Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/eDDSZLhA6HAIRfWPlV24yfJ-4pY.roa
File: eDDSZLhA6HAIRfWPlV24yfJ-4pY.roa (raw, json)
Hash identifier: eA45VA/oqHTEb6hD7V5HCalJnhlZqBxxumHmwGvL+Ug=
Subject key identifier: 78:30:D2:64:B8:40:E8:70:08:45:F5:8F:95:5D:B8:C9:F2:7E:E2:96
Certificate issuer: /CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Certificate serial: 018AB6BAE8B9B6FC4C85284E8B6768389554
Authority key identifier: 2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/eDDSZLhA6HAIRfWPlV24yfJ-4pY.roa
Signing time: Thu 21 Sep 2023 07:53:37 +0000
ROA not before: Thu 21 Sep 2023 07:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213261
IP address blocks: 185.20.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:ba:e8:b9:b6:fc:4c:85:28:4e:8b:67:68:38:95:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c05ffa5cd28cbd00d0268442c7888fb2aa3a5f8
Validity
Not Before: Sep 21 07:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7830d264b840e8700845f58f955db8c9f27ee296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:be:76:e4:7e:72:3d:4f:75:a6:7f:c3:e1:98:
63:46:92:30:25:26:78:8e:36:fe:23:60:70:9c:d6:
16:4f:6a:de:9a:39:c0:f4:62:c4:88:38:85:31:5d:
34:bc:59:c6:11:db:fa:f2:11:3c:c7:ff:a7:f1:c0:
76:35:ff:17:03:3b:68:4a:fb:d6:c7:ab:e5:96:21:
78:57:a2:04:eb:6a:79:30:ec:5f:4d:cc:5d:82:af:
e2:d3:3d:6b:ae:4b:1b:78:9e:83:28:09:36:ee:3b:
a4:a5:e7:17:eb:e2:1d:e4:cc:13:c9:c4:99:4a:11:
34:e7:27:c3:04:72:fc:20:cd:06:a4:e1:f6:93:e8:
3c:90:f2:00:0e:ed:36:67:8f:18:cd:02:d7:d7:c0:
4a:d4:1d:f5:da:e2:4b:c9:9e:a4:47:39:df:b8:dd:
19:e5:0d:ae:27:24:b3:99:f1:25:b7:09:19:ad:3a:
e1:68:06:00:58:4d:e0:73:00:b2:dc:a4:7a:e3:67:
b0:8f:ab:8b:a0:3b:39:84:ae:42:62:a3:b1:08:05:
91:f2:d1:bd:26:06:86:95:22:54:ca:1a:7f:f7:f0:
0a:66:eb:fc:51:e1:cb:8d:68:ab:22:c5:15:3d:47:
77:30:96:11:0f:b5:80:bb:f9:68:10:5b:3f:11:6a:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:30:D2:64:B8:40:E8:70:08:45:F5:8F:95:5D:B8:C9:F2:7E:E2:96
X509v3 Authority Key Identifier:
keyid:2C:05:FF:A5:CD:28:CB:D0:0D:02:68:44:2C:78:88:FB:2A:A3:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAX_pc0oy9ANAmhELHiI-yqjpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/eDDSZLhA6HAIRfWPlV24yfJ-4pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/92e74f-1159-4e89-b15c-7637793f8f3e/1/LAX_pc0oy9ANAmhELHiI-yqjpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.6.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:0b:ae:e0:40:e7:58:c3:de:99:e3:ef:db:89:5f:4f:fc:72:
78:74:e5:f4:b3:01:64:98:c7:1b:34:10:ef:86:74:82:74:ab:
84:a9:bf:46:d8:bd:c2:ef:0b:44:54:f2:c0:39:74:28:e2:17:
a2:7d:b6:e5:72:2e:75:1a:c1:ef:63:91:22:2a:3b:6b:81:bb:
bc:1b:7d:c2:d4:02:42:e8:b7:a7:10:d4:2a:48:67:61:60:5c:
d3:85:31:f4:f5:20:95:9d:61:45:4d:0c:5e:04:af:aa:9d:76:
c0:1a:98:1b:3c:c8:9b:3a:9e:bd:84:40:35:c8:36:fa:2f:c4:
54:eb:db:75:03:83:2b:26:b1:a6:7c:9c:53:3f:98:ec:b4:97:
ec:be:9f:d5:73:ee:b4:6d:a4:5a:e3:da:81:e2:ee:71:57:b4:
4f:93:86:b0:71:db:fe:59:bd:82:a1:ba:7d:b9:f6:77:18:34:
d4:27:57:45:4d:41:3a:7c:dd:3d:86:07:e9:66:c5:9d:67:30:
b8:c7:1c:5c:ec:0e:77:2b:b7:66:ba:a8:6a:89:b8:a4:0a:62:
cc:da:72:bd:bb:1b:38:ac:8a:9b:6a:88:54:e6:df:25:c8:0e:
31:be:b2:d4:64:b8:a3:34:33:e9:31:fb:ad:28:75:20:9c:da:
01:5f:73:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:59 2025 by rpki-client