Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/0lm_kBNKYLOTGaZQlfdZ_JmK3H0.roa
File: 0lm_kBNKYLOTGaZQlfdZ_JmK3H0.roa (raw, json)
Hash identifier: SoUFz1uNqDEOmMWMZf5SDSEU4wMQn/95cdGrwo+On50=
Subject key identifier: D2:59:BF:90:13:4A:60:B3:93:19:A6:50:95:F7:59:FC:99:8A:DC:7D
Certificate issuer: /CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Certificate serial: 01856B2584488B0BEB58D834D7470B49F239
Authority key identifier: 2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/0lm_kBNKYLOTGaZQlfdZ_JmK3H0.roa
Signing time: Sun 01 Jan 2023 02:24:58 +0000
ROA not before: Sun 01 Jan 2023 02:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209587
IP address blocks: 185.236.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:25:84:48:8b:0b:eb:58:d8:34:d7:47:0b:49:f2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0c21cffa80b5a1e5cbd631930e7fc55fddfc48
Validity
Not Before: Jan 1 02:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d259bf90134a60b39319a65095f759fc998adc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:16:a6:ee:54:66:8a:a4:59:09:d5:43:d8:
e5:5a:42:0c:91:df:b6:3d:52:14:23:12:3d:14:c7:
67:3b:b8:29:41:fa:f9:92:ca:b6:3e:29:85:5e:a8:
d9:41:53:14:1c:b1:2e:f1:e4:cf:4f:6d:21:df:3d:
8c:00:4b:5d:80:98:b8:0b:47:cc:96:18:9d:57:35:
e8:f2:96:a8:16:82:c2:fe:f5:cd:e4:4b:72:28:cf:
15:a7:aa:c5:27:36:21:f0:f2:1c:51:4c:5b:d3:e6:
a3:73:ef:ee:ac:04:1e:07:32:9a:38:8e:0d:0d:10:
4f:f9:83:85:8c:d7:fa:16:8e:63:b8:25:e1:48:89:
93:0c:0a:d5:92:ad:e6:91:5b:19:d1:48:6e:66:25:
0d:e8:0e:44:23:b7:42:fe:19:40:1e:b6:53:8a:b8:
3e:2d:79:2e:06:c3:60:2e:e6:73:2e:e6:40:2c:ec:
0e:b4:cb:2e:11:7e:6b:14:0c:19:13:ab:9c:4e:97:
97:1b:b7:d9:cb:6d:9c:fb:a4:2b:53:04:62:0a:8c:
47:bc:d5:ef:fd:4c:0f:81:fa:b6:70:a2:25:3b:65:
42:65:16:c8:ed:d0:16:5d:86:a8:6c:18:e5:9e:1b:
e5:97:ac:d1:72:ec:3b:b9:b6:7b:bb:38:4d:3c:6d:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:59:BF:90:13:4A:60:B3:93:19:A6:50:95:F7:59:FC:99:8A:DC:7D
X509v3 Authority Key Identifier:
keyid:2D:0C:21:CF:FA:80:B5:A1:E5:CB:D6:31:93:0E:7F:C5:5F:DD:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/0lm_kBNKYLOTGaZQlfdZ_JmK3H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bbf75d-c1dd-44b0-a5e0-cdcc704b38a7/1/LQwhz_qAtaHly9Yxkw5_xV_d_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.32.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:6e:a3:de:97:7a:44:a4:ec:cd:49:1d:2d:f8:65:74:02:e1:
d1:3f:2c:27:fa:b0:69:5a:c8:cd:97:01:cf:65:30:db:1f:b3:
e4:08:62:ce:2e:70:0d:32:05:6e:12:ba:e8:8a:94:95:ea:62:
27:bd:a3:51:f3:c9:d5:17:73:e6:67:16:be:52:61:60:e8:13:
47:47:e0:f9:2f:5b:b3:b9:0c:3b:cd:4f:00:6f:6e:7c:a1:a9:
5d:1b:27:eb:d0:5e:01:a9:00:2e:92:89:df:19:96:85:d0:f0:
41:f4:64:d6:07:83:04:d4:d7:57:9b:4e:c3:28:44:c4:82:e2:
a4:77:74:8c:0f:38:e2:b8:34:e8:b1:5c:a9:9b:39:17:2a:93:
50:7f:e3:11:a2:34:48:b4:a6:f2:c6:12:26:ee:cc:cd:14:60:
40:6d:71:c7:c7:e0:ce:84:08:b1:5e:00:f2:a0:74:99:37:e3:
da:eb:f5:43:70:47:bb:91:c6:08:de:b4:ab:af:04:d7:73:6a:
19:8a:ca:d2:16:eb:9a:0a:3e:a3:4a:22:23:f8:a1:92:e8:19:
d3:57:fb:d6:a1:99:bc:fe:3e:5d:6d:99:f1:85:eb:0a:34:50:
d1:43:36:31:11:1c:92:c2:7b:65:9b:7d:98:20:e3:dc:b7:ec:
29:0d:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:05 2025 by rpki-client