Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/LHGEekvB2UzuDLWmXy3YzGFQeQ4.roa
File: LHGEekvB2UzuDLWmXy3YzGFQeQ4.roa (raw, json)
Hash identifier: s9XS4vWDdojFP+TQDX/ujfukbSneE86oWxzxTO5G3lg=
Subject key identifier: 2C:71:84:7A:4B:C1:D9:4C:EE:0C:B5:A6:5F:2D:D8:CC:61:50:79:0E
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 018571D7A0D5047D298C2FF1056EC216BBE5
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/LHGEekvB2UzuDLWmXy3YzGFQeQ4.roa
Signing time: Mon 02 Jan 2023 09:37:14 +0000
ROA not before: Mon 02 Jan 2023 09:37:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15511
IP address blocks: 185.115.103.0/24 maxlen: 24
185.115.102.0/24 maxlen: 24
185.115.101.0/24 maxlen: 24
185.115.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:a0:d5:04:7d:29:8c:2f:f1:05:6e:c2:16:bb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Jan 2 09:37:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c71847a4bc1d94cee0cb5a65f2dd8cc6150790e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:80:0b:ca:54:6d:ef:4e:bc:37:40:c2:ed:
f0:d7:74:1e:d2:26:dc:36:69:db:ac:41:b8:9f:3d:
93:bc:fe:10:a7:f3:a7:c9:24:b6:84:80:96:c1:84:
df:68:bc:4a:56:7d:ac:e0:f2:c2:bf:d5:7d:e8:21:
81:16:ec:df:c8:53:b8:b2:5c:e7:b3:17:53:b1:70:
9f:2b:99:10:91:5a:a2:cb:95:a5:8e:35:0f:ce:77:
3a:54:dd:d1:49:8e:b7:c0:b8:c7:3a:cd:b4:b8:1e:
05:9a:1e:84:31:9b:d3:fa:fd:c6:0b:2d:bf:0c:e1:
07:8e:95:5c:a9:9c:34:7e:fd:d2:85:dd:d9:8a:40:
0b:62:37:5e:ad:51:ed:ac:a2:d3:cd:fa:39:90:21:
1b:b1:21:09:84:e7:d1:bc:94:85:d4:20:e5:36:7f:
0a:41:74:af:3e:dc:66:5c:b5:7d:54:ff:d6:04:05:
70:50:01:27:df:72:b4:f7:20:3b:42:8c:79:91:2b:
93:fe:c0:77:b6:f8:52:cd:f1:2c:43:df:28:a8:2a:
b7:c7:10:aa:9e:bd:71:ab:17:3a:46:7d:f9:23:57:
1c:f7:ac:c8:26:5c:51:bb:53:ce:92:83:a7:3e:7c:
7c:5a:df:4e:78:47:a9:96:77:7e:fe:94:e7:d5:f5:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:84:7A:4B:C1:D9:4C:EE:0C:B5:A6:5F:2D:D8:CC:61:50:79:0E
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/LHGEekvB2UzuDLWmXy3YzGFQeQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:47:c3:fb:c9:4f:28:7f:08:0e:90:df:64:09:e1:68:e0:b9:
d2:8b:e3:32:bc:80:03:4a:29:78:27:e3:0d:1f:bf:86:53:3a:
2f:5b:b2:0a:86:55:31:d9:ad:80:6f:43:63:c0:55:64:14:50:
d2:de:1f:f2:a8:3c:87:fb:86:d4:6e:f2:53:71:e2:75:91:ee:
b1:5a:d1:b8:0d:90:b4:2c:3a:1a:fd:1e:3d:a7:c4:e3:5e:52:
e1:d0:1f:c3:92:a6:55:19:2f:88:a7:6d:f0:57:a4:ea:de:5c:
ab:f5:d7:db:cd:14:13:1b:54:01:2a:7b:65:dd:82:db:55:ab:
19:1a:11:c9:10:39:39:46:d9:ef:de:38:a3:d9:98:7f:83:bb:
f3:e8:71:32:31:c0:4a:65:9d:d2:0f:5e:5c:a1:e1:a3:35:7e:
85:fb:06:b0:84:15:27:71:8a:c5:69:19:0c:c3:04:60:cb:52:
ac:eb:9c:82:a6:45:14:18:eb:33:5d:57:09:45:eb:dd:3f:12:
79:db:17:f7:ea:73:1f:5c:53:89:88:62:72:b2:6a:1a:a1:d5:
60:83:da:bd:8e:ef:5d:c8:39:09:30:be:4f:fd:d7:db:52:8a:
79:99:a6:dd:3c:00:25:5a:63:b8:3d:a4:a1:8f:03:42:39:73:
e7:92:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:13:39 2025 by rpki-client