Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/LyBBsbm8Yo9fRXRmGbX1bgAKFp8.roa
File: LyBBsbm8Yo9fRXRmGbX1bgAKFp8.roa (raw, json)
Hash identifier: gcp/NNRy02crTTpYNNuopVs6f9ziY5BYXjFieLIKb3U=
Subject key identifier: 2F:20:41:B1:B9:BC:62:8F:5F:45:74:66:19:B5:F5:6E:00:0A:16:9F
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 070AA29C
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/LyBBsbm8Yo9fRXRmGbX1bgAKFp8.roa
Signing time: Tue 17 May 2022 09:47:29 +0000
ROA not before: Tue 17 May 2022 09:47:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20568
IP address blocks: 45.88.204.0/22 maxlen: 22
45.88.204.0/24 maxlen: 24
45.88.206.0/24 maxlen: 24
45.88.205.0/24 maxlen: 24
91.144.100.0/24 maxlen: 24
45.88.207.0/24 maxlen: 24
2a03:9900:100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118137500 (0x70aa29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: May 17 09:47:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f2041b1b9bc628f5f45746619b5f56e000a169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:0a:69:a0:f8:84:5b:71:49:32:f9:65:2f:
b7:93:cc:0a:b2:b5:0b:3b:ce:db:05:d9:f5:25:35:
fa:df:5c:df:47:90:55:7c:ff:27:d0:66:cf:1f:61:
d3:5c:04:ff:ba:4b:8c:6c:87:c4:59:8c:9f:aa:b0:
8d:89:54:1c:6f:0b:83:27:49:88:33:6f:0c:23:22:
b9:ad:1c:79:f7:f4:f8:35:02:88:a8:bb:cc:b6:62:
c9:2a:06:b3:47:04:67:2a:8f:1f:5e:9c:8e:87:8d:
6d:d3:a7:16:9f:6d:b5:c1:56:d5:a4:55:5d:58:3e:
4c:96:a6:58:fe:1b:9b:bf:10:7b:43:19:c5:3f:66:
84:9e:d5:0f:f5:79:c4:4d:51:b4:45:dc:b8:c3:dd:
18:b6:8a:9b:38:37:aa:cb:57:11:7e:30:e9:04:48:
df:11:7c:53:e8:ee:7d:a8:7d:05:34:af:fc:13:d2:
ce:51:74:ee:8f:ec:76:b3:db:81:55:32:1b:b3:0c:
5b:7f:3f:32:d5:2a:1f:ec:b6:94:b3:50:86:11:78:
34:48:7a:58:2d:90:fd:29:6d:0c:0a:ff:c4:da:15:
ae:dd:66:d7:80:d6:81:ec:98:76:d6:0b:f2:af:ae:
15:8b:f1:6a:4d:80:00:dd:30:fb:fd:b6:2b:89:9e:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:20:41:B1:B9:BC:62:8F:5F:45:74:66:19:B5:F5:6E:00:0A:16:9F
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/LyBBsbm8Yo9fRXRmGbX1bgAKFp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.204.0/22
91.144.100.0/24
IPv6:
2a03:9900:100::/48
Signature Algorithm: sha256WithRSAEncryption
22:b8:5c:92:a0:bc:96:e4:e6:d2:1f:63:97:0a:56:a3:d6:25:
b6:9a:5c:6a:fb:cd:e9:0d:69:7c:ae:17:13:1a:f3:07:5e:23:
d0:bf:f9:16:ad:76:65:52:2b:81:d4:4f:17:8e:de:f7:1a:a8:
56:95:c2:57:9f:c5:b6:31:a7:cd:8a:10:73:27:d2:71:52:bd:
c7:68:ba:9a:13:d7:1b:cf:76:2b:fc:15:cd:06:d3:3c:31:4c:
c5:0f:5d:41:8b:a7:7d:d7:e3:30:da:54:4d:2c:0c:92:80:a5:
fb:01:0d:62:8a:9b:54:63:9e:5f:2f:5d:fc:10:ba:46:00:65:
a6:14:c3:f5:58:11:0a:67:b5:c2:3d:cb:ed:e1:c0:44:f4:30:
11:61:82:c3:70:08:63:f8:9f:73:c3:d5:72:04:e6:9c:c6:74:
91:34:e3:f0:a4:59:96:7b:33:c6:ea:c8:e1:40:6f:bb:35:7b:
21:70:f0:30:15:a5:e7:74:66:d1:d1:e6:85:cf:e1:6b:d6:e6:
04:2a:24:7c:28:44:84:37:83:55:2f:8c:e4:45:60:5a:34:b7:
30:28:68:d1:98:f7:eb:98:21:c9:3b:44:ad:11:78:34:66:ea:
5c:80:3e:41:51:b8:84:95:92:22:21:57:00:38:5b:3e:4f:12:
10:0d:21:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:39 2023 by rpki-client on console-ams.rpki-client.org