Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/LT4hu-4hoP49tXY9depMR1Tc7ws.roa
File: LT4hu-4hoP49tXY9depMR1Tc7ws.roa (raw, json)
Hash identifier: WD7EV89yH8dpL58GUywWk41LjW64ks+XTCRYX0urExU=
Subject key identifier: 2D:3E:21:BB:EE:21:A0:FE:3D:B5:76:3D:75:EA:4C:47:54:DC:EF:0B
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 0A3296E2
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/LT4hu-4hoP49tXY9depMR1Tc7ws.roa
Signing time: Sat 01 Jan 2022 08:59:57 +0000
ROA not before: Sat 01 Jan 2022 08:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 37002
IP address blocks: 185.165.34.0/24 maxlen: 24
185.165.35.0/24 maxlen: 24
185.165.32.0/22 maxlen: 24
185.165.32.0/24 maxlen: 24
185.165.33.0/24 maxlen: 24
2a0b:dc00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171087586 (0xa3296e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Jan 1 08:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d3e21bbee21a0fe3db5763d75ea4c4754dcef0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e8:87:cd:c8:9b:5f:17:23:4c:1b:7e:53:c4:
f8:3c:5b:8a:14:54:0b:bb:e6:50:32:11:5a:4c:7a:
9a:68:be:a6:23:5d:f1:e5:18:54:d4:04:1c:98:59:
be:a6:02:64:4f:57:8d:63:a0:7b:04:3c:da:e4:7d:
6e:e9:3d:b9:90:e6:a4:64:97:13:4e:0b:e1:e4:e9:
77:c7:39:03:04:7b:4a:e3:aa:8f:e1:47:ca:78:40:
6b:9b:87:0d:fd:c2:3a:62:d8:e3:81:89:80:a6:9f:
a6:a5:9c:84:f2:6a:ce:54:18:5d:06:a0:d1:1a:9a:
57:c2:c8:c6:3c:eb:79:a8:5d:7a:f7:45:69:4a:55:
da:f4:76:8a:5b:c0:f6:17:8b:e6:ea:bf:ab:25:19:
95:b0:c8:ab:2c:4a:ef:77:3e:1f:fd:6e:8a:33:0f:
d1:17:4d:48:d7:57:69:90:a8:8c:06:28:ab:48:dd:
4c:20:33:29:22:9c:9a:3f:fa:22:c7:e6:1a:4a:49:
80:86:72:1c:ca:6c:47:7f:50:3c:34:aa:63:14:0a:
ea:9b:98:a0:6e:c2:a6:42:09:9d:9b:4b:13:12:18:
5e:03:7b:e9:bf:d3:95:be:f3:9a:e3:cc:de:a9:1d:
e3:29:82:c0:0e:49:9d:5a:ec:62:df:c1:a2:b0:cd:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3E:21:BB:EE:21:A0:FE:3D:B5:76:3D:75:EA:4C:47:54:DC:EF:0B
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/LT4hu-4hoP49tXY9depMR1Tc7ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.32.0/22
IPv6:
2a0b:dc00::/29
Signature Algorithm: sha256WithRSAEncryption
b4:98:80:f0:0b:1a:0d:36:cc:78:bc:a5:1f:d9:bd:27:17:26:
3a:76:87:d7:f0:30:23:ea:20:ae:41:4a:4f:d1:e4:f3:e3:93:
f3:f7:63:4b:62:96:ed:12:1c:a7:25:b0:f7:2e:a9:5e:f7:db:
bd:2b:72:76:0f:32:6f:ca:ac:a6:29:9d:40:b2:7d:ca:86:9d:
d2:c9:d1:12:8b:fd:11:76:19:0d:97:19:92:4f:62:81:42:e9:
db:02:01:cc:1d:3d:47:8a:58:47:d8:1a:59:bc:85:42:58:e9:
c6:9a:9d:ba:07:3d:45:68:a8:27:fb:3f:09:e4:c5:06:4f:40:
c9:64:e5:20:4c:23:c8:26:bb:34:e8:24:d5:2c:99:25:1f:67:
82:7e:7e:c8:bb:6e:b7:37:07:6c:90:e2:f5:56:42:59:5f:9d:
20:32:44:6c:9b:ec:ca:48:6d:09:91:7d:70:94:a7:80:96:89:
1c:0e:74:c7:c1:7a:f2:fa:63:53:8b:f9:86:0e:9f:ae:17:27:
d8:fe:77:d0:af:19:b6:27:fb:ed:29:d9:e9:86:04:44:02:8d:
a8:8c:6b:7f:c6:ff:17:2f:b1:ed:b1:6f:da:cb:37:bc:43:2e:
e9:35:94:51:6f:55:e6:9c:60:66:8c:3c:f6:48:14:95:a3:39:
51:0b:27:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:37 2024 by rpki-client on console-ams.rpki-client.org