Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/LCIIZljc9YgRlghZ5JJ-iAphaoI.roa
File: LCIIZljc9YgRlghZ5JJ-iAphaoI.roa (raw, json)
Hash identifier: zVpW4COl1v1O3JyzVooy45qQQYHJrCZoP/3c9rsPASA=
Subject key identifier: 2C:22:08:66:58:DC:F5:88:11:96:08:59:E4:92:7E:88:0A:61:6A:82
Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial: 01856ED4D7C54CE43C7767EF88F8A6907965
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/LCIIZljc9YgRlghZ5JJ-iAphaoI.roa
Signing time: Sun 01 Jan 2023 19:35:20 +0000
ROA not before: Sun 01 Jan 2023 19:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30781
IP address blocks: 185.85.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d7:c5:4c:e4:3c:77:67:ef:88:f8:a6:90:79:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Validity
Not Before: Jan 1 19:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c22086658dcf58811960859e4927e880a616a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:74:4e:58:7e:f2:e1:cb:7d:66:64:24:a9:d4:
e6:1f:b0:00:00:24:75:d2:ab:0b:1e:2f:2c:64:5d:
ca:93:0c:0b:c9:62:9e:86:6c:47:8a:b0:f7:eb:7e:
e2:57:cc:2c:38:7c:5e:f8:fd:72:62:19:59:26:72:
66:c7:0a:d2:53:aa:0f:96:6f:6f:22:6e:a7:cc:d6:
ee:87:66:39:85:31:13:ab:cc:85:86:05:93:6e:94:
db:f9:94:17:c3:44:a3:3d:e5:99:c9:01:85:3c:8c:
75:ec:a3:55:7f:e2:ff:cd:7f:45:ac:28:49:ce:29:
c0:ff:8d:52:4d:c6:3a:b4:4f:a8:af:28:f1:2d:5d:
73:22:e3:57:cf:7a:f7:5d:5f:e5:ea:c5:1f:1c:8d:
d8:a5:1b:5f:1f:e8:b3:53:a7:b6:5b:de:94:ab:8b:
d6:23:48:ac:ad:e1:4e:58:24:34:23:ed:6e:97:9e:
82:70:68:2b:55:51:45:73:6a:4e:b8:81:8d:3a:94:
1b:78:27:ee:9a:54:bd:21:c7:08:b4:fb:bd:07:31:
0a:ad:11:fe:e9:50:ed:b1:6d:67:1e:ec:41:ac:14:
d7:de:d6:9c:51:3a:72:24:4d:13:a7:78:47:2f:22:
ca:b2:b1:e6:fc:d7:1c:1a:de:d9:2a:dd:df:d4:ab:
73:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:22:08:66:58:DC:F5:88:11:96:08:59:E4:92:7E:88:0A:61:6A:82
X509v3 Authority Key Identifier:
keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/LCIIZljc9YgRlghZ5JJ-iAphaoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.234.0/24
Signature Algorithm: sha256WithRSAEncryption
88:46:3f:9a:d5:7b:77:8c:0f:4b:af:bf:f5:4d:9e:31:55:a0:
87:48:a2:0f:ac:ef:9f:c4:ba:6d:62:b7:eb:9e:fb:70:a2:82:
a4:8b:15:c5:67:a7:d5:96:e6:ff:a4:1e:0a:f1:f1:80:12:3e:
96:c1:8a:f8:7a:b3:3c:37:18:8f:93:d5:45:07:c0:8f:d7:87:
a8:74:41:45:e9:65:ec:fa:20:94:53:11:31:15:3c:63:4b:86:
8e:63:1a:14:58:b9:44:bc:c8:c0:2b:b0:05:63:f9:73:1e:f5:
20:bc:26:94:1a:59:a0:01:a1:fe:a6:48:da:67:a6:3e:b5:47:
0f:e3:ed:73:88:6b:e8:71:bc:37:12:b1:56:4a:cd:85:b4:ed:
93:a8:69:0c:89:1e:0e:02:7b:c2:db:8b:fc:96:1e:41:d8:1d:
a5:d7:29:95:99:b8:e2:c9:07:bb:32:e2:2e:e6:76:0e:4b:99:
10:11:3f:0e:10:f1:b7:23:2c:4d:fe:56:ce:07:21:9e:e1:b6:
b1:d4:28:0b:14:f2:1b:10:89:b2:74:6f:a1:26:cb:24:21:55:
5a:71:c2:9e:08:e1:20:63:f2:06:61:8c:42:ee:e3:22:e0:ac:
ee:e3:2e:b4:51:62:e5:ee:7f:82:bb:dd:3d:52:ce:bf:54:e3:
09:ab:33:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:57:44 2025 by rpki-client