Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/lc6RNowVM-6ewGmL44gxA_s71jA.roa
File: lc6RNowVM-6ewGmL44gxA_s71jA.roa (raw, json)
Hash identifier: RmayphIOp2yAWAkJoKua+Gqo99bTwo8x+Jw9C5lM/Dw=
Subject key identifier: 95:CE:91:36:8C:15:33:EE:9E:C0:69:8B:E3:88:31:03:FB:3B:D6:30
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 066BE1F4
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/lc6RNowVM-6ewGmL44gxA_s71jA.roa
Signing time: Sat 01 Jan 2022 11:03:09 +0000
ROA not before: Sat 01 Jan 2022 11:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20596
IP address blocks: 185.113.24.0/22 maxlen: 22
2a06:6740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107733492 (0x66be1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Jan 1 11:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95ce91368c1533ee9ec0698be3883103fb3bd630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:bf:07:2f:2e:06:6f:35:04:7f:e3:a9:f8:
69:3b:0a:a8:34:2b:6d:ee:a0:40:db:25:f1:79:10:
2a:70:25:fc:52:67:0b:75:8f:01:6d:5b:23:c0:1f:
f4:df:dd:33:3c:9b:6b:d9:2e:38:c8:df:ad:dc:3f:
42:81:53:59:db:f2:db:53:1a:2c:5b:27:fc:db:13:
75:c9:58:38:d7:f4:82:ee:94:af:71:39:e9:ef:75:
00:fd:a9:b5:ec:e5:50:27:fa:d4:9f:62:9b:24:62:
22:ae:b0:b8:2f:10:5f:a1:14:f0:82:a3:06:10:60:
97:33:9b:71:81:b0:4f:c8:59:3b:88:91:cb:6b:78:
78:91:af:32:0c:38:2b:e5:10:5f:0e:38:10:b1:91:
98:9e:83:91:ac:23:b4:a0:25:e9:c3:b9:d3:55:ec:
84:bb:50:69:05:c8:29:5b:88:62:fa:11:ef:01:69:
18:90:8e:2b:92:61:ff:2e:bd:81:7d:01:40:cc:70:
23:c0:89:7c:77:84:8d:c7:81:b0:d9:1b:7d:a3:ba:
d5:ff:a7:ad:78:56:7f:77:5e:f3:22:34:ff:d5:71:
0d:32:c8:ff:63:f7:41:47:39:2f:3e:2d:2d:c2:af:
7c:98:6b:81:64:c1:a4:df:a3:86:c7:50:bd:d9:48:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CE:91:36:8C:15:33:EE:9E:C0:69:8B:E3:88:31:03:FB:3B:D6:30
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/lc6RNowVM-6ewGmL44gxA_s71jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.24.0/22
IPv6:
2a06:6740::/29
Signature Algorithm: sha256WithRSAEncryption
b5:d0:58:02:25:25:1b:c8:6e:5a:b7:59:0b:c9:34:0b:5e:5c:
32:b0:71:c4:93:53:72:8d:7b:12:ef:c4:24:68:11:b9:a1:86:
f2:36:1f:73:40:4c:08:82:e6:ea:61:ac:f3:0e:bd:3d:52:88:
a7:78:d6:51:37:f9:be:56:ac:00:09:e2:7e:17:d4:65:36:63:
7e:85:16:4c:49:c8:92:e3:ad:4f:ee:9b:9a:1b:10:5c:3f:7e:
59:d4:bc:2a:e9:1d:f0:a4:d3:29:e9:78:13:ca:b8:d2:e3:a8:
e5:86:14:9d:e3:3a:1f:bd:1b:16:63:96:91:74:4c:20:c3:33:
ec:0a:14:0a:30:80:9c:82:16:58:15:6d:13:ab:36:54:15:d8:
31:92:3c:d1:3f:ae:9e:ef:a6:b1:82:80:e6:5f:a9:66:62:14:
a4:93:96:de:3e:d2:14:31:12:0d:99:f2:d2:ec:df:38:74:53:
38:aa:41:be:3c:4e:81:76:60:73:62:f3:cd:ac:f7:40:84:49:
45:85:d2:37:f6:33:1c:6f:4c:17:b3:1c:ea:ba:0d:b8:e0:81:
f6:a1:0a:a8:2c:79:d2:44:77:b1:61:54:f1:9c:a0:4e:42:44:
4a:0d:58:6e:d7:c3:a8:31:34:53:50:2d:21:00:35:0c:44:ca:
29:82:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:48 2025 by rpki-client