Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/LcdnMM_kufcY0IMKAhn0-sXFFsM.roa
File: LcdnMM_kufcY0IMKAhn0-sXFFsM.roa (raw, json)
Hash identifier: /W03PNP9jcee11V8BYl9dmtJP2P+5hRixk4vnRmtAIo=
Subject key identifier: 2D:C7:67:30:CF:E4:B9:F7:18:D0:83:0A:02:19:F4:FA:C5:C5:16:C3
Certificate issuer: /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Certificate serial: 0A032044
Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/LcdnMM_kufcY0IMKAhn0-sXFFsM.roa
Signing time: Sat 01 Jan 2022 15:03:35 +0000
ROA not before: Sat 01 Jan 2022 15:03:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205185
IP address blocks: 185.226.108.0/22 maxlen: 24
45.129.172.0/22 maxlen: 24
185.136.236.0/22 maxlen: 24
2a0d:8600::/29 maxlen: 48
2a0f:dc40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167977028 (0xa032044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Validity
Not Before: Jan 1 15:03:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dc76730cfe4b9f718d0830a0219f4fac5c516c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:cd:23:44:e7:95:f3:23:a6:c0:39:67:91:
ed:79:25:ba:db:15:57:86:43:75:1d:76:91:32:2a:
a4:e0:2e:93:bc:61:b1:ab:73:22:dc:e4:81:4e:31:
ad:0e:91:11:2d:f5:ec:86:76:98:bf:91:29:97:e3:
dc:de:c1:b2:d3:1e:7f:7b:3b:fc:66:08:6d:b6:09:
2e:75:3e:ea:f2:55:f8:12:2c:b8:f8:dc:93:0e:cc:
f2:47:58:50:1f:8b:e1:9e:25:d0:0a:40:17:76:24:
40:89:1f:9c:7c:ad:88:24:8a:2b:ce:7d:bc:3a:f9:
df:7c:23:14:02:9d:ad:70:d2:a7:12:7d:bf:30:07:
49:e0:c1:6e:79:1e:7b:fd:7b:e8:37:27:b8:ca:93:
12:e2:45:df:86:2b:08:96:89:f7:64:37:18:86:44:
37:fb:86:71:76:8b:d5:87:f6:de:ed:a3:b1:a4:87:
08:61:ff:a1:83:79:15:e9:ed:5c:6e:ad:af:9b:d8:
49:a8:ce:f4:36:38:e4:f2:3e:14:ab:15:7f:7a:30:
79:ce:8b:90:45:18:dd:01:60:e3:1d:91:21:0f:bc:
d7:f5:31:e6:ed:94:c2:a5:3c:8a:35:98:a3:53:1f:
24:8e:93:55:d6:bb:03:65:d9:c5:62:f1:fa:d9:f5:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C7:67:30:CF:E4:B9:F7:18:D0:83:0A:02:19:F4:FA:C5:C5:16:C3
X509v3 Authority Key Identifier:
keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/LcdnMM_kufcY0IMKAhn0-sXFFsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.172.0/22
185.136.236.0/22
185.226.108.0/22
IPv6:
2a0d:8600::/29
2a0f:dc40::/29
Signature Algorithm: sha256WithRSAEncryption
b0:4f:f8:54:de:2f:79:f8:1a:91:64:e1:a5:d2:14:a1:31:11:
df:b9:ea:b5:51:f9:d9:b1:ac:e9:a2:9f:e3:ed:30:9d:7d:bf:
d0:90:c1:24:1c:d1:0b:e9:8e:87:8a:a2:61:67:d9:4c:fe:3f:
8b:b1:67:9b:38:cd:12:df:b0:f9:76:66:c6:98:fb:b1:5f:32:
14:31:53:b0:12:a8:12:bd:a7:0d:5f:c0:ec:f4:8e:78:c4:2f:
63:94:90:52:45:4e:cf:15:99:c2:55:0c:f8:9f:d8:36:a4:cc:
75:4d:29:0e:a7:7b:87:61:03:bc:99:fe:dd:de:70:3d:21:e1:
73:5b:6d:66:53:cd:d9:be:06:62:f3:06:3e:f3:fd:77:7d:f8:
26:3b:05:2d:84:96:77:ca:c0:8b:d8:30:0d:55:ea:c1:f3:a1:
a8:a4:33:32:8e:39:d8:dc:b2:da:65:2b:e4:06:2e:3c:bc:f7:
be:63:1d:65:37:31:12:53:67:1a:48:35:2d:da:f7:47:86:89:
54:7e:23:5b:0f:76:4d:b3:45:77:5b:b3:76:47:ee:7e:8c:59:
f1:64:e2:25:f8:12:53:76:97:7c:88:5f:c1:fa:8a:97:f8:21:
35:22:80:1f:4c:9d:1a:5b:1a:4b:bf:70:c9:6c:13:03:17:af:
ae:42:93:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:32 2023 by rpki-client on console-ams.rpki-client.org