Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/lmSDQgiKIVrqsPMbygOF2NEW-W4.roa
File: lmSDQgiKIVrqsPMbygOF2NEW-W4.roa (raw, json)
Hash identifier: d5+IjS5yw1InxzZOO3f7CQsKHO0lIAn4gMp+0LD7dWY=
Subject key identifier: 96:64:83:42:08:8A:21:5A:EA:B0:F3:1B:CA:03:85:D8:D1:16:F9:6E
Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial: 01857015406E0D09B3556DB836A2BE250E5B
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/lmSDQgiKIVrqsPMbygOF2NEW-W4.roa
Signing time: Mon 02 Jan 2023 01:25:18 +0000
ROA not before: Mon 02 Jan 2023 01:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56616
IP address blocks: 185.116.22.0/23 maxlen: 23
185.116.20.0/23 maxlen: 23
185.116.20.0/22 maxlen: 22
31.7.88.0/22 maxlen: 22
31.7.88.0/23 maxlen: 23
31.7.90.0/23 maxlen: 23
2a0a:d340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:40:6e:0d:09:b3:55:6d:b8:36:a2:be:25:0e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Validity
Not Before: Jan 2 01:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96648342088a215aeab0f31bca0385d8d116f96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:31:a8:7c:8b:72:d2:dd:c6:2f:96:42:a2:
9a:21:ce:ff:09:c7:90:0d:82:31:01:af:a3:d0:09:
f9:ec:d9:81:0b:36:cb:b9:56:82:8f:08:f2:31:0d:
51:e6:11:b5:7c:4f:66:71:d6:47:75:34:72:5c:f3:
26:cd:e5:0a:cb:f8:00:25:fb:2d:31:ef:07:44:74:
11:3b:03:1b:3f:45:25:52:7a:74:c5:14:82:81:e6:
37:93:0f:30:af:35:1b:35:79:29:8d:e3:21:6d:c7:
31:6a:99:c2:a2:5f:07:46:0d:e0:02:49:e2:d2:d6:
b1:66:04:3c:f6:4c:67:79:dc:69:17:a9:2e:3c:0a:
d9:27:53:ef:07:61:97:f4:bf:2a:21:37:96:b5:f2:
a9:bd:21:ed:5d:c7:7e:b2:c4:b7:e5:08:bf:48:7c:
12:db:9e:11:e4:4f:63:29:53:5f:8a:80:77:ec:a0:
49:b0:ed:f8:3e:47:02:fd:ec:f6:59:d0:af:0c:14:
13:2a:89:82:26:a5:7f:f8:bc:04:3f:85:57:6b:80:
dc:bd:2b:4e:a8:57:83:50:86:7f:98:75:95:c9:70:
b5:c3:a6:e6:0f:98:e8:58:fd:6d:98:4a:63:7b:19:
5e:37:2a:b3:f2:ae:75:49:a5:5e:c3:14:5e:cd:49:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:83:42:08:8A:21:5A:EA:B0:F3:1B:CA:03:85:D8:D1:16:F9:6E
X509v3 Authority Key Identifier:
keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/lmSDQgiKIVrqsPMbygOF2NEW-W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.88.0/22
185.116.20.0/22
IPv6:
2a0a:d340::/29
Signature Algorithm: sha256WithRSAEncryption
0c:6c:57:5d:a1:85:40:fe:ba:67:ee:7d:39:15:10:73:11:4f:
53:c9:09:b7:83:5f:1a:d0:48:27:aa:ae:03:f0:f3:38:11:87:
b0:a5:76:f9:d3:d8:ab:a2:8a:8c:a7:18:52:2b:ba:8c:b3:bd:
21:62:f0:94:0d:10:8e:a4:38:dd:a6:a9:70:02:92:07:e5:6a:
48:5c:10:f6:a0:08:3e:96:94:28:6b:88:27:ad:93:44:2f:33:
fa:c5:4f:05:08:8b:22:3b:eb:e2:f0:11:4f:57:c3:94:54:2e:
c9:18:f6:7d:c7:39:76:66:43:53:99:0d:3d:db:a8:8e:96:0e:
81:29:7f:bb:2f:9a:9e:43:24:b2:b9:92:23:28:f0:25:ef:5d:
4e:30:b6:77:3d:b8:2c:ba:6f:12:39:0b:b9:ef:c1:71:c1:21:
b2:04:9d:d7:51:b7:ee:da:bf:3e:bf:45:cd:6e:a2:cd:bd:ba:
0d:3d:10:68:6b:8a:c4:59:b3:6f:0c:11:34:42:3b:ce:45:d3:
79:e6:62:6d:46:42:9a:c2:ec:d8:91:e3:29:6d:a3:2c:17:a8:
5a:55:28:63:92:2b:40:aa:48:46:c1:d5:30:c2:4c:cf:1e:07:
c1:c8:1c:74:2f:89:9c:17:67:40:39:3c:c1:c6:a4:ff:17:25:
c2:98:1b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:46 2025 by rpki-client