Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/lfnGpERExcfOyd-kEVxcdc3KtZ8.roa
File: lfnGpERExcfOyd-kEVxcdc3KtZ8.roa (raw, json)
Hash identifier: kdSvCU2V1WCl0yWyxP2touCMG3Dd10r7wgt5m38RWVM=
Subject key identifier: 95:F9:C6:A4:44:44:C5:C7:CE:C9:DF:A4:11:5C:5C:75:CD:CA:B5:9F
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 0182F800D704A297F034DC75313111015872
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/lfnGpERExcfOyd-kEVxcdc3KtZ8.roa
Signing time: Thu 01 Sep 2022 07:43:00 +0000
ROA not before: Thu 01 Sep 2022 07:43:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202207
IP address blocks: 185.5.124.0/22 maxlen: 22
5.181.44.0/22 maxlen: 22
2a03:1c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:00:d7:04:a2:97:f0:34:dc:75:31:31:11:01:58:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Sep 1 07:43:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95f9c6a44444c5c7cec9dfa4115c5c75cdcab59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:1d:96:89:a2:97:d0:00:3c:2a:6a:ab:e1:
f8:08:32:58:53:86:93:31:73:2c:c4:41:5f:3c:06:
a0:a5:38:76:e3:d0:cd:aa:8f:a9:4c:51:7c:d5:e5:
bd:52:c2:26:a8:5a:80:fc:cb:bb:11:ba:a9:4e:8f:
42:c4:2c:e3:52:ad:35:5e:cf:fc:55:ec:a5:eb:c4:
c8:fa:0f:f5:2b:0c:d6:47:6e:4e:86:20:73:db:b9:
3d:be:8c:52:e6:ea:fd:01:3c:0a:a4:e3:94:dd:53:
e2:f6:d1:85:2a:75:a7:10:08:5f:5d:f3:c3:81:1c:
65:87:7c:ae:3d:42:6a:fe:68:fb:cf:c4:34:43:6d:
35:d2:14:11:ba:c5:35:ae:5a:ac:aa:68:fe:9b:9a:
10:c3:93:87:29:f4:28:93:24:bb:9b:86:50:d1:1d:
07:23:fd:0e:17:c6:0e:60:2c:db:1e:20:c1:d9:73:
07:63:7e:ba:99:c1:c5:dd:36:06:45:80:a1:8f:8b:
fe:e3:50:53:a1:70:6b:db:98:44:14:32:41:1a:cc:
de:e3:aa:8d:e2:3f:79:06:43:d5:1b:3a:47:3c:db:
9b:19:bc:45:f2:0a:c4:5f:f6:bf:73:0c:6f:ec:a0:
c0:e5:ee:5f:49:cb:dc:9c:b3:56:ff:aa:1e:11:33:
89:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F9:C6:A4:44:44:C5:C7:CE:C9:DF:A4:11:5C:5C:75:CD:CA:B5:9F
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/lfnGpERExcfOyd-kEVxcdc3KtZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.44.0/22
185.5.124.0/22
IPv6:
2a03:1c0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:58:b0:a1:e2:ab:5f:cc:6d:fd:02:a2:43:f1:62:57:93:c4:
c6:ac:6e:77:90:17:9c:32:68:a4:05:41:11:26:60:a0:f0:e4:
dd:f3:c0:8b:90:6f:d4:cf:6d:4a:9b:f1:5a:94:82:dd:60:1f:
78:ff:d0:fa:03:9f:96:52:39:52:46:d6:68:77:7a:c8:53:33:
07:43:4e:de:2e:40:6f:89:17:e9:60:89:b5:a4:b9:c7:0c:a6:
12:1c:10:95:c1:26:f4:5b:b5:a4:7d:67:38:5f:51:98:b1:3c:
ef:09:b4:f7:e8:10:e5:d8:a9:2f:f8:4c:a3:86:c2:e5:bc:2e:
d9:fc:1e:5c:9c:a4:dd:84:bd:4a:9f:ff:de:4f:d0:16:76:17:
2b:4c:7e:f5:27:c4:2c:d0:95:9a:7b:64:a8:38:6c:f3:e9:d4:
cd:8e:10:7e:04:b9:40:af:1c:3f:25:36:8e:de:e8:63:f5:b1:
76:b5:4e:d4:e2:22:48:b9:05:be:e8:e6:ef:90:a8:9e:fb:55:
5c:3a:19:45:a3:82:20:fd:fe:2e:a6:29:1e:59:48:83:56:4e:
f2:6d:9b:42:c8:07:3d:25:0f:a4:72:49:66:f4:c9:82:7a:92:
64:0f:0e:a7:b1:a1:ff:7b:4c:82:75:8e:fc:f9:67:7c:1e:19:
f0:f6:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:24 2025 by rpki-client