Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LQyYO8ZeqvJqQRrvBTwIMPuS4yE.roa
File: LQyYO8ZeqvJqQRrvBTwIMPuS4yE.roa (raw, json)
Hash identifier: UvzUuoGl6zcGiurN8TkVCE7qGuVWY31wqGu4v7IbTtw=
Subject key identifier: 2D:0C:98:3B:C6:5E:AA:F2:6A:41:1A:EF:05:3C:08:30:FB:92:E3:21
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28402E12
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LQyYO8ZeqvJqQRrvBTwIMPuS4yE.roa
Signing time: Sat 01 Jan 2022 16:09:56 +0000
ROA not before: Sat 01 Jan 2022 16:09:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207677
IP address blocks: 92.253.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675294738 (0x28402e12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d0c983bc65eaaf26a411aef053c0830fb92e321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:5d:0d:90:ce:f0:66:c4:76:e0:cf:08:5e:
b6:12:63:93:6e:57:b9:e1:3c:d8:ad:a1:24:28:36:
fe:b0:3c:78:1e:8d:f1:3b:20:84:b0:8b:0d:ee:20:
55:55:95:38:2c:cd:43:0e:b2:a5:4d:8a:df:73:6a:
aa:79:1c:e0:4d:1f:8a:b0:63:c0:24:8b:4d:f9:88:
2e:a4:65:30:d2:3f:ab:d1:f4:ac:c1:12:ff:00:9e:
6f:33:1f:f1:cc:cd:1d:47:b2:f4:9b:ee:74:e0:ad:
ca:1c:0e:c6:ce:d8:1e:7a:27:8e:ea:69:fa:eb:2b:
a9:b3:e7:23:e3:f1:dd:ed:5a:cf:fd:df:8b:c6:d9:
7d:61:99:8e:c8:aa:41:d4:83:c2:52:b7:19:1d:89:
7d:ab:cb:89:f2:72:ab:3b:ba:b7:56:a5:0c:bd:3e:
7d:ad:09:9d:af:4b:2b:b2:69:9b:a1:a0:6e:23:24:
37:b7:da:ea:c4:2a:6e:f7:10:8a:0f:b9:8e:20:34:
b4:fe:c7:0f:09:9d:a6:15:70:89:36:a0:21:f5:d5:
9d:5d:9d:d8:bb:c0:bf:d6:7d:25:e9:fd:00:b8:26:
51:f9:08:1a:d2:3e:8e:2e:72:89:82:e3:9c:80:3f:
0c:2e:bc:76:75:08:6d:01:c4:7a:40:fe:d1:ee:32:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0C:98:3B:C6:5E:AA:F2:6A:41:1A:EF:05:3C:08:30:FB:92:E3:21
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LQyYO8ZeqvJqQRrvBTwIMPuS4yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.234.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c6:eb:23:d8:4f:b6:8f:35:4a:ff:76:84:13:35:3b:1d:f2:
1a:dd:2e:04:7f:7d:32:80:8a:4f:45:24:30:a7:ed:3c:47:77:
b0:2e:04:30:a2:e6:5b:5c:c4:2a:ba:cb:11:26:53:66:62:0e:
21:17:9d:4b:37:1f:fb:85:9f:26:63:9f:ff:3f:45:4d:9c:28:
07:28:dc:bc:87:b3:52:ce:50:81:32:b5:ea:e5:c0:48:b4:11:
43:23:76:56:c4:09:11:e3:6d:93:16:89:17:da:8b:95:34:c8:
d0:2c:84:55:a8:23:16:7f:c5:2a:91:b5:46:ef:93:5f:69:8b:
0c:21:55:fa:35:c1:86:f2:e5:54:19:be:ab:8f:d2:05:f1:21:
8c:44:2f:1c:2a:9b:30:0b:c6:cb:b7:3b:c2:fa:22:38:8c:8f:
8b:45:c9:4a:ac:d8:28:c5:1c:c4:f3:92:4e:03:d5:e0:3a:02:
bd:82:79:bd:33:05:f9:03:46:44:6c:14:db:dc:c5:c2:c1:2f:
58:8c:ed:a7:34:cb:29:ec:ce:f4:d5:11:55:83:c4:f0:b1:f0:
88:bc:b2:53:48:4d:2c:b0:c8:16:02:b2:d8:f7:1c:c7:f4:bd:
14:a2:2d:85:b3:11:a1:29:b7:ec:a1:39:9b:f7:ec:01:db:00:
38:67:41:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:18 2025 by rpki-client