Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/lyKQiPQFBKPSqtEDhQyKz5ZbhxA.roa
File: lyKQiPQFBKPSqtEDhQyKz5ZbhxA.roa (raw, json)
Hash identifier: kYvWAlY4U1RR8K3ASMgJtj/G5TnvCNKVzRBFqnV34yo=
Subject key identifier: 97:22:90:88:F4:05:04:A3:D2:AA:D1:03:85:0C:8A:CF:96:5B:87:10
Certificate issuer: /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial: 0B7709
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/lyKQiPQFBKPSqtEDhQyKz5ZbhxA.roa
Signing time: Mon 04 Jul 2022 15:59:10 +0000
ROA not before: Mon 04 Jul 2022 15:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20676
IP address blocks: 194.180.132.0/22 maxlen: 22
194.180.128.0/23 maxlen: 23
194.180.142.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751369 (0xb7709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Validity
Not Before: Jul 4 15:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97229088f40504a3d2aad103850c8acf965b8710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:c0:b9:f1:8d:65:9f:1d:f3:55:6c:25:d7:
dd:b9:c2:49:5e:5f:74:c2:ce:e6:32:9f:61:52:8b:
1e:fc:1a:3e:6c:4f:8c:3e:29:9f:66:86:da:6b:73:
cd:60:80:06:f1:a3:06:68:78:06:85:f7:96:5a:c5:
02:7f:75:bc:09:07:29:c6:06:aa:ca:d4:3c:29:64:
5a:71:0f:3c:60:d9:94:25:e7:e0:80:a7:e1:41:7c:
ed:27:22:3c:d6:67:d3:a4:61:dc:54:51:89:10:7d:
ff:89:ed:c2:0e:75:e2:db:50:e8:63:4b:64:3b:e1:
ef:ba:58:2f:79:18:c1:84:53:89:2f:87:2b:92:8f:
72:4f:85:74:1a:c2:09:86:16:8e:23:f8:9c:52:a5:
df:76:10:ad:4c:98:6d:61:fc:d4:d3:dc:e0:2a:30:
37:77:1d:dc:e7:be:7f:e0:88:85:ae:58:11:ae:d9:
1d:40:42:c2:f3:a0:ec:5c:60:7e:4a:c9:af:3f:4c:
2f:93:d4:8f:d4:94:1e:74:61:1e:2f:76:24:0f:b2:
a8:62:47:b0:55:91:c3:d5:5d:4e:f3:1d:5f:b4:bd:
ef:4c:f3:ef:9f:1e:5d:d2:50:49:d4:59:01:ea:15:
b5:f7:3a:30:bb:24:2d:db:c8:ab:69:0f:83:55:57:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:22:90:88:F4:05:04:A3:D2:AA:D1:03:85:0C:8A:CF:96:5B:87:10
X509v3 Authority Key Identifier:
keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/lyKQiPQFBKPSqtEDhQyKz5ZbhxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.128.0/23
194.180.132.0/22
194.180.142.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:49:c2:1d:a6:0c:9e:fd:31:f1:42:76:16:79:18:4a:95:02:
d7:00:93:fa:9f:d5:d8:74:47:18:24:2b:47:e0:1c:27:54:2a:
fa:68:ad:eb:72:d9:00:1c:c7:48:cc:b2:ec:10:9a:30:e3:e8:
d3:1c:a5:cc:a9:43:aa:fa:6d:61:bb:86:d0:d7:22:55:9e:6f:
9c:28:2b:62:04:09:e0:e8:c6:a2:19:e8:81:8e:fc:dc:8c:e8:
17:b6:ff:53:4b:cd:28:d8:85:c4:06:e4:93:6b:1c:59:b0:24:
f5:84:fc:cf:32:a0:f4:b6:a9:8c:f1:ca:32:af:a7:84:42:7c:
1a:ae:74:8e:e1:c7:3b:9f:47:a4:cd:34:fc:04:f5:88:25:f9:
cb:e0:ca:af:56:e2:35:13:89:18:df:db:7f:0f:da:0c:f8:5f:
6b:a9:25:24:f3:4d:43:21:8b:a7:a8:6a:59:9a:86:d9:47:91:
7b:6d:9d:7a:64:fb:dc:98:c0:e0:87:bf:42:b5:68:14:5e:81:
74:7a:c9:58:ea:de:93:a1:cf:91:8e:ba:7b:6a:aa:6d:c6:20:
69:14:7f:9d:87:89:9e:8b:2d:fe:11:b5:f9:63:99:54:90:c0:
24:0f:a5:6f:42:f3:3e:9e:d8:e6:47:92:26:a8:8b:9f:f2:4d:
d2:16:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:16:50 2025 by rpki-client