Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/v-lyxkTYBlKDAlFgf-uSvb04Tl8.roa
File: v-lyxkTYBlKDAlFgf-uSvb04Tl8.roa (raw, json)
Hash identifier: tXP2XyuuD/HYjyhGxV3BI0IinEbjou6IS2YvRzf1RR8=
Subject key identifier: BF:E9:72:C6:44:D8:06:52:83:02:51:60:7F:EB:92:BD:BD:38:4E:5F
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 10E074D7
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/v-lyxkTYBlKDAlFgf-uSvb04Tl8.roa
Signing time: Thu 09 Jun 2022 08:22:02 +0000
ROA not before: Thu 09 Jun 2022 08:22:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58316
IP address blocks: 185.56.216.0/23 maxlen: 23
185.17.104.0/23 maxlen: 23
185.198.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283145431 (0x10e074d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Jun 9 08:22:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfe972c644d80652830251607feb92bdbd384e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:c2:85:4b:a3:fb:04:a7:56:77:83:8c:fa:
ea:2f:74:77:ec:e7:ad:04:bd:fd:b2:61:7c:07:f7:
70:5d:26:f4:46:83:45:c9:27:9a:50:4a:d4:b8:4c:
c5:f3:4b:16:e4:a9:03:75:e8:cf:ec:df:ff:cc:62:
1b:c8:1c:40:0e:a3:29:2a:f7:7a:9e:b6:b3:21:7c:
13:16:1c:e1:ad:34:02:fb:74:ad:bf:20:7c:e9:f2:
2c:b4:61:62:35:36:97:e1:36:df:41:58:7e:63:b2:
1a:64:2d:6c:bf:d2:ad:ca:6e:f5:81:81:88:a5:ca:
90:05:f0:af:79:17:17:f5:05:85:08:70:53:f6:1e:
16:da:30:97:13:2a:1c:99:87:0d:ac:f9:6a:4f:8e:
7b:77:20:78:cc:54:49:ef:d0:4f:53:7d:b9:b2:fc:
fc:df:f4:1d:f5:42:d5:67:f8:e2:69:76:35:29:55:
80:52:b9:f5:dd:ef:d8:43:ca:04:63:ee:c0:e4:6b:
a1:10:ee:c4:79:f1:9c:f8:e4:11:cd:a8:3f:66:06:
40:00:8f:c7:5c:d3:8f:f9:55:ef:94:c7:8f:26:1a:
fe:b7:b5:4b:d7:43:c9:a5:e0:65:0d:4e:9d:bf:35:
b3:4e:2f:a5:dc:22:8d:5f:b6:b3:5c:89:c1:d5:2b:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E9:72:C6:44:D8:06:52:83:02:51:60:7F:EB:92:BD:BD:38:4E:5F
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/v-lyxkTYBlKDAlFgf-uSvb04Tl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.104.0/23
185.56.216.0/23
185.198.120.0/22
Signature Algorithm: sha256WithRSAEncryption
03:24:69:9d:ce:1b:c1:2d:52:12:15:a8:2e:00:e4:58:46:d1:
6f:a0:77:e9:1f:b5:85:69:9e:96:f7:f1:a1:5c:91:27:5b:ca:
24:c9:73:00:ac:d5:1a:d7:f0:66:53:9f:77:ea:aa:e8:a9:a8:
ab:ba:2a:46:6b:a5:f5:67:a2:c0:d6:c9:0c:ac:fd:34:e0:4e:
64:52:74:8e:85:f9:c1:44:f7:98:12:48:bf:59:ea:c9:6e:bf:
eb:9e:52:e7:d8:d4:f1:ce:18:b1:2e:5a:b7:66:1f:ba:96:19:
7a:6d:ad:01:3b:32:86:ea:a4:f6:4c:aa:9f:85:eb:67:2f:5c:
ff:e3:85:60:65:63:c4:0c:68:7e:f1:cf:f9:c9:e3:c9:d9:5e:
6d:3a:66:ba:67:17:7f:04:07:7a:dd:a1:49:06:94:ed:b9:fb:
04:90:c4:9b:60:a6:78:09:ad:5a:cb:56:aa:e4:97:3c:c5:3e:
97:24:be:84:0e:42:98:08:d7:56:de:e0:49:02:69:ab:d6:d1:
2c:ee:72:8c:02:1a:3c:eb:2f:b3:e6:cd:f6:35:1c:5e:96:15:
df:b1:b4:6d:95:e5:f2:ea:11:66:3f:ef:32:04:24:86:18:69:
8e:06:6c:ec:45:8f:08:ec:e7:f8:c6:5a:70:4b:8b:90:6c:3b:
e8:33:8b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:02 2025 by rpki-client