Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/LJdt28drzVGvXIGjUKOuFlhHD68.roa
File: LJdt28drzVGvXIGjUKOuFlhHD68.roa (raw, json)
Hash identifier: 2UifIlU5XCYfCuxSJ+tQnYykFygWZbcBqzLwncUCYGs=
Subject key identifier: 2C:97:6D:DB:C7:6B:CD:51:AF:5C:81:A3:50:A3:AE:16:58:47:0F:AF
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 0224A463
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/LJdt28drzVGvXIGjUKOuFlhHD68.roa
Signing time: Sat 01 Jan 2022 05:57:43 +0000
ROA not before: Sat 01 Jan 2022 05:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203020
IP address blocks: 206.204.0.0/18 maxlen: 32
43.252.28.0/22 maxlen: 32
89.184.192.0/19 maxlen: 32
103.211.184.0/23 maxlen: 32
139.5.104.0/22 maxlen: 32
45.114.240.0/22 maxlen: 32
89.104.110.0/23 maxlen: 32
216.194.80.0/20 maxlen: 32
94.46.32.0/21 maxlen: 32
89.223.14.0/23 maxlen: 32
185.10.7.0/24 maxlen: 32
37.61.227.0/24 maxlen: 32
94.46.2.0/23 maxlen: 32
116.212.188.0/22 maxlen: 32
180.94.216.0/22 maxlen: 32
94.46.0.0/21 maxlen: 32
103.30.12.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35955811 (0x224a463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Jan 1 05:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c976ddbc76bcd51af5c81a350a3ae1658470faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:50:c1:e4:4d:34:3e:33:30:b9:3c:fe:00:25:
cf:98:c5:e3:50:ff:6c:37:56:57:7b:10:0e:b0:69:
76:7a:27:e6:e7:85:f2:53:87:f6:e5:85:bd:96:27:
e9:be:d9:84:d9:d1:0d:0a:27:99:12:db:f6:bb:3f:
fe:dc:0c:f7:48:b1:6a:6a:5e:1e:b3:84:1e:bc:1b:
4d:70:9c:b5:8d:3a:d9:e6:e8:8b:d1:80:f1:76:b3:
f8:91:d1:8a:31:ca:fd:cb:53:c2:9d:dc:5a:45:9a:
56:62:b1:18:4c:e6:08:e1:a2:06:57:99:35:4a:a5:
26:0b:41:fd:af:58:53:57:ed:76:73:db:ce:d4:ca:
12:7d:f6:46:1f:35:7c:19:d0:1c:29:14:0c:2d:c1:
9e:3b:5b:94:98:95:85:e8:54:2d:98:4e:2b:74:42:
c2:65:7d:a9:a4:a1:37:de:de:35:4c:01:d2:fe:ce:
aa:a0:a0:f8:da:cb:ad:03:73:3e:55:67:d8:43:4f:
4b:02:6c:e5:5b:94:0e:17:78:d1:51:51:05:3c:c3:
ae:3e:11:4d:e2:dc:18:9b:05:9e:2f:dc:62:f5:f6:
ef:65:bb:86:2b:ea:d8:2d:26:a4:7a:dc:ac:53:9e:
3f:fc:05:9b:2a:a3:0f:2b:4f:b0:a1:b7:58:99:12:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:97:6D:DB:C7:6B:CD:51:AF:5C:81:A3:50:A3:AE:16:58:47:0F:AF
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/LJdt28drzVGvXIGjUKOuFlhHD68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.227.0/24
43.252.28.0/22
45.114.240.0/22
89.104.110.0/23
89.184.192.0/19
89.223.14.0/23
94.46.0.0/21
94.46.32.0/21
103.30.12.0/22
103.211.184.0/23
116.212.188.0/22
139.5.104.0/22
180.94.216.0/22
185.10.7.0/24
206.204.0.0/18
216.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
68:14:4a:0a:36:95:15:08:f9:15:7f:7b:40:d6:a1:cd:b2:93:
4e:c4:d5:2a:ee:17:a2:54:e6:53:19:e3:16:a5:4b:5f:2c:8b:
05:78:6a:ab:30:30:a4:3d:9e:86:f0:c8:07:1e:67:3c:09:11:
1e:3e:39:ce:02:0d:a3:f3:f2:25:cf:76:c4:3c:3f:49:f3:4d:
d2:80:48:20:98:03:0d:e6:6a:de:18:a1:39:2f:44:0e:4e:30:
70:8a:11:7d:4d:e7:6e:d7:c9:33:cc:a6:3d:05:18:b8:c7:44:
c5:d5:cc:ad:5a:13:62:c2:62:09:89:ce:3f:fe:4c:a8:b5:fd:
a3:b3:2b:fd:12:b5:d3:ea:b8:ce:6d:a1:4e:8f:61:7c:e8:7d:
8e:33:d6:6b:08:01:2e:18:32:61:c1:58:22:86:23:b5:44:a2:
ad:f5:67:2f:91:ad:07:61:de:c7:76:fc:ae:aa:fe:a4:9c:6f:
13:7a:ff:02:6d:c1:60:a9:bb:f1:73:58:dc:ff:85:b3:f3:31:
f4:b8:e0:e9:9e:8b:a3:35:d8:3b:ee:59:41:9c:1b:45:3e:30:
f8:be:94:d5:a0:df:02:41:8e:45:97:ac:cb:f4:41:1d:ec:b0:
c2:a1:04:9b:20:9b:f6:d4:54:37:3d:10:13:21:ad:f7:7c:8f:
5f:2c:fb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:19 2023 by rpki-client on console-fra.rpki-client.org