Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/lYa_vLUhFsol21tRdN92G912UmQ.roa
File: lYa_vLUhFsol21tRdN92G912UmQ.roa (raw, json)
Hash identifier: QB/sEKks73pQcYHgisIFP75WHaB+gps8XthIFSUzUno=
Subject key identifier: 95:86:BF:BC:B5:21:16:CA:25:DB:5B:51:74:DF:76:1B:DD:76:52:64
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 018C20F206A175E8004A122B95573DA98D06
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/lYa_vLUhFsol21tRdN92G912UmQ.roa
Signing time: Thu 30 Nov 2023 15:56:21 +0000
ROA not before: Thu 30 Nov 2023 15:56:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134094
IP address blocks: 185.190.16.0/24 maxlen: 24
185.190.17.0/24 maxlen: 24
185.190.19.0/24 maxlen: 24
185.190.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:f2:06:a1:75:e8:00:4a:12:2b:95:57:3d:a9:8d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Nov 30 15:56:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9586bfbcb52116ca25db5b5174df761bdd765264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e1:43:36:f2:41:e6:c7:dc:62:f6:32:6b:a8:
28:fd:e0:6b:8e:e2:8d:99:9c:7d:e9:68:b8:f5:31:
dd:cb:8b:41:c4:0d:c0:40:ab:1f:b9:5f:03:6f:4b:
c1:03:84:f1:37:8c:85:80:eb:0e:64:cf:15:48:31:
d6:a2:27:8a:63:17:2e:b8:d0:8f:be:19:80:94:b2:
4c:3e:29:bf:05:55:17:a7:b0:03:88:6e:9d:b2:39:
92:e5:cf:75:a2:70:8f:32:06:78:69:ac:ef:94:6d:
86:8c:98:79:81:a3:c7:1d:46:12:77:1a:f7:b4:65:
18:e5:86:d3:43:95:b2:99:1d:14:af:8e:5e:cd:ea:
79:ae:b5:18:f1:94:19:b9:e7:a8:c7:6e:dc:80:a7:
6f:84:3f:23:85:ba:7d:21:04:f6:28:d8:e3:af:6f:
13:ff:3f:98:12:5d:8e:2c:78:d5:2c:f5:f4:3f:50:
88:6d:d3:23:54:27:bd:af:6c:c7:aa:8d:85:c4:8c:
11:cc:be:e1:31:12:71:46:21:dd:57:0d:06:c3:4e:
b1:ea:71:2f:f9:8c:65:4d:87:3e:c6:1f:57:e2:6a:
d2:07:e4:c7:82:14:2c:c0:46:aa:a2:6b:5b:81:69:
b1:26:02:3f:f4:bb:4a:75:c9:f2:c1:03:0a:36:32:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:86:BF:BC:B5:21:16:CA:25:DB:5B:51:74:DF:76:1B:DD:76:52:64
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/lYa_vLUhFsol21tRdN92G912UmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:20:59:e8:70:70:82:72:c3:ef:ec:0d:72:e2:42:a7:11:a7:
69:15:e7:03:6b:d8:2e:87:86:93:82:66:2c:6d:f9:0f:a2:ad:
5d:04:ba:12:f3:80:ef:bd:f5:16:9b:72:0c:d7:c9:2f:93:97:
bb:0e:0e:24:bb:e6:0a:dc:d1:ce:64:c9:b1:5a:dc:9e:f8:98:
b6:a8:e9:5f:d1:42:42:bc:db:26:a5:49:24:3e:46:44:5d:73:
19:dd:75:35:ab:31:8c:ee:c1:b5:76:4b:00:46:fc:0c:da:f3:
cf:b9:fb:bb:b0:a6:aa:2e:d1:e0:fa:ed:57:5a:49:1f:72:77:
5a:a6:db:82:60:df:7e:7d:9f:e9:60:64:98:be:89:67:ec:9f:
cd:f0:92:61:e8:28:4f:de:46:e9:5b:6b:4d:d6:0e:6f:6c:f7:
76:fb:44:1b:e0:36:3d:c8:06:4f:b4:f8:5c:6e:64:b5:6a:c6:
28:5b:9d:f6:fc:bd:05:5d:b3:f6:66:65:11:2a:2b:37:3c:15:
3b:c8:a6:c7:69:9e:48:cd:e9:7a:bb:62:39:c5:4f:88:6a:c0:
e8:63:57:6e:3d:98:ae:5c:c4:7b:c6:2b:e6:26:5f:12:f1:22:
3d:8e:35:e6:14:bd:41:ed:51:8f:98:b6:b7:f7:80:16:7d:e8:
a1:06:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:38 2025 by rpki-client