Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/LGygm2v7Xy7NFXsZXZaMPZ9ZUGc.roa
File: LGygm2v7Xy7NFXsZXZaMPZ9ZUGc.roa (raw, json)
Hash identifier: S7iD5fMy1/xdZ8+jX42eBE2wzpf75I+//K8ZG8dZ7EQ=
Subject key identifier: 2C:6C:A0:9B:6B:FB:5F:2E:CD:15:7B:19:5D:96:8C:3D:9F:59:50:67
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 0A115EC1
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/LGygm2v7Xy7NFXsZXZaMPZ9ZUGc.roa
Signing time: Sun 12 Jun 2022 09:38:02 +0000
ROA not before: Sun 12 Jun 2022 09:38:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204310
IP address blocks: 185.253.175.0/24 maxlen: 24
185.253.172.0/22 maxlen: 22
185.253.172.0/24 maxlen: 24
2a0c:3ec0::/29 maxlen: 29
2a0c:3ec7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168910529 (0xa115ec1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Jun 12 09:38:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c6ca09b6bfb5f2ecd157b195d968c3d9f595067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:44:d1:60:c1:c9:b1:94:da:7e:18:f1:db:
9d:44:81:10:f0:7e:04:5f:0e:6c:fd:45:47:2a:04:
d7:94:a0:68:18:4e:47:ed:2d:9b:ac:e6:02:da:40:
19:dd:53:f7:03:d9:0b:0b:15:1b:36:1c:2d:ca:71:
e5:30:f9:6d:d8:d5:ee:37:88:6c:a3:41:b3:59:fe:
50:15:f6:4e:89:e1:3e:3c:ab:14:a2:93:b9:35:85:
2d:59:95:75:eb:3c:b1:26:48:dc:06:71:61:b9:90:
87:01:a6:82:d4:17:ec:73:e4:59:d4:a5:ca:d6:49:
83:e0:cb:39:28:ff:d1:27:41:89:27:60:a3:23:b3:
86:2a:26:1e:59:b4:ca:e5:d0:ac:bc:1c:1c:86:97:
d0:bc:d1:63:5e:20:6a:6c:63:ff:c2:29:eb:74:e4:
cc:3d:1c:43:ad:51:dc:06:5c:d0:43:4e:3b:81:5b:
8e:2a:2b:69:3b:88:79:6e:15:80:24:2d:f4:6a:ad:
fd:38:f3:c5:c5:62:11:18:3a:1a:04:be:76:48:44:
03:bd:ad:55:85:8c:5b:7b:57:a8:a4:c3:cf:82:55:
d4:d3:54:9e:d5:1c:ba:ea:35:3f:7f:04:ba:a8:a9:
a2:8f:f8:c7:02:a8:55:50:53:ac:ff:2c:4b:2f:3a:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6C:A0:9B:6B:FB:5F:2E:CD:15:7B:19:5D:96:8C:3D:9F:59:50:67
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/LGygm2v7Xy7NFXsZXZaMPZ9ZUGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.172.0/22
IPv6:
2a0c:3ec0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:9b:bf:b3:f7:a3:50:88:0a:59:9b:bc:14:c9:6e:cc:42:f6:
d4:b3:5f:6f:93:3c:ea:86:76:78:86:b3:26:b4:e8:69:56:71:
ea:42:17:a1:aa:f7:03:d7:5c:5e:e1:79:b3:99:0a:3e:1b:a1:
2b:84:62:6e:4d:c8:b6:72:14:3c:0b:5a:50:2c:81:e1:48:aa:
b7:01:0d:15:1c:84:0d:11:77:8e:ba:f2:1e:b3:b0:59:dc:b2:
e9:8c:be:08:e2:60:01:00:97:5b:4b:19:44:a5:58:29:f8:8a:
80:ae:98:fb:ce:d2:0b:95:20:dd:a1:3d:a3:6c:1c:02:38:c9:
73:ea:8a:83:f7:6b:c6:e1:1e:a7:fd:8a:41:bb:b6:6b:45:93:
d9:79:2c:61:ed:9e:33:a2:30:08:2f:ae:d5:d0:d8:f3:f8:e7:
ba:bb:74:56:ec:6e:97:ff:02:bb:fa:41:5f:0d:9e:8e:59:86:
a7:77:a8:e7:c4:fe:96:63:7e:89:7c:a8:1c:b2:a6:02:88:35:
ab:06:96:d1:37:ba:42:fa:d5:d2:c7:b8:be:b4:62:ec:6d:73:
eb:14:49:52:22:38:b1:e6:fa:43:fd:83:b7:35:a9:fb:90:b0:
e5:c9:e7:cc:12:66:71:1f:1e:0b:48:d5:db:0d:e5:80:ab:2f:
88:48:80:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-fra.rpki-client.org