Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/LTDzhnt_UXPBp9NDjS2CKuYqG1U.roa
File: LTDzhnt_UXPBp9NDjS2CKuYqG1U.roa (raw, json)
Hash identifier: kSyYEUIzKbzPYZ9PDIAhJyhBlcK7ZKZEofBjocW6KjU=
Subject key identifier: 2D:30:F3:86:7B:7F:51:73:C1:A7:D3:43:8D:2D:82:2A:E6:2A:1B:55
Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af
Certificate serial: 0A1B3FD5
Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/LTDzhnt_UXPBp9NDjS2CKuYqG1U.roa
Signing time: Sat 01 Jan 2022 14:07:53 +0000
ROA not before: Sat 01 Jan 2022 14:07:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56722
IP address blocks: 185.134.208.0/22 maxlen: 22
2a06:eec0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169557973 (0xa1b3fd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fadce637efb28194715ac2a72129e20571b983af
Validity
Not Before: Jan 1 14:07:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d30f3867b7f5173c1a7d3438d2d822ae62a1b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:d2:dd:52:be:10:a0:3d:12:cc:ea:3f:42:
e9:53:14:70:a0:37:93:44:27:f5:19:53:db:23:11:
a0:57:5b:6f:72:be:b8:2c:71:89:f6:e2:ba:ef:88:
9f:b8:30:54:5e:25:00:d3:12:e6:2b:a7:f9:ca:cd:
ac:c5:55:d5:3f:a7:9e:d4:c8:4d:52:65:92:10:de:
ec:60:30:dc:90:83:9b:17:dc:33:a9:ed:d2:b4:5c:
df:ae:d1:62:e6:b8:c4:31:57:62:13:71:33:41:c5:
df:4e:72:ed:27:74:94:88:b3:73:46:02:28:e9:9f:
fb:02:52:11:f1:f4:e9:0e:96:97:5d:d3:ca:95:7c:
07:cf:8e:ae:25:b2:4f:31:1a:3f:18:b8:11:bd:f6:
68:bc:18:a9:81:04:4a:9e:0c:86:99:3d:3a:f9:c1:
df:ff:f0:bb:af:96:2b:30:d5:3c:e1:86:5b:b3:d9:
8b:e1:5d:bb:c3:5d:09:ed:cf:c8:f5:3d:42:c6:b4:
14:a9:d1:92:cc:0b:71:2f:16:87:6c:fb:e7:4c:4c:
5d:77:05:e9:aa:fb:c8:a2:a1:6a:e7:4b:45:09:a6:
85:5f:38:46:0f:d6:6c:79:c4:e3:e9:7f:b6:45:54:
4d:dd:70:d1:a1:0e:f7:67:f8:21:c3:da:4d:d6:b2:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:30:F3:86:7B:7F:51:73:C1:A7:D3:43:8D:2D:82:2A:E6:2A:1B:55
X509v3 Authority Key Identifier:
keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/LTDzhnt_UXPBp9NDjS2CKuYqG1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.208.0/22
IPv6:
2a06:eec0::/29
Signature Algorithm: sha256WithRSAEncryption
16:0e:93:de:59:75:20:94:d5:05:7a:ac:f7:cf:02:dd:71:91:
70:4e:fc:a7:5e:4f:53:65:22:e1:06:ed:96:1a:cd:17:25:99:
dd:84:b6:92:9b:af:4d:e7:82:eb:03:2c:04:30:20:22:2e:34:
12:07:13:5e:56:17:d2:b2:9e:fd:bc:5f:72:16:68:12:d2:e4:
26:f6:ed:d3:af:ac:9c:b2:06:89:d0:d6:35:80:d2:86:8f:9a:
c0:bf:fd:f7:90:67:3a:1f:cc:63:5e:4d:8d:90:78:41:e6:95:
fe:25:29:ae:03:7a:db:d1:a1:6e:08:e4:04:5d:1b:1e:9c:e8:
eb:1a:d8:13:14:25:cd:ef:d8:13:af:29:52:6c:1c:f5:b2:6b:
44:9d:77:4b:ff:dd:1d:7b:a5:5d:9b:c8:0d:c9:55:42:3d:eb:
02:aa:3a:e0:8a:9d:80:71:26:35:b2:b9:8f:77:a6:3a:49:f0:
31:af:f5:51:ba:91:b0:83:a0:13:03:d0:ce:b7:fc:eb:3e:98:
2d:90:ec:82:bb:f6:87:bb:f0:50:64:84:4f:d9:68:bd:d4:3e:
8f:fa:0b:6f:a1:64:ac:7a:d5:69:6c:b0:a7:c0:67:eb:b8:22:
d4:7a:cd:5c:44:c7:b4:e4:7d:61:2a:ee:1c:1f:00:c2:d7:d8:
ff:e0:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:45:10 2025 by rpki-client