Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/lB-pFtZ3yKKZW9zQq5Q3ONlJhsw.roa
File: lB-pFtZ3yKKZW9zQq5Q3ONlJhsw.roa (raw, json)
Hash identifier: hNVZ6tLU3Vizx5/3nrr+UEObYYcmqfqUv0qU7vD5JRs=
Subject key identifier: 94:1F:A9:16:D6:77:C8:A2:99:5B:DC:D0:AB:94:37:38:D9:49:86:CC
Certificate issuer: /CN=987dccf5068829329cdac51d5d190fe1089cde9e
Certificate serial: 01856E78D162E36597667A48CF63E8041E30
Authority key identifier: 98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/lB-pFtZ3yKKZW9zQq5Q3ONlJhsw.roa
Signing time: Sun 01 Jan 2023 17:54:49 +0000
ROA not before: Sun 01 Jan 2023 17:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60789
IP address blocks: 185.26.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:d1:62:e3:65:97:66:7a:48:cf:63:e8:04:1e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987dccf5068829329cdac51d5d190fe1089cde9e
Validity
Not Before: Jan 1 17:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=941fa916d677c8a2995bdcd0ab943738d94986cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:1c:c3:73:e9:9e:a9:ef:96:1e:c7:7b:8a:
62:c6:65:85:b4:c7:ee:2a:e6:4a:11:eb:97:fc:5a:
45:2b:e3:28:63:ba:c5:43:2e:a1:89:e8:6e:0d:bd:
ee:55:eb:89:2c:c4:a3:d0:46:9d:a8:c1:5e:0f:33:
b8:31:6c:75:69:86:d7:95:94:ff:84:66:c3:00:39:
57:aa:16:a0:df:12:f1:0a:a0:0f:a6:ec:49:a7:ed:
cf:7c:44:0c:b9:14:76:5b:52:fe:cc:91:72:c3:ad:
60:e9:0c:b2:f0:dc:c9:82:a3:4e:57:3a:a0:c8:63:
a3:96:b7:51:2d:a2:33:a4:80:3f:6f:f8:8d:1d:30:
ab:82:16:f4:b2:dc:1c:a2:a0:f8:ea:a4:9a:a5:ae:
04:7a:3b:a6:a3:e9:a1:56:08:c9:00:75:99:aa:9e:
0f:10:d6:92:18:1f:20:4b:17:13:b0:1b:31:62:49:
bd:66:76:7d:a1:90:12:b2:a6:2b:49:34:df:69:5c:
41:ae:99:7c:0a:6a:d0:fe:ee:1a:93:cf:16:8e:2d:
18:11:b8:41:84:7c:d2:a1:fb:c3:11:d6:80:a6:8a:
52:21:98:cb:70:5c:6f:37:a4:49:e8:ef:28:28:2f:
18:f9:a5:73:59:88:03:d3:25:ae:d2:21:4a:d6:0c:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1F:A9:16:D6:77:C8:A2:99:5B:DC:D0:AB:94:37:38:D9:49:86:CC
X509v3 Authority Key Identifier:
keyid:98:7D:CC:F5:06:88:29:32:9C:DA:C5:1D:5D:19:0F:E1:08:9C:DE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mH3M9QaIKTKc2sUdXRkP4Qic3p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/lB-pFtZ3yKKZW9zQq5Q3ONlJhsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/33e53d-bcee-423b-aa84-135bab090940/1/mH3M9QaIKTKc2sUdXRkP4Qic3p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:06:6a:52:e6:77:7e:18:03:75:a1:3b:98:6d:c0:8f:de:8f:
16:c5:02:47:45:e4:71:87:d3:8f:91:16:42:02:eb:7e:1f:64:
33:25:4e:b1:2e:9c:e6:de:4f:52:25:8f:49:20:6a:0e:aa:d1:
0b:fd:22:9b:88:f3:19:f5:55:a6:2f:91:83:0b:fd:08:92:68:
71:77:bf:f5:be:93:9a:c1:69:e7:a9:76:bb:a2:14:0e:11:e1:
52:69:7a:2f:1c:91:7b:e3:0b:71:54:f4:7f:9d:bb:de:89:ba:
5c:90:10:79:32:ac:68:89:4d:1e:fa:10:8e:ef:21:8e:86:4e:
8d:0e:8f:96:7d:93:94:c2:4e:e1:64:cc:78:1c:37:1d:90:1f:
51:f8:26:47:74:1f:c4:93:56:32:57:74:01:8b:64:95:5a:a2:
92:3c:ab:da:88:32:7f:c5:1e:2e:c8:89:74:34:25:68:de:4f:
b3:99:a5:a9:e3:c1:5b:38:87:29:a4:b0:74:cc:8f:19:47:86:
d3:bc:6d:8f:d7:96:b5:33:50:22:cb:35:4a:38:59:7d:be:95:
69:83:df:81:22:c4:6f:05:41:99:cc:0b:a2:14:95:be:e6:3b:
1a:37:0b:9e:57:c3:0a:ca:dc:26:1b:38:09:be:a8:36:56:b6:
26:c2:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:05:17 2025 by rpki-client