Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/LYTiVmJSHreb5pZcmaLMObwVpjQ.roa
File: LYTiVmJSHreb5pZcmaLMObwVpjQ.roa (raw, json)
Hash identifier: yMtNuvrPFXBA2pdvwg/YF8vdxY+lA0hCeD0i0shRWt0=
Subject key identifier: 2D:84:E2:56:62:52:1E:B7:9B:E6:96:5C:99:A2:CC:39:BC:15:A6:34
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01842E5CE3BB96B9B59388BCF5359CC52772
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/LYTiVmJSHreb5pZcmaLMObwVpjQ.roa
Signing time: Mon 31 Oct 2022 14:05:50 +0000
ROA not before: Mon 31 Oct 2022 14:05:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213186
IP address blocks: 185.179.218.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:5c:e3:bb:96:b9:b5:93:88:bc:f5:35:9c:c5:27:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Oct 31 14:05:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d84e25662521eb79be6965c99a2cc39bc15a634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:30:66:51:99:ae:44:fa:81:4b:2e:ba:46:
c9:07:df:28:af:89:69:b2:c4:88:bd:17:b2:d9:5d:
35:f8:f5:b7:b9:69:14:61:2b:a2:f7:92:d9:66:60:
b9:b5:70:50:2f:4f:25:df:cf:e6:9d:92:a4:a8:ca:
16:d8:62:fc:78:87:20:9d:0b:e8:fb:8c:4b:fb:1f:
36:f5:45:91:22:3e:5b:01:b6:41:f3:d0:c0:39:ad:
c8:bf:66:79:c3:30:fa:94:b1:e6:bc:a6:b4:f6:ee:
3c:aa:d5:1e:bb:62:c9:fa:2c:6f:35:54:2e:fd:10:
27:66:41:5f:64:f7:0d:25:eb:0f:f5:f3:6b:72:f6:
ac:52:c4:6b:61:48:c5:30:78:1d:5e:f0:cc:a1:6a:
91:b6:fd:8d:7e:70:00:30:90:48:ab:81:58:4a:7a:
ae:e6:7b:56:51:c8:f0:91:ab:bb:82:e1:26:53:c1:
9a:85:3a:c1:a2:5b:92:ac:6b:3b:57:37:03:a5:57:
2e:06:cc:59:fa:36:2c:7a:f1:5b:0b:c7:40:0b:38:
b3:74:0b:b2:6a:24:7d:e5:ba:be:cd:17:9a:73:93:
31:ee:31:b6:1d:1c:00:70:be:b0:20:9f:1f:48:01:
b0:b6:bb:fe:e8:99:40:9b:46:18:1f:83:df:57:aa:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:E2:56:62:52:1E:B7:9B:E6:96:5C:99:A2:CC:39:BC:15:A6:34
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/LYTiVmJSHreb5pZcmaLMObwVpjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.218.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:77:3d:05:f3:62:47:a0:fc:37:9d:f6:93:45:f8:b8:fe:98:
39:ce:90:08:48:58:56:95:72:99:b0:61:a2:3a:80:ff:fc:a9:
fb:0c:c9:bd:90:58:68:1b:9a:31:bb:89:6c:b1:e1:08:2c:b6:
86:f9:21:56:2e:c6:18:dc:2e:70:60:fb:72:91:af:3e:52:95:
7e:82:ed:95:b6:35:55:c3:72:38:c0:c5:97:7a:ef:1a:43:11:
6d:44:9f:db:71:62:80:b3:fd:f2:93:81:36:6a:4d:a0:24:8d:
a1:9b:68:47:61:47:77:2e:73:4a:7a:11:f4:3e:b0:2b:a1:37:
cd:c6:31:b0:78:5c:ed:40:12:00:04:e4:1c:39:05:32:dc:a5:
2b:c8:ee:b3:22:db:49:d4:df:95:87:cf:4c:5f:e4:87:9c:03:
be:0c:5a:82:fd:5b:09:ac:fa:e2:f3:f0:4f:08:3a:b4:79:bc:
51:a1:68:e7:d6:1d:9e:ad:c9:d7:5f:45:24:07:d7:f7:97:90:
d7:cc:dc:09:3c:40:04:a9:be:99:22:e2:3c:dc:3d:e3:71:77:
2e:f5:1a:39:5a:46:c0:2c:49:cb:08:c9:1e:f7:94:99:bb:ac:
ee:9d:58:4c:28:99:99:9a:80:41:59:c6:68:cd:5c:d4:31:03:
84:f5:7f:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQuXOO7lrm1k4i89TWcxSdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjIxMDMxMTQwNTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDg0ZTI1NjYyNTIxZWI3OWJlNjk2NWM5OWEyY2MzOWJjMTVhNjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXgwZlGZrkT6gUsuukbJB98or4lp
ssSIvRey2V01+PW3uWkUYSui95LZZmC5tXBQL08l38/mnZKkqMoW2GL8eIcgnQvo
+4xL+x829UWRIj5bAbZB89DAOa3Iv2Z5wzD6lLHmvKa09u48qtUeu2LJ+ixvNVQu
/RAnZkFfZPcNJesP9fNrcvasUsRrYUjFMHgdXvDMoWqRtv2NfnAAMJBIq4FYSnqu
5ntWUcjwkau7guEmU8GahTrBoluSrGs7VzcDpVcuBsxZ+jYsevFbC8dACzizdAuy
aiR95bq+zReac5Mx7jG2HRwAcL6wIJ8fSAGwtrv+6JlAm0YYH4PfV6qvHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC2E4lZiUh63m+aWXJmizDm8FaY0MB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvTFlUaVZtSlNIcmViNXBaY21hTE1PYndWcGpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubPaMA0G
CSqGSIb3DQEBCwUAA4IBAQCPdz0F82JHoPw3nfaTRfi4/pg5zpAISFhWlXKZsGGi
OoD//Kn7DMm9kFhoG5oxu4lsseEILLaG+SFWLsYY3C5wYPtyka8+UpV+gu2VtjVV
w3I4wMWXeu8aQxFtRJ/bcWKAs/3yk4E2ak2gJI2hm2hHYUd3LnNKehH0PrAroTfN
xjGweFztQBIABOQcOQUy3KUryO6zIttJ1N+Vh89MX+SHnAO+DFqC/VsJrPri8/BP
CDq0ebxRoWjn1h2ercnXX0UkB9f3l5DXzNwJPEAEqb6ZIuI83D3jcXcu9Ro5WkbA
LEnLCMke95SZu6zunVhMKJmZmoBBWcZozVzUMQOE9X+u
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:40 2023 by rpki-client on console-fra.rpki-client.org