:e9:72:67:ff:96:1b:45:7a:e6:fe:4e:de:57:6c:
c6:d0:97:6a:72:aa:57:67:e8:f0:83:95:be:b8:a2:
94:40:2e:74:2c:cf:7b:ae:cb:1c:ab:d1:bf:54:f2:
dc:cf:ed:7e:80:eb:7c:f0:9f:30:2b:4a:26:99:65:
a0:d1:f9:a1:79:19:f3:2f:d9:99:f8:77:54:ab:b9:
34:ec:4e:1c:31:38:5a:47:7e:75:d7:89:f9:04:8b:
3f:d4:fa:08:0f:c3:d6:7f:b9:ec:68:96:4d:a3:ab:
27:b6:7a:f7:76:72:65:63:60:e5:a8:67:aa:05:b7:
62:aa:c9:f0:91:14:4a:7b:32:7e:a8:89:cf:a7:75:
f5:d7:72:c5:96:47:a0:06:88:d3:a7:f4:71:67:d4:
db:40:b2:0f:2a:30:81:48:a2:84:be:72:90:de:0a:
1b:ed:51:2b:f6:76:d2:94:41:94:30:72:d4:6c:25:
84:dc:4c:04:6d:b8:c6:b1:35:81:39:2b:8b:ab:33:
1a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:71:F5:CE:30:4E:68:AB:BA:1B:80:42:28:AA:38:15:70:2D:88:A8
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/LXH1zjBOaKu6G4BCKKo4FXAtiKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
00:97:bb:91:0f:2b:b6:e4:d8:b3:57:74:da:68:3d:ad:d9:08:
40:8c:7c:e8:fd:e2:1b:81:1a:64:97:7f:0c:d0:04:50:e3:ce:
86:8b:97:33:6a:14:5e:4b:64:84:b8:7e:7b:e1:11:1f:cc:27:
e4:ce:a7:c1:24:aa:9b:49:6a:dd:29:7f:84:b7:2c:5e:88:fe:
62:41:f4:32:f2:d2:1b:40:fd:e3:ad:0b:e5:3e:92:d8:ca:9a:
f1:6e:5e:fc:f0:ea:82:e1:fd:77:0e:09:68:92:19:e8:50:18:
df:cc:4f:4a:7f:58:da:ed:1b:53:fb:b1:a4:61:1a:c8:fc:6f:
1a:96:22:6b:29:b9:0d:3b:08:a0:3b:7f:64:c1:dc:e9:5c:9b:
a3:4c:62:be:45:63:c2:48:ba:a7:67:db:db:5b:b7:ac:e8:6b:
73:d9:cf:22:32:ec:51:01:67:4a:9e:a4:90:cd:a8:30:22:a1:
c1:31:6c:78:ec:46:54:0d:cf:86:52:0d:aa:87:0d:1b:c4:c7:
8f:51:ae:07:02:6b:38:24:1f:bc:7c:d9:7b:8c:e0:c7:bc:79:
4f:6b:23:9a:e4:42:f2:cb:5a:28:40:3f:5d:fc:50:d0:fe:43:
f3:d6:81:6a:12:89:9b:a5:ee:5e:72:27:2b:e8:4f:06:62:fd:
05:e6:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:27 2023 by rpki-client on console-fra.rpki-client.org