Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/LdRgVO26OFzhotHWebGqwhWd8gw.roa
File: LdRgVO26OFzhotHWebGqwhWd8gw.roa (raw, json)
Hash identifier: FbFQ1jFMik7g91u7Z6TPEFEoKTkHYaR5I0KBoULwaLs=
Subject key identifier: 2D:D4:60:54:ED:BA:38:5C:E1:A2:D1:D6:79:B1:AA:C2:15:9D:F2:0C
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 11725388
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/LdRgVO26OFzhotHWebGqwhWd8gw.roa
Signing time: Sun 19 Jun 2022 23:30:44 +0000
ROA not before: Sun 19 Jun 2022 23:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204007
IP address blocks: 185.185.216.0/22 maxlen: 22
185.185.218.0/24 maxlen: 24
2a0b:6580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292705160 (0x11725388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Jun 19 23:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dd46054edba385ce1a2d1d679b1aac2159df20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:9c:a5:b3:cc:95:5c:af:f2:f3:ae:c4:8b:
2c:f1:48:82:d6:cf:6b:a9:43:f3:21:20:d0:40:de:
7c:d2:22:4f:8f:51:c5:96:b1:13:21:e4:fd:80:2c:
6c:04:4c:a4:aa:0a:a6:16:80:27:b6:fe:89:07:ab:
08:bc:7c:31:0d:d1:9e:fe:2c:5a:eb:ac:14:64:a0:
a4:c2:bd:fb:a6:a2:19:48:ab:90:25:62:72:68:e6:
cd:bf:f1:73:e1:de:77:dd:9f:f6:d2:e1:c3:08:6d:
7d:1f:b7:d3:79:e8:dd:a6:f7:fc:ea:16:7f:45:03:
a0:b5:39:6f:25:7b:f3:0f:9a:10:27:85:88:7e:37:
d6:41:5d:95:70:9e:13:c5:08:44:e7:ba:6b:b5:0b:
05:40:de:69:cd:38:77:40:76:2d:f4:63:32:8f:f5:
1e:16:c2:c8:2c:78:30:bb:ff:1e:9c:a0:a0:e9:5c:
92:e1:f9:d6:06:54:0e:06:38:fb:e5:8c:99:ad:71:
e9:79:a1:08:29:1a:e4:32:99:34:49:a4:e9:00:34:
4f:03:79:af:3b:07:1f:20:b3:a2:4b:2b:e7:48:17:
8a:6d:ae:38:2c:8d:9e:c1:f1:b6:2c:4a:f4:ab:9a:
df:b5:e8:56:92:2e:56:db:13:4f:1c:1a:66:f9:f8:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D4:60:54:ED:BA:38:5C:E1:A2:D1:D6:79:B1:AA:C2:15:9D:F2:0C
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/LdRgVO26OFzhotHWebGqwhWd8gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.216.0/22
IPv6:
2a0b:6580::/29
Signature Algorithm: sha256WithRSAEncryption
0e:33:c4:77:19:78:b3:5d:69:f2:ae:fc:6f:47:ac:3d:cd:9b:
22:e4:98:77:f4:6e:74:24:df:c8:02:13:44:33:a4:a4:04:25:
75:cc:cc:bd:b7:af:59:f6:b6:5f:20:c9:7e:b7:f6:39:3f:54:
f0:d8:75:6c:f8:54:c5:ab:91:35:c4:d8:d3:2a:c4:c2:96:41:
77:a1:42:59:79:2d:82:67:35:66:f8:a8:6e:18:64:20:c6:c8:
c0:8b:0b:9a:87:95:fa:f7:73:31:a4:9e:c6:98:df:2a:0c:fe:
0c:34:2c:6d:1a:3b:2b:ea:a6:f2:0d:16:00:2f:9f:c1:55:9e:
38:e8:17:68:6c:92:b9:df:1b:8a:20:4f:b3:5d:17:16:a6:2c:
03:29:e6:fa:f7:70:4d:b8:f4:4d:2d:29:0b:8e:80:59:08:e8:
1f:37:e5:8a:ae:80:05:f4:3d:58:5c:29:dc:dc:5a:a7:ba:69:
17:3d:33:8f:6e:dc:50:7c:7d:d0:24:1f:52:a5:10:ed:53:3f:
49:17:b9:07:9b:09:5c:86:96:4a:fa:eb:31:d7:de:b1:31:66:
44:ca:66:4c:7f:df:91:ed:00:fc:1c:54:c1:3a:2c:f8:4f:0b:
cb:1f:a0:79:d7:87:32:a2:bf:0d:27:db:a1:3d:24:e9:49:fb:
1d:0a:73:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:02 2024 by rpki-client on console-fra.rpki-client.org