Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/LNir-vYJvQLQyptosJuJaKIU4h4.roa
File: LNir-vYJvQLQyptosJuJaKIU4h4.roa (raw, json)
Hash identifier: Rbu2Mlu6uBCWIwwpvibwNlRJ9dyDMR1WDbmCY/4dt7g=
Subject key identifier: 2C:D8:AB:FA:F6:09:BD:02:D0:CA:9B:68:B0:9B:89:68:A2:14:E2:1E
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 174DD821
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/LNir-vYJvQLQyptosJuJaKIU4h4.roa
Signing time: Sat 01 Jan 2022 16:03:51 +0000
ROA not before: Sat 01 Jan 2022 16:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48874
IP address blocks: 85.204.116.0/24 maxlen: 24
89.40.73.0/24 maxlen: 24
86.104.194.0/24 maxlen: 24
86.104.10.0/24 maxlen: 24
89.32.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390977569 (0x174dd821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cd8abfaf609bd02d0ca9b68b09b8968a214e21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:31:07:bc:3a:99:0c:f4:83:d1:0d:99:b9:
b7:05:27:eb:cc:a5:48:93:31:49:5e:24:84:7f:da:
af:79:13:6d:31:10:bd:35:ca:5e:66:aa:4d:87:df:
cd:c2:1d:02:79:aa:50:22:1a:5a:7a:65:76:8e:a7:
ec:2f:65:29:70:58:c3:ba:5b:8b:f7:ee:e6:81:04:
55:fe:c8:24:5f:cd:61:fe:dc:aa:a2:9e:b3:33:dc:
f8:d2:16:62:4c:d0:bf:bd:c8:1a:ea:2b:63:3e:0d:
d0:15:3b:11:99:61:93:36:07:e2:36:29:2d:5e:22:
e1:f6:f4:fa:f3:e8:d7:c4:57:98:3f:e6:c8:fc:36:
5a:a5:f0:db:d7:30:1d:b2:50:3d:74:41:bf:f9:e3:
88:5f:1f:56:d9:fb:bb:6f:22:1c:1c:5d:b4:57:cd:
52:65:4e:12:dc:c1:f7:e3:50:02:0d:62:95:8a:bf:
a5:08:96:a3:68:32:14:49:76:77:c3:d5:bc:c8:b2:
24:8e:26:2f:0e:bb:64:27:f4:8b:da:b6:e7:6b:46:
f6:57:b7:c5:9b:3f:66:7f:fc:10:7b:38:7f:67:41:
bf:47:4a:6b:1b:af:8f:39:60:16:f0:62:b1:31:a7:
ae:3f:a3:9e:c9:17:ae:8b:3b:de:f8:78:c5:ee:ed:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D8:AB:FA:F6:09:BD:02:D0:CA:9B:68:B0:9B:89:68:A2:14:E2:1E
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/LNir-vYJvQLQyptosJuJaKIU4h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.116.0/24
86.104.10.0/24
86.104.194.0/24
89.32.41.0/24
89.40.73.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:7d:0a:25:5b:71:8f:ce:4c:db:d7:c1:d1:dc:20:c7:c6:ae:
df:b0:e0:c7:df:eb:22:a5:ce:17:40:07:a2:c0:c8:b0:68:59:
31:cc:5b:5e:55:0a:5b:9b:25:0a:59:49:63:13:f9:ae:b0:88:
38:f3:d3:d1:40:9c:c8:88:7b:03:f2:bd:cb:ff:58:af:94:af:
47:e4:c2:9c:42:fa:66:f4:82:c2:50:9b:14:5f:e6:9a:f5:b7:
53:f7:40:65:d4:10:43:8f:75:53:21:8b:a5:e3:ce:fe:b4:a5:
8a:2e:be:28:19:e7:99:c6:be:d0:f4:c2:87:2a:a8:5e:38:0a:
b5:39:98:ff:d2:4b:09:f6:9f:21:06:dc:4d:d5:57:51:e0:48:
58:1b:98:9c:45:dd:7a:28:cb:70:ba:42:55:b6:8b:0f:04:88:
05:2e:31:37:ed:6c:55:74:1c:73:77:5f:60:d7:95:3a:0a:69:
36:ea:94:e7:a7:de:95:8a:0d:c0:b5:a3:94:5c:8f:52:f7:57:
e4:be:42:c4:d3:d6:9d:31:d1:29:1c:c0:02:67:68:06:ed:ed:
6c:c3:7e:76:fc:98:7c:91:d5:ad:fc:cc:e0:2d:b1:45:b3:15:
47:62:3d:26:fa:a2:66:33:8a:8d:39:93:09:76:fa:dc:be:9f:
7a:e1:1b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:49:17 2025 by rpki-client