Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/LbDthJDfVJWWSabDXmeevytp-Jw.roa
File: LbDthJDfVJWWSabDXmeevytp-Jw.roa (raw, json)
Hash identifier: tJSRJ2/RjH2KqWuoZd/oDpg/BdHc4jrSIqlNnT9PImo=
Subject key identifier: 2D:B0:ED:84:90:DF:54:95:96:49:A6:C3:5E:67:9E:BF:2B:69:F8:9C
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0182DB7CDD0271293FF270277FF2D9CF8065
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/LbDthJDfVJWWSabDXmeevytp-Jw.roa
Signing time: Fri 26 Aug 2022 18:49:29 +0000
ROA not before: Fri 26 Aug 2022 18:49:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 91.186.220.0/22 maxlen: 24
178.253.40.0/22 maxlen: 24
178.253.38.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
83.147.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:db:7c:dd:02:71:29:3f:f2:70:27:7f:f2:d9:cf:80:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 26 18:49:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2db0ed8490df54959649a6c35e679ebf2b69f89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:c3:64:97:4b:cd:24:92:c7:3a:57:e0:aa:
30:f6:21:61:74:e1:cf:f4:e0:f4:8f:39:f5:39:c4:
74:09:20:74:43:d5:cf:46:fb:53:08:e1:4b:b9:88:
7d:3f:d9:cc:28:6d:75:76:fb:d9:40:f7:4d:42:2e:
4c:ba:64:5e:49:eb:97:0a:e4:f0:a8:85:9c:90:60:
9b:1e:82:b2:64:c9:28:c8:cd:4c:e7:7a:a0:72:43:
01:90:b5:b9:73:ab:45:10:31:e0:69:75:09:4c:d1:
b6:31:f5:f6:71:f1:cf:30:bb:a0:23:cd:a9:f6:3d:
3d:4a:41:61:33:63:7c:64:52:27:fb:e8:c7:93:d0:
40:32:08:96:3e:86:ba:d1:46:e5:ae:9c:bf:c7:d8:
cb:be:3a:dc:d1:c4:86:20:78:c8:49:4d:c6:e2:a6:
57:bd:75:5f:83:fd:12:1d:a8:22:07:b8:18:e2:09:
74:12:ca:9b:8c:0a:7b:ab:5b:e1:c0:0b:a2:52:36:
a1:a2:cc:be:56:73:c7:9c:99:07:e8:a5:05:04:7f:
71:a0:45:33:3d:44:ac:21:fc:77:79:55:8f:cb:4a:
36:25:c3:a8:51:d5:0b:94:6a:ab:be:25:ae:ca:4c:
6f:14:7a:a2:b4:75:f9:1d:71:d9:59:83:e9:39:27:
61:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B0:ED:84:90:DF:54:95:96:49:A6:C3:5E:67:9E:BF:2B:69:F8:9C
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/LbDthJDfVJWWSabDXmeevytp-Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
91.186.220.0/22
178.253.38.0-178.253.45.255
Signature Algorithm: sha256WithRSAEncryption
7b:83:56:82:a3:c0:65:7a:6f:70:79:fd:de:eb:50:97:cb:8e:
50:a1:ea:c1:82:ce:b4:5c:ab:49:41:91:db:44:a0:1f:a5:14:
38:5d:50:26:88:e3:71:f2:43:99:13:35:d6:37:d5:0f:11:56:
a0:bc:92:3b:44:73:f5:50:81:5d:69:01:72:a8:42:d6:28:b9:
31:89:d2:7d:1a:3c:83:05:19:f0:8c:d0:c4:f8:29:04:98:f5:
54:e3:66:7f:e0:a6:74:0b:69:2b:c2:99:19:ff:ea:03:82:c7:
8a:a5:a1:90:4d:b6:d3:7f:7a:0a:d6:51:43:6a:ae:9b:5b:ca:
96:c5:71:71:09:cd:eb:cf:c6:e5:7f:e9:49:59:6a:02:b1:20:
42:f7:59:f0:36:4d:47:1d:77:a0:93:43:d8:c8:48:c6:13:91:
7c:9d:12:52:3a:3e:ae:82:c9:a2:67:bf:83:aa:ca:07:99:e0:
bc:ce:02:17:dc:f0:fd:f7:87:86:3e:39:85:f2:70:f4:bf:2d:
77:1d:7a:57:39:8e:a1:a1:19:40:da:a7:80:03:c9:4d:e4:70:
dd:fb:16:68:4c:1a:72:b8:26:17:a4:a8:18:83:e4:eb:c3:7f:
fd:86:30:cc:f8:5a:0a:2d:f6:74:93:86:6a:7c:15:be:1b:29:
c1:f0:7a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org