Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/0LpDp-2lPfPMGIbBjwaOmWP3h84.roa
File: 0LpDp-2lPfPMGIbBjwaOmWP3h84.roa (raw, json)
Hash identifier: dq0N4g5VlS9O2YojaW+foA37pvrXAJSxEdeJ0/wI7RU=
Subject key identifier: D0:BA:43:A7:ED:A5:3D:F3:CC:18:86:C1:8F:06:8E:99:63:F7:87:CE
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01848D141C8500658EA8C8460989AB85DB46
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/0LpDp-2lPfPMGIbBjwaOmWP3h84.roa
Signing time: Fri 18 Nov 2022 23:30:16 +0000
ROA not before: Fri 18 Nov 2022 23:30:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48611
IP address blocks: 185.250.184.0/24 maxlen: 24
185.250.185.0/24 maxlen: 24
2a0c:1144::/30 maxlen: 30
2a0c:1140::/29 maxlen: 29
2a0c:1140::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8d:14:1c:85:00:65:8e:a8:c8:46:09:89:ab:85:db:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Nov 18 23:30:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0ba43a7eda53df3cc1886c18f068e9963f787ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:f9:1a:66:42:d4:e0:43:0b:cd:69:39:34:
4d:92:b3:45:0b:26:33:11:9f:7b:c2:f0:02:09:54:
1b:c8:9e:fe:95:88:cc:7b:9d:1d:7e:55:57:d7:a3:
29:79:0d:ab:fd:8b:78:d3:11:b7:d0:5f:f9:81:d2:
42:9a:d7:41:d7:34:12:2b:ee:e5:42:cf:da:78:4a:
d2:c7:4d:25:da:43:c8:cd:db:42:a9:3e:79:78:72:
d8:3b:eb:80:3c:4f:5f:98:4f:3a:6f:b9:51:7e:e2:
87:06:fd:1a:52:59:31:d9:f6:15:ad:23:fb:59:34:
41:b3:7b:bc:2a:0a:de:15:78:ec:82:bc:6f:b2:cc:
81:e7:a3:d6:e8:4b:29:b2:bc:17:b1:db:4a:e2:c6:
04:18:b3:3d:92:fc:a6:f8:5c:6a:77:83:bc:d6:0d:
18:de:d0:08:88:8c:95:c2:7f:77:33:5b:01:11:78:
57:c2:44:1b:39:aa:b9:22:79:7d:c7:dd:0e:42:d3:
4c:e1:00:69:ea:0c:75:9f:78:12:68:9b:ac:a2:32:
a8:06:87:19:f8:42:21:3a:7a:72:b1:42:90:77:32:
e5:e7:f7:f5:ae:70:14:b3:ee:a9:cc:11:a0:79:ea:
7d:3b:e1:18:5c:6c:7d:9f:be:cf:48:f9:03:89:2d:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BA:43:A7:ED:A5:3D:F3:CC:18:86:C1:8F:06:8E:99:63:F7:87:CE
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/0LpDp-2lPfPMGIbBjwaOmWP3h84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.184.0/23
IPv6:
2a0c:1140::/29
Signature Algorithm: sha256WithRSAEncryption
85:e6:14:9b:a3:85:27:5d:5e:6b:90:e5:48:e8:02:e9:86:d3:
20:8e:09:22:62:d0:39:0f:89:9d:0f:24:7b:7c:af:54:a4:ec:
3c:69:58:f9:d4:e6:d8:23:87:7b:b1:4e:63:00:95:53:b2:63:
91:fd:f9:e3:f6:5e:72:8a:17:6f:33:61:8e:77:d6:57:ac:36:
ce:d1:ab:23:25:ef:c9:e7:42:11:d1:53:ed:e9:e1:7d:a3:32:
94:9c:d3:94:6c:3f:90:63:93:5f:57:71:6d:31:3e:ed:7d:bb:
24:9d:ea:60:e7:d2:91:f2:5c:71:bc:97:ec:d9:da:46:59:4a:
00:4b:51:56:9c:92:eb:53:16:f0:f3:ff:9f:f3:35:57:a9:9b:
af:29:ab:8e:0f:07:d9:b1:9a:fe:58:98:d0:f3:10:c3:61:f6:
0f:49:3b:b1:e7:16:85:f5:70:17:fd:de:a1:2a:4d:54:9d:d0:
db:69:fe:1e:88:29:e5:b0:1c:05:44:9e:d4:3b:02:1e:7d:22:
77:47:ae:ff:63:7a:be:d3:01:12:81:bd:4f:60:69:4f:97:18:
0f:2a:31:f2:c6:02:b9:f4:9a:c0:a3:51:d3:8c:89:ad:b7:b5:
8d:6e:01:98:0f:e7:89:7f:93:bc:86:7a:0e:fb:42:e5:44:c4:
a3:4e:75:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:34 2024 by rpki-client on console-ams.rpki-client.org