Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/LZR5tNgb-7oeFX1wPmbvaVRjTQQ.roa
File: LZR5tNgb-7oeFX1wPmbvaVRjTQQ.roa (raw, json)
Hash identifier: v1qpvHBTlHkqswSi9Uk5mxqgHVksIkghKu/gTLRfhTM=
Subject key identifier: 2D:94:79:B4:D8:1B:FB:BA:1E:15:7D:70:3E:66:EF:69:54:63:4D:04
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 16CADCA7
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/LZR5tNgb-7oeFX1wPmbvaVRjTQQ.roa
Signing time: Sat 01 Jan 2022 02:51:20 +0000
ROA not before: Sat 01 Jan 2022 02:51:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56534
IP address blocks: 85.143.203.0/24 maxlen: 24
85.143.204.0/22 maxlen: 22
85.142.164.0/22 maxlen: 22
85.142.168.0/21 maxlen: 21
85.142.176.0/22 maxlen: 22
85.143.144.0/22 maxlen: 22
85.143.252.0/22 maxlen: 22
85.143.160.0/21 maxlen: 21
85.142.208.0/22 maxlen: 22
85.143.176.0/22 maxlen: 22
85.143.184.0/22 maxlen: 22
82.179.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382393511 (0x16cadca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 02:51:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d9479b4d81bfbba1e157d703e66ef6954634d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7d:85:28:39:b8:50:42:72:c7:99:d2:78:af:
09:05:16:9c:e7:5c:73:08:0b:0f:40:88:7f:18:d0:
58:24:8e:d1:d8:0e:72:a8:3e:4b:09:ef:60:10:f6:
f2:4a:91:09:14:a4:53:84:9d:c0:78:01:e1:25:2a:
a6:72:90:bf:80:5e:14:8e:b7:2d:f6:2e:0f:0b:82:
68:a1:36:4b:b6:5c:ae:4c:34:1f:ba:14:26:84:a0:
df:60:b7:da:82:0b:85:2e:cb:47:07:75:29:aa:d2:
1a:73:6a:33:33:62:d7:f8:97:88:a6:72:d4:fa:0b:
9d:2c:0e:65:82:9b:46:bc:b8:d9:8f:ca:a9:60:ed:
17:46:27:14:6e:3d:87:23:30:d9:d7:43:d7:d9:e5:
3d:8e:9d:46:00:53:b6:42:80:a3:5a:45:d1:33:d5:
f4:55:12:9a:b1:38:fa:3a:67:35:ef:cc:62:ee:df:
e8:20:d7:97:43:c1:1b:8a:48:bb:df:8c:f5:d3:c8:
37:22:ac:68:51:ec:2e:c7:23:65:75:fa:93:bf:89:
4f:d1:49:65:e1:47:97:7a:65:25:df:9b:bd:94:36:
6a:d3:fb:8f:11:02:96:57:ba:19:63:ac:c0:a3:2a:
92:dc:c8:6b:86:29:4c:77:83:85:dd:52:d3:ce:e2:
44:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:94:79:B4:D8:1B:FB:BA:1E:15:7D:70:3E:66:EF:69:54:63:4D:04
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/LZR5tNgb-7oeFX1wPmbvaVRjTQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.248.0/22
85.142.164.0-85.142.179.255
85.142.208.0/22
85.143.144.0/22
85.143.160.0/21
85.143.176.0/22
85.143.184.0/22
85.143.203.0-85.143.207.255
85.143.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:b1:16:6f:8f:1a:89:24:3f:42:60:18:d4:a2:3a:84:5a:31:
c8:6e:1d:de:50:b4:db:16:69:a1:56:6d:d2:13:6f:36:a0:03:
e3:74:1d:f6:6e:e1:e6:b5:32:59:58:c2:a7:1e:53:fd:5b:ef:
f0:4e:01:89:3f:28:f0:b8:ce:47:7e:fe:89:82:96:8a:22:cc:
6b:fe:11:ad:8b:f1:3d:a7:51:ff:84:57:78:fc:b1:6c:80:51:
2f:2b:0d:f1:35:d3:a4:56:99:e2:fa:cc:24:b6:fb:4f:38:f2:
f4:e0:6d:e0:55:a9:c6:b4:07:75:a3:9f:7f:78:5f:4c:ce:6c:
56:2a:f3:08:1e:a3:9b:5d:ef:88:69:d0:05:45:c0:dd:ca:b1:
ec:f0:2b:24:e6:09:b6:bd:2f:3b:96:09:91:5c:f0:4d:46:d5:
65:67:9e:5b:5d:e4:0d:30:c7:b8:2f:2c:e5:39:f5:81:ab:62:
5d:03:8b:03:58:d7:82:21:0d:c8:71:7d:82:ba:f3:64:58:17:
a4:ef:93:a1:26:af:e7:28:03:04:12:90:86:ac:1c:83:2d:2c:
f5:36:5c:54:4b:79:ca:03:ab:4e:ae:fa:ed:34:f6:f3:51:26:
0d:c0:56:64:cb:df:93:02:40:43:0a:61:31:95:a7:b7:fa:fe:
f0:d3:1f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org