Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/LsUZXVS4Wtpjy4GOiQ1R8MENl3w.roa
File: LsUZXVS4Wtpjy4GOiQ1R8MENl3w.roa (raw, json)
Hash identifier: apWfS8Yniv2kRn27jN4SUmOjphRopJYvKR6YjQjg8sI=
Subject key identifier: 2E:C5:19:5D:54:B8:5A:DA:63:CB:81:8E:89:0D:51:F0:C1:0D:97:7C
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 020F03
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/LsUZXVS4Wtpjy4GOiQ1R8MENl3w.roa
Signing time: Tue 11 Jan 2022 10:57:11 +0000
ROA not before: Tue 11 Jan 2022 10:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16376
IP address blocks: 185.202.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134915 (0x20f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Jan 11 10:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ec5195d54b85ada63cb818e890d51f0c10d977c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:0f:e4:03:81:b7:bb:9b:fd:68:f9:3b:e4:
ef:be:e1:b2:a1:59:25:69:1a:81:f9:ba:88:9c:72:
61:ca:10:42:ff:ea:07:79:aa:19:7b:99:0c:30:57:
6b:5c:a2:df:2f:f5:a4:1e:a7:3d:fa:83:72:c3:3c:
fc:a2:6e:dd:b0:af:8f:f3:e4:bb:5c:6d:02:20:6f:
38:9f:19:b4:9d:80:c6:be:6e:9c:17:26:95:98:4f:
f7:27:86:da:83:e9:e6:e9:8a:aa:77:ab:99:7d:cb:
a7:46:35:c4:36:ec:09:60:7f:8c:f3:7a:6d:4e:6b:
d3:e7:d4:84:f6:69:c9:3a:3c:68:59:98:26:f3:50:
93:94:b7:d3:3b:90:5c:1a:2d:3f:0d:9a:10:7d:17:
63:2b:ad:f7:5e:ed:a0:05:69:a8:9d:42:91:a4:72:
42:9c:2e:ee:f4:b0:b1:eb:6f:98:f6:fb:61:96:ab:
18:e9:93:07:f7:3e:b7:0e:1d:d2:25:e1:95:ba:51:
ac:b0:7e:73:bd:82:78:e9:2b:81:ff:14:fe:fe:3f:
30:73:fa:ca:d1:23:02:8a:43:30:e1:e4:3b:0f:4e:
fd:9c:85:08:32:3d:64:a0:f0:f4:d3:16:6b:d5:92:
f7:ad:5f:7a:4a:6c:60:b4:30:af:b4:ba:cc:eb:c8:
ea:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C5:19:5D:54:B8:5A:DA:63:CB:81:8E:89:0D:51:F0:C1:0D:97:7C
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/LsUZXVS4Wtpjy4GOiQ1R8MENl3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f7:a2:f4:72:be:c7:d6:00:3a:fa:70:9a:d8:a3:a5:a4:ea:
73:52:86:d8:3c:32:92:21:32:d2:8c:b7:dd:d0:1b:82:4e:4a:
ed:69:21:b3:6e:e8:8e:54:45:82:21:fc:a0:0b:06:fc:29:73:
12:34:4e:a3:b4:29:66:f9:39:29:f5:d8:f1:f6:33:6b:a1:c7:
50:3e:1b:5b:a8:49:c0:76:e3:fb:3f:7d:e6:36:66:e5:a9:3f:
cc:e8:bf:74:59:de:d0:c2:bc:b3:ba:46:d3:c4:f8:ac:b3:f2:
65:33:81:2d:60:66:ed:c1:fc:e1:75:d2:5f:ba:43:eb:29:ce:
f0:98:a7:5b:e3:d0:8e:b2:ef:86:f9:33:68:36:38:37:80:aa:
fd:5e:46:e8:f0:26:5a:cb:c9:e4:68:9e:93:83:c1:33:70:39:
d5:77:87:d8:c7:e0:6b:cc:a2:3e:b9:40:8b:43:d3:68:35:b7:
2c:ac:bc:10:16:ac:aa:4c:a6:7e:d6:14:4b:56:84:5e:89:02:
81:59:a8:24:0f:84:dd:68:be:d2:ca:12:48:2b:11:fe:2b:5a:
53:6e:b7:e0:ff:2b:88:9b:19:93:b2:b3:d8:a4:93:8b:fd:38:
52:87:81:5d:41:f3:c9:0c:62:ad:33:1a:61:8b:7b:36:7e:62:
08:b6:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:46:11 2025 by rpki-client