Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/Lq_Vju2zA1MIsx09WFij6RwRCro.roa
File: Lq_Vju2zA1MIsx09WFij6RwRCro.roa (raw, json)
Hash identifier: YqTzwlJzXc9e16dGKBjSFWhUXtuJvp3Lh++qZR8TmWU=
Subject key identifier: 2E:AF:D5:8E:ED:B3:03:53:08:B3:1D:3D:58:58:A3:E9:1C:11:0A:BA
Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial: 168B7222
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/Lq_Vju2zA1MIsx09WFij6RwRCro.roa
Signing time: Sat 01 Jan 2022 13:04:26 +0000
ROA not before: Sat 01 Jan 2022 13:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48294
IP address blocks: 185.70.32.0/22 maxlen: 22
91.132.128.0/22 maxlen: 22
45.86.222.0/23 maxlen: 23
45.91.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378237474 (0x168b7222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
Validity
Not Before: Jan 1 13:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2eafd58eedb3035308b31d3d5858a3e91c110aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:3e:b6:97:b9:25:81:88:39:72:2e:9b:e6:
36:0e:e4:75:86:4d:bd:d1:fc:97:05:40:32:16:ec:
2c:67:89:cf:51:2f:51:9f:aa:22:bb:b7:36:37:1e:
d5:87:dc:7d:78:31:ca:aa:fc:ed:0c:cb:7f:18:2c:
e1:85:cf:5c:42:94:70:ba:0c:14:92:46:ba:9a:44:
3c:cc:00:c7:a4:51:d1:72:6c:e4:b2:da:be:98:2f:
4f:95:ab:34:09:19:75:98:67:4d:44:9f:73:6d:c2:
46:91:3c:d2:d3:17:21:4a:d0:3a:cb:9d:d7:4f:2a:
4d:82:68:60:87:71:79:7d:7b:dd:da:24:ce:d7:80:
8f:21:d4:af:f3:33:c2:8b:b6:67:a9:80:e5:d2:f1:
a5:b7:3d:3e:e5:0c:b3:4f:bb:72:99:b2:64:47:f2:
2c:5b:eb:2a:ee:8a:1c:cc:b9:7d:27:41:71:b8:c2:
3e:10:96:74:c8:3d:fa:99:44:8b:85:ba:b0:bc:2f:
dc:5f:46:b6:9d:af:5c:54:dc:2d:0c:91:9a:88:bb:
fb:30:92:bd:f0:58:5a:a0:8f:21:cd:ae:23:b0:e1:
d3:c1:b2:a8:df:19:fe:4e:2f:d6:70:d5:0c:ba:84:
37:75:b0:f6:fe:56:2f:e7:41:e8:b8:01:ac:67:ec:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AF:D5:8E:ED:B3:03:53:08:B3:1D:3D:58:58:A3:E9:1C:11:0A:BA
X509v3 Authority Key Identifier:
keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/Lq_Vju2zA1MIsx09WFij6RwRCro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.222.0/23
45.91.36.0/22
91.132.128.0/22
185.70.32.0/22
Signature Algorithm: sha256WithRSAEncryption
25:67:75:f9:43:77:9a:69:63:ad:34:6a:75:6e:aa:0e:cd:41:
2c:53:68:d3:52:30:dd:77:62:36:95:18:85:b4:20:f6:9e:29:
4d:99:e0:f7:9c:a9:71:86:e2:00:fa:fb:a8:7a:7d:6d:11:6e:
42:24:d8:0b:c0:3a:a6:12:c3:e2:1a:84:cf:3c:1e:39:13:7a:
86:64:02:5c:6c:d3:95:72:2c:11:db:c7:cc:53:6d:5e:90:d7:
85:a9:4d:0f:72:bf:79:68:18:f7:1f:ec:1e:25:19:19:dd:1c:
e6:06:42:72:6a:15:de:6f:eb:7a:d0:70:43:04:4a:6d:6e:9a:
07:bb:38:de:a6:7e:33:dc:9b:01:d7:c1:6e:86:e5:00:e3:13:
e7:42:c4:a1:ab:ce:c4:c7:37:1a:89:a1:69:00:4c:0b:e9:60:
45:86:66:4f:4b:19:ca:f8:e9:96:08:1f:e5:d6:f6:5c:28:41:
03:bd:ca:f6:f4:84:47:bc:7f:af:fd:a6:17:53:c4:66:fa:5e:
ca:73:7c:41:84:3f:31:49:27:65:20:e7:fa:03:61:33:5d:1d:
51:e1:9f:62:58:95:2b:49:f2:da:4c:f1:1a:36:90:7b:57:48:
c7:ff:8c:61:a1:63:cc:ba:09:1b:c4:00:ef:fb:bb:e3:f2:65:
fa:b9:a5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:07 2025 by rpki-client