Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/LKdWesgak2hcWYai3wvM2urB9zs.roa
File: LKdWesgak2hcWYai3wvM2urB9zs.roa (raw, json)
Hash identifier: Ev4sHV0RWBF7en/nw5a1gZIoNq3GvkyNh6nDf8pbowE=
Subject key identifier: 2C:A7:56:7A:C8:1A:93:68:5C:59:86:A2:DF:0B:CC:DA:EA:C1:F7:3B
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 018570673E17B964CDAAE65BC09630233462
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/LKdWesgak2hcWYai3wvM2urB9zs.roa
Signing time: Mon 02 Jan 2023 02:54:52 +0000
ROA not before: Mon 02 Jan 2023 02:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57256
IP address blocks: 185.164.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:3e:17:b9:64:cd:aa:e6:5b:c0:96:30:23:34:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Jan 2 02:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ca7567ac81a93685c5986a2df0bccdaeac1f73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bc:84:20:5c:9c:9d:f5:e2:ca:53:af:dc:fb:
d0:e9:be:35:fa:dc:9f:4a:a0:27:5f:8f:2c:e4:8f:
ae:9b:f2:d2:45:c3:84:8d:90:ce:96:9c:14:80:76:
4b:42:bb:42:c5:c5:eb:9a:f7:fd:5d:07:16:f6:a9:
78:50:dd:7b:2b:60:ab:19:83:18:71:3d:9b:09:70:
5b:38:5b:6c:ba:68:fd:36:ae:30:38:55:4b:3e:33:
68:d9:23:94:27:42:6d:d6:56:33:8b:b5:53:ac:32:
c3:7f:69:1e:e4:a0:c1:94:4f:b0:39:68:a4:4c:d3:
5c:d1:51:4f:41:3e:59:c0:e3:14:0e:d8:6c:4b:8e:
eb:5f:0c:40:2e:65:e1:18:f0:84:18:44:e3:eb:57:
5d:00:53:56:91:4f:ac:a3:59:4b:ee:c5:f7:94:da:
23:4b:76:dd:e0:1a:33:44:05:7a:50:4b:1b:ad:93:
5b:e3:9e:f3:c5:10:e1:0d:d0:a0:90:cd:0b:16:e1:
d3:e6:da:d7:39:b2:c1:8d:f7:c8:84:cd:f7:b9:6e:
16:08:92:d6:a2:9c:90:5b:35:9e:17:c0:64:3f:53:
87:0a:68:9a:a8:ad:83:c3:2e:d7:49:89:3c:11:86:
1a:be:04:62:96:67:7a:b2:e4:62:18:ca:75:6c:8a:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A7:56:7A:C8:1A:93:68:5C:59:86:A2:DF:0B:CC:DA:EA:C1:F7:3B
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/LKdWesgak2hcWYai3wvM2urB9zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.104.0/24
Signature Algorithm: sha256WithRSAEncryption
44:24:fb:5a:01:58:bd:d4:1e:e9:77:13:0d:c3:95:da:b9:65:
ca:36:03:a9:8d:b5:b8:c4:4d:1c:fc:df:b6:07:5b:f2:15:0a:
5f:7d:4c:25:0c:a8:dd:04:dc:e2:87:f2:68:71:fa:73:e8:7b:
f6:6e:09:ce:3b:d1:bb:1e:02:cc:8b:df:5b:3c:1e:ae:fa:ad:
c1:7e:de:ee:f5:f7:ad:48:6b:7e:02:60:b9:30:e0:c5:cf:23:
10:90:6c:4c:49:32:5c:71:f4:ea:a5:50:aa:66:c8:30:e0:c1:
87:d2:f8:da:8c:54:c8:77:f2:7d:53:b8:d6:22:54:e7:de:92:
92:a7:d2:23:34:73:3d:42:e9:17:bb:9e:4e:75:23:e8:5c:21:
b1:97:bc:16:fd:41:bc:ed:a8:76:78:85:20:b0:96:f4:87:e0:
79:4f:21:c8:53:51:7e:8e:18:26:10:cc:47:97:52:60:c0:30:
e7:37:17:a9:c5:97:85:9a:0b:cb:16:e6:6d:94:87:e4:2d:6f:
dc:17:23:c8:69:1e:e1:dc:ef:54:c4:9b:74:d5:1f:a8:0f:d9:
d8:ca:c6:f8:b2:f4:f4:20:2f:5b:db:29:54:38:a4:38:26:3f:
10:c0:bb:34:bb:de:24:84:f5:61:f7:35:da:0b:62:0a:5a:b7:
d6:6a:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:02 2025 by rpki-client