Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/LH1sPiwJR9iaEzZjJODfyCA4y0I.roa
File: LH1sPiwJR9iaEzZjJODfyCA4y0I.roa (raw, json)
Hash identifier: 6XwlnSSPwk0fmI+tfUIN6bBRenD91+DtTD1uldpVG6w=
Subject key identifier: 2C:7D:6C:3E:2C:09:47:D8:9A:13:36:63:24:E0:DF:C8:20:38:CB:42
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 14B8EE78
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/LH1sPiwJR9iaEzZjJODfyCA4y0I.roa
Signing time: Mon 31 Jan 2022 08:13:06 +0000
ROA not before: Mon 31 Jan 2022 08:13:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41606
IP address blocks: 185.115.132.0/22 maxlen: 22
185.115.132.0/24 maxlen: 24
185.115.134.0/24 maxlen: 24
185.115.135.0/24 maxlen: 24
185.115.133.0/24 maxlen: 24
89.251.176.0/24 maxlen: 24
89.251.176.0/20 maxlen: 20
89.251.178.0/24 maxlen: 24
89.251.177.0/24 maxlen: 24
89.251.179.0/24 maxlen: 24
89.251.186.0/24 maxlen: 24
89.251.183.0/24 maxlen: 24
89.251.182.0/24 maxlen: 24
89.251.185.0/24 maxlen: 24
89.251.184.0/24 maxlen: 24
89.251.180.0/24 maxlen: 24
89.251.181.0/24 maxlen: 24
89.251.190.0/24 maxlen: 24
89.251.189.0/24 maxlen: 24
89.251.191.0/24 maxlen: 24
89.251.188.0/23 maxlen: 23
89.251.188.0/24 maxlen: 24
89.251.187.0/24 maxlen: 24
89.251.188.0/22 maxlen: 22
109.104.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347663992 (0x14b8ee78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Jan 31 08:13:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c7d6c3e2c0947d89a13366324e0dfc82038cb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:82:4f:8e:27:48:15:7d:e9:0f:04:4c:35:
ba:ad:a8:86:fd:61:47:29:7e:53:1b:e2:59:3b:60:
c1:4a:68:61:93:47:2c:15:12:d8:dd:f0:47:77:54:
a5:fd:cf:42:73:18:b6:57:07:21:99:b3:1b:c8:20:
7b:22:68:fe:50:03:24:11:9a:4a:71:46:25:eb:2b:
fa:23:48:8a:89:b7:84:54:f9:0f:70:ef:11:b6:32:
a8:3f:ec:ea:1a:4b:e7:d8:f5:ba:25:0e:06:6f:35:
3a:0d:1b:44:6d:43:27:b6:0b:dd:49:8d:f9:f7:ad:
00:76:94:36:5e:82:f0:eb:87:6b:c2:de:3a:3d:a2:
6f:f1:48:73:83:1b:2e:4f:ca:43:42:75:e5:d5:b8:
6e:8d:d8:3e:72:f1:7f:95:99:d6:f0:4d:94:19:a6:
7a:3c:05:5f:f3:d2:25:92:99:4c:00:be:15:29:cf:
d2:2b:5a:56:38:42:52:a2:67:9c:08:07:4c:ad:35:
8a:56:99:f3:04:89:d0:88:de:f5:84:37:b9:6e:91:
55:c4:e2:88:62:67:b6:7e:73:ab:b7:a4:07:17:63:
40:93:2c:33:4f:11:16:98:db:7e:4c:66:a4:a2:5c:
34:d9:22:b7:21:37:71:eb:45:f4:86:a5:1c:57:a9:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7D:6C:3E:2C:09:47:D8:9A:13:36:63:24:E0:DF:C8:20:38:CB:42
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/LH1sPiwJR9iaEzZjJODfyCA4y0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.176.0/20
109.104.232.0/24
185.115.132.0/22
Signature Algorithm: sha256WithRSAEncryption
78:3a:ea:77:98:10:84:b4:f1:33:91:a1:f3:33:6a:5b:9f:f6:
98:4a:55:2a:b9:eb:99:04:73:27:5c:6c:71:16:0b:1f:a5:86:
0b:39:f7:95:00:30:e8:3f:4a:5d:98:c9:15:e1:81:b1:b3:ed:
8f:a4:2c:a2:52:7c:ac:49:ac:4d:33:01:e0:e1:dd:02:cc:f1:
3f:9e:ce:67:91:5c:c7:f5:ae:ae:43:a5:57:9e:f0:13:02:c5:
f6:bf:e8:d4:9e:ca:1a:98:10:3e:96:69:78:9d:0d:05:9b:f5:
6d:c8:94:00:8d:37:fa:67:ef:a0:a8:eb:9e:19:d0:46:0e:5c:
b1:cc:0c:ee:0c:0e:55:01:6d:44:4b:88:7d:11:40:3e:a4:6d:
50:d7:bd:7d:0c:b0:52:0a:a5:21:f4:30:a3:cc:dd:52:65:47:
53:f2:ce:89:a6:b4:e2:7a:42:05:75:4a:73:7d:9b:04:58:0c:
44:d6:07:c5:17:dd:1d:4b:96:24:53:56:ce:fa:c3:34:6f:31:
1e:98:ac:45:18:ff:6f:0c:fa:80:e3:35:4a:01:eb:44:50:98:
70:26:44:ec:a5:18:74:77:35:8f:86:d8:90:93:f1:9e:60:fc:
9f:dd:ca:62:b4:39:58:46:55:cf:63:de:ab:af:4c:33:34:08:
eb:f0:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:49 2025 by rpki-client