Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/LBQI24_Cw2HpTSBjKBcZTnmmbY4.roa
File: LBQI24_Cw2HpTSBjKBcZTnmmbY4.roa (raw, json)
Hash identifier: Cdx/IALv4jq6TIR++JRQfy/75f48/3a4VaWA0XmWev8=
Subject key identifier: 2C:14:08:DB:8F:C2:C3:61:E9:4D:20:63:28:17:19:4E:79:A6:6D:8E
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 1F27
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/LBQI24_Cw2HpTSBjKBcZTnmmbY4.roa
Signing time: Tue 18 Jan 2022 03:18:20 +0000
ROA not before: Tue 18 Jan 2022 03:18:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43594
IP address blocks: 185.184.232.0/22 maxlen: 22
185.184.233.0/24 maxlen: 24
185.184.232.0/24 maxlen: 24
185.184.234.0/24 maxlen: 24
2a0b:4380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7975 (0x1f27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Jan 18 03:18:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c1408db8fc2c361e94d20632817194e79a66d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:d3:98:3c:8a:a5:99:b4:a8:6f:a6:30:d0:
15:af:5b:1b:d9:41:12:65:41:a0:0a:0c:15:03:18:
81:7a:14:2b:79:25:18:6e:75:23:19:08:8b:38:a2:
85:ed:66:aa:b3:dc:e0:6d:7b:c3:c9:5e:b9:a4:02:
a1:a2:48:b1:7b:d8:74:4f:67:f6:a3:d0:49:d7:a8:
f9:19:50:cf:90:72:52:0a:cf:3f:c4:9e:5d:c9:fe:
42:fe:e4:ba:b4:5c:1d:02:da:df:d5:0f:44:fa:41:
96:82:a8:11:17:a1:89:9f:82:5a:c7:b4:9a:0f:e8:
4b:7e:02:ca:54:1f:59:0c:5c:3e:4e:a5:c9:bf:64:
6b:fa:05:f1:a6:68:44:47:77:9e:30:d3:47:00:89:
86:41:89:f4:2d:aa:11:6c:c2:7b:b2:66:6d:af:77:
9d:28:0d:32:4f:6b:ae:12:f2:44:ed:0c:74:d2:12:
de:46:6a:19:6f:8b:2d:5b:67:b4:80:e1:72:ce:4a:
33:78:90:07:cd:0d:23:45:13:c5:19:22:73:8c:32:
bf:ea:a4:1b:86:64:ec:bc:2a:c1:c3:c9:13:80:6c:
3e:aa:81:10:13:73:91:ad:7a:59:7c:a2:4a:b6:19:
a2:97:aa:ee:c2:87:7e:d2:0b:46:f8:80:f0:58:22:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:14:08:DB:8F:C2:C3:61:E9:4D:20:63:28:17:19:4E:79:A6:6D:8E
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/LBQI24_Cw2HpTSBjKBcZTnmmbY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.232.0/22
IPv6:
2a0b:4380::/32
Signature Algorithm: sha256WithRSAEncryption
28:a3:9c:1b:db:3e:0f:f9:cf:4f:0e:e9:08:7d:ac:5f:a2:2a:
39:cf:f1:e7:a9:7d:38:5e:4c:21:b3:18:9d:b3:e7:fe:65:ec:
b2:9c:b4:45:fc:36:30:cf:8f:b1:a9:62:ce:01:04:1f:29:58:
12:89:71:41:14:40:f8:17:dd:08:7e:c1:50:5c:f9:b7:c4:aa:
f9:df:42:92:cf:95:0a:a3:7c:1a:cf:c9:08:51:aa:72:4a:d3:
4a:c2:58:b7:c8:98:08:60:17:a0:aa:07:35:65:3e:8f:b2:fa:
32:88:80:2f:25:31:b4:25:ad:87:a5:23:d3:7e:6a:42:ac:35:
ed:92:62:c6:5c:76:1b:c3:9f:14:7d:74:c4:b3:5f:a8:2d:04:
f1:57:8c:6d:18:05:e5:ba:7a:63:09:d3:99:ac:aa:62:6b:ee:
57:51:ae:7b:74:e9:a8:f5:fa:ad:08:f2:e3:4d:2c:c5:15:4c:
a6:6e:7a:63:13:30:cc:0c:21:3f:1e:ab:36:e3:38:d4:76:06:
ac:9a:0a:8c:4c:ab:38:7f:f5:32:56:7e:12:5a:aa:db:2f:b0:
68:27:26:22:b8:0b:ee:90:8e:82:03:1b:0d:77:d5:60:bb:89:
3d:57:ea:1d:3c:b4:6b:c3:81:20:2e:8a:f5:f1:ce:89:29:e1:
92:85:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:47 2024 by rpki-client on console-fra.rpki-client.org