Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/lgQSMRuCu718GGYoYAqaXhRZG3g.roa
File: lgQSMRuCu718GGYoYAqaXhRZG3g.roa (raw, json)
Hash identifier: qD8zaN95TGbm+zeKKHj7AhFFAwojbgaVQob9WP2uJe8=
Subject key identifier: 96:04:12:31:1B:82:BB:BD:7C:18:66:28:60:0A:9A:5E:14:59:1B:78
Certificate issuer: /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial: 0F073EF4
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/lgQSMRuCu718GGYoYAqaXhRZG3g.roa
Signing time: Sat 01 Jan 2022 07:58:56 +0000
ROA not before: Sat 01 Jan 2022 07:58:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204226
IP address blocks: 185.89.9.0/24 maxlen: 24
185.89.10.0/24 maxlen: 24
185.89.11.0/24 maxlen: 24
185.89.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252133108 (0xf073ef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Validity
Not Before: Jan 1 07:58:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=960412311b82bbbd7c186628600a9a5e14591b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:8c:0d:df:30:6f:ce:67:61:a2:79:1d:d5:
c7:36:79:fb:0f:7d:f8:e8:00:a8:53:69:37:22:31:
ee:5a:ca:10:f6:44:8e:17:aa:42:4c:19:dc:2f:79:
56:d0:3e:d8:f6:90:9d:ab:bc:58:a0:c8:8e:87:9e:
c8:46:85:26:c2:e2:7b:e9:45:77:a6:4f:04:8e:49:
6a:4c:43:43:1e:16:47:c8:32:ce:8b:ea:ac:ea:b8:
9d:a2:0f:fa:b9:df:fe:8f:ae:7b:dc:77:24:5d:55:
a8:a4:22:c8:bf:73:57:d3:3b:1c:db:3c:5e:8f:f9:
0b:ff:12:7c:94:08:6a:e3:c4:a4:2c:46:15:3e:36:
6b:75:a0:e5:60:6a:63:36:27:99:96:c3:d9:73:38:
d5:87:10:66:1c:53:89:39:a6:ea:16:ea:63:78:27:
81:99:d5:0b:e9:25:bb:99:5d:20:35:13:70:8c:f0:
ea:95:d2:67:6a:f4:c5:04:e3:b0:32:c9:e8:e1:50:
c7:cb:07:63:3d:1d:03:7a:62:5f:4e:6e:f3:41:10:
e1:c1:30:86:e0:82:b1:15:d5:51:94:8e:b3:10:5e:
ef:96:98:d7:92:05:73:ce:7d:6e:30:6a:dd:73:ad:
f1:54:26:ab:4f:8a:a5:bf:75:58:5a:fa:0d:a7:1f:
f1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:04:12:31:1B:82:BB:BD:7C:18:66:28:60:0A:9A:5E:14:59:1B:78
X509v3 Authority Key Identifier:
keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/lgQSMRuCu718GGYoYAqaXhRZG3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.8.0/22
Signature Algorithm: sha256WithRSAEncryption
55:7f:5d:3c:43:ff:f5:98:e0:62:a1:ab:a2:e2:85:19:22:87:
89:c6:fe:8c:74:58:d8:1e:0e:d7:05:c3:41:67:4d:28:75:43:
e0:dd:2c:53:48:36:64:36:ec:ca:f5:d6:ca:4e:a8:06:fe:be:
d4:98:d8:7a:4f:f4:82:c3:4f:d0:df:79:50:0c:f0:24:c7:b3:
da:d8:6d:b0:35:1a:d5:4d:63:21:70:f8:be:7d:4c:ed:16:c4:
e3:b2:34:e7:37:65:c8:10:3e:08:d9:56:66:4a:ff:7b:39:61:
f9:77:46:bd:a8:2d:79:4b:b4:8a:df:a7:8e:5f:91:9a:34:a3:
36:a5:f9:29:70:45:69:09:4d:ad:33:ca:0f:89:9b:d4:27:02:
c2:f4:fc:a0:e0:ad:e4:58:d0:1a:a0:5a:fc:91:27:70:de:14:
ae:d9:d6:9e:98:69:d2:53:ed:5d:a0:77:55:6b:a0:f1:a8:cf:
e7:fd:0b:b3:56:a3:28:8d:74:d2:11:5a:8d:bf:25:d5:cc:7a:
14:ce:d5:b1:ce:cb:6e:53:7c:c8:d4:0a:c7:67:9f:8c:c7:40:
f3:12:fa:da:8e:e5:59:29:b1:5b:9e:ba:ab:7d:56:20:d5:ac:
31:5c:31:95:5d:29:51:06:40:0b:e7:81:3b:49:b7:21:98:82:
a0:50:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:11 2025 by rpki-client