Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/Lq7UXcCr_He93sSYJEtZruTfahk.roa
File: Lq7UXcCr_He93sSYJEtZruTfahk.roa (raw, json)
Hash identifier: 6NQYHPlLlHJZRxtu8uUsL94AosM9PXkv6aOor+P4Fhk=
Subject key identifier: 2E:AE:D4:5D:C0:AB:FC:77:BD:DE:C4:98:24:4B:59:AE:E4:DF:6A:19
Certificate issuer: /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial: BC92DE
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/Lq7UXcCr_He93sSYJEtZruTfahk.roa
Signing time: Sat 01 Jan 2022 02:58:43 +0000
ROA not before: Sat 01 Jan 2022 02:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44710
IP address blocks: 185.28.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12358366 (0xbc92de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Validity
Not Before: Jan 1 02:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2eaed45dc0abfc77bddec498244b59aee4df6a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:3a:1b:5e:a4:71:70:51:7b:7f:f4:3d:a9:
e0:ef:46:4e:f5:48:a3:b2:39:fe:d4:30:7f:e2:7e:
f6:a0:ec:c4:cf:f0:d4:16:c3:a2:83:bf:48:5f:f0:
67:f3:c1:ad:06:59:53:de:9f:89:de:63:ae:a3:ea:
03:95:1f:47:03:c5:dd:37:86:73:97:5d:da:ac:06:
56:00:ad:d1:07:cb:8f:b2:bb:be:ea:4d:60:eb:aa:
6a:87:56:ba:0f:c0:5e:45:98:d9:21:7f:6a:7a:46:
bd:a4:07:78:c9:e2:83:90:f9:b7:8d:a0:ab:b3:d6:
4d:da:b8:98:68:3e:f2:21:b7:9f:2f:88:19:e1:65:
fb:45:f6:ae:3b:92:d7:27:20:6f:8f:07:8f:ec:66:
46:5a:0c:12:16:41:ae:2e:7d:06:8c:74:bc:83:fd:
0d:14:f3:62:f1:a3:13:bb:aa:03:86:10:a8:22:fa:
79:fb:29:66:ec:d0:dd:4f:65:c1:02:34:b2:46:27:
df:66:d3:72:e6:cb:14:68:21:52:06:7d:05:a2:fc:
dc:f0:bc:6c:7d:b6:73:46:41:a3:5d:9b:31:90:ea:
85:ad:8f:ad:82:89:39:1c:6b:ee:0c:25:bd:e6:ea:
94:6c:72:f4:17:c7:d7:03:ad:a0:c0:3e:97:8e:bd:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AE:D4:5D:C0:AB:FC:77:BD:DE:C4:98:24:4B:59:AE:E4:DF:6A:19
X509v3 Authority Key Identifier:
keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/Lq7UXcCr_He93sSYJEtZruTfahk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.110.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:61:53:3f:b3:73:4d:45:14:b4:07:93:7b:fa:70:98:9f:2d:
90:72:5c:21:31:14:da:9d:e7:23:26:79:77:83:41:0b:a1:b3:
36:22:85:b8:01:4a:d8:5c:79:07:40:0e:bc:f0:93:9f:94:50:
95:7a:18:6d:e4:07:e2:29:f2:7f:20:fc:8c:6a:48:65:54:ab:
bd:4e:62:c3:b7:e6:25:0d:fa:ca:4d:d4:73:0b:24:45:9d:f3:
ae:ce:3b:16:99:15:cb:e1:e9:5b:19:e6:5c:fc:e8:30:6e:60:
b5:76:78:28:16:38:87:46:38:de:cd:f5:56:35:7e:1f:86:44:
d7:15:cd:68:d0:19:76:80:35:0b:e5:31:80:cf:7f:5b:78:de:
63:f4:d3:0f:f6:b3:05:8b:8f:13:44:02:90:b9:22:24:e9:ee:
b5:28:ae:35:7b:6d:1d:96:a9:0a:bb:2d:04:ad:be:f2:8d:e9:
12:09:cf:e2:dd:bc:9f:b0:be:20:db:93:f3:78:b8:11:12:8f:
db:18:d1:73:36:dc:ef:4e:a3:66:f8:a4:db:54:7b:48:65:c9:
7c:08:53:6d:a3:c5:15:c3:ca:bf:59:33:5e:b6:10:76:be:c0:
0a:b0:de:71:6a:32:91:29:e6:ba:37:51:c2:a9:80:8f:21:d3:
90:c5:8a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:35 2025 by rpki-client