Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/LbduN-KHwttCndOG62gHIifDtRc.roa
File: LbduN-KHwttCndOG62gHIifDtRc.roa (raw, json)
Hash identifier: s0zN76TLWYlsuCM8OeONwotQmYie7s47dmUbYEvgjmM=
Subject key identifier: 2D:B7:6E:37:E2:87:C2:DB:42:9D:D3:86:EB:68:07:22:27:C3:B5:17
Certificate issuer: /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Certificate serial: 018466A90013332BBE79551E29AB1FEBFB26
Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/LbduN-KHwttCndOG62gHIifDtRc.roa
Signing time: Fri 11 Nov 2022 12:27:42 +0000
ROA not before: Fri 11 Nov 2022 12:27:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202813
IP address blocks: 185.178.136.0/22 maxlen: 24
2a0b:fa80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:66:a9:00:13:33:2b:be:79:55:1e:29:ab:1f:eb:fb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9
Validity
Not Before: Nov 11 12:27:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2db76e37e287c2db429dd386eb68072227c3b517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:3c:d6:b3:d3:59:24:15:9a:05:a7:85:42:
f8:ce:82:d7:52:83:f4:02:9b:30:c5:93:bd:ab:28:
78:f5:7d:2c:0d:8e:68:1e:46:18:1a:d5:d7:2a:e9:
b5:a2:b7:f6:5d:2d:6b:6c:80:ab:ed:fd:14:34:04:
cc:47:42:ca:b6:f3:f8:1e:a0:63:4a:ff:de:4c:d3:
fa:2c:5b:c5:08:f8:12:c6:b0:bd:dc:05:41:30:d5:
50:ad:c3:a7:d2:22:86:b4:ee:55:64:eb:d0:06:54:
d5:7d:53:02:38:f4:3e:5f:c9:b2:db:2a:f9:95:32:
a6:ab:5c:37:20:1b:b6:b5:4c:af:70:3f:4b:6d:cf:
a3:bf:f7:7f:c6:44:5e:96:2a:97:fc:4b:91:e2:e7:
25:3d:5f:a6:d9:ba:42:3b:35:32:07:48:cb:fc:af:
d3:d3:c6:d4:39:95:42:73:69:b0:f2:85:67:a2:6b:
1f:59:90:39:46:77:cb:dc:bf:ec:5a:39:e4:41:53:
13:83:06:ba:56:a3:65:cb:6e:4a:b1:ed:2a:3a:e8:
d1:b8:19:da:0d:8e:f9:df:6e:f5:dd:3e:39:45:1a:
1b:06:50:38:a4:24:35:b8:55:f6:98:57:6b:e6:72:
25:24:36:50:45:32:a6:b2:e9:fa:87:28:ac:93:01:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B7:6E:37:E2:87:C2:DB:42:9D:D3:86:EB:68:07:22:27:C3:B5:17
X509v3 Authority Key Identifier:
keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/LbduN-KHwttCndOG62gHIifDtRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.136.0/22
IPv6:
2a0b:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
73:99:94:46:c9:e1:08:7c:6f:08:57:31:8a:7d:2c:af:2e:46:
6d:ea:43:2a:38:e7:bf:f0:6e:fa:49:5e:0c:73:60:00:cb:24:
13:21:4c:83:96:d0:60:05:bb:45:79:75:97:4b:cf:27:d6:8a:
75:5d:e6:21:ba:dd:67:99:d1:c2:28:93:eb:fb:e6:e9:19:fc:
df:3d:63:60:d1:45:dc:98:d0:3c:09:62:d0:82:70:87:18:d0:
25:19:b1:ef:51:27:d1:03:db:bd:bc:fe:86:03:b9:96:f1:82:
41:b0:87:2f:58:51:8b:86:ce:5a:86:1a:ba:7d:8f:8f:69:4b:
42:e8:9c:13:cd:29:bf:2c:4a:de:d1:2b:32:b5:bf:51:47:98:
e4:fa:8c:34:ec:b7:fd:87:d9:f9:65:de:f3:2c:59:27:18:2f:
68:4a:d7:8a:a0:8d:4b:16:e3:c4:32:0d:45:2e:0a:4d:df:b2:
f8:bc:32:95:4c:74:07:7a:b9:1a:19:8d:c6:48:76:d7:6d:00:
8b:51:c3:45:e4:bb:c5:b7:66:e3:0e:14:05:8a:7e:17:b9:15:
5c:57:51:8b:c5:1e:d8:73:15:98:40:e4:0d:92:d9:8d:14:69:
e1:6b:49:be:31:16:57:a6:d7:b5:74:29:f0:04:cc:2b:b0:a6:
9b:99:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:07 2025 by rpki-client