Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/LBNDGITsbULcSOq3F7UKWmnxeog.roa
File: LBNDGITsbULcSOq3F7UKWmnxeog.roa (raw, json)
Hash identifier: 8xLR/lQVwpinY1M0A0ehn41uCY6VwdVOq2U7E3KfqeQ=
Subject key identifier: 2C:13:43:18:84:EC:6D:42:DC:48:EA:B7:17:B5:0A:5A:69:F1:7A:88
Certificate issuer: /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial: 0F6BB38A
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/LBNDGITsbULcSOq3F7UKWmnxeog.roa
Signing time: Sat 01 Jan 2022 05:52:34 +0000
ROA not before: Sat 01 Jan 2022 05:52:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44108
IP address blocks: 185.179.150.0/24 maxlen: 24
185.179.151.0/24 maxlen: 24
185.179.148.0/24 maxlen: 24
185.179.149.0/24 maxlen: 24
185.231.166.0/24 maxlen: 24
185.231.164.0/24 maxlen: 24
185.231.164.0/23 maxlen: 23
185.231.164.0/22 maxlen: 22
185.231.165.0/24 maxlen: 24
185.231.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258716554 (0xf6bb38a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Validity
Not Before: Jan 1 05:52:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c13431884ec6d42dc48eab717b50a5a69f17a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:2a:06:48:c3:bf:99:59:32:d6:d6:e6:a7:
19:79:b5:93:6b:89:fd:43:ff:30:b7:ab:f1:09:14:
2e:1d:e7:2b:a5:af:ff:4f:f2:80:c7:fb:22:c2:0b:
e4:60:81:1f:c1:a4:ae:3d:85:a3:df:b0:8b:ee:f9:
75:de:12:3e:a6:47:ca:66:62:3d:8f:42:73:5f:ad:
21:88:77:48:8d:9e:e4:c0:8b:ea:e5:1b:bd:7c:74:
d0:b5:e6:88:77:92:25:e2:e4:a9:56:5e:88:f1:5f:
28:48:3c:8e:1e:09:fa:3b:bb:7a:f5:62:7c:0e:f6:
2b:eb:3b:5a:39:be:c5:dc:33:4e:de:99:81:83:f8:
a3:a3:f7:8a:6e:05:a6:9a:25:ee:7e:6e:06:c0:70:
8a:c6:79:7b:af:04:f9:7e:20:0c:f0:d6:dc:21:f1:
05:64:f8:d8:dc:97:50:79:66:50:bd:23:80:f6:76:
2f:89:e4:5a:21:8e:dc:01:6c:39:f5:bf:08:37:82:
f4:ce:d0:ca:ec:e2:13:a4:74:7b:52:45:79:9b:79:
21:e2:6c:33:c1:ce:5c:8f:4a:ce:9c:99:50:3b:8b:
2d:62:ed:d4:ec:ba:76:c2:73:b1:71:77:a5:99:ed:
e0:91:9e:e5:d4:1e:95:47:5f:ba:5e:47:70:4e:df:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:43:18:84:EC:6D:42:DC:48:EA:B7:17:B5:0A:5A:69:F1:7A:88
X509v3 Authority Key Identifier:
keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/LBNDGITsbULcSOq3F7UKWmnxeog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.148.0/22
185.231.164.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:3f:5b:79:0a:09:ff:75:3f:70:cb:4b:ce:11:40:7c:65:22:
42:bc:c6:c6:ab:02:6d:9f:ef:3b:fd:00:d2:1f:7d:eb:09:06:
0a:a0:87:12:24:11:60:c9:fe:c9:77:94:f3:1c:e8:0a:0b:8a:
2d:65:8d:47:ed:59:d4:1e:57:5a:bc:aa:30:c4:63:82:4f:26:
d0:9c:17:c4:87:f5:69:41:23:c0:2d:a9:89:5c:e1:35:36:bc:
a9:6c:73:3f:6e:27:75:8a:ef:be:49:8d:ec:c0:20:60:c2:99:
80:6e:c9:c8:e1:02:87:fa:85:c8:64:31:3c:e5:91:d8:b0:7d:
1d:9d:53:ec:59:f7:46:11:1d:c8:4c:06:62:64:89:6e:80:86:
74:f0:0e:2a:9d:a8:88:d3:ba:f9:c9:73:80:30:37:9b:e3:e1:
fe:8f:28:5d:22:3f:b4:b8:ba:22:64:86:fc:ce:73:3b:bb:e5:
7c:85:87:eb:2f:8a:ff:e0:84:bc:04:50:0f:44:ef:0e:fb:e7:
6a:08:2b:30:aa:b8:66:ab:f9:5b:14:7f:9d:67:27:a6:e9:d5:
6d:9a:c7:38:19:2f:b6:fd:fe:fb:40:a2:7f:2a:83:47:94:7b:
fa:ee:26:4f:ef:d7:a0:25:1b:a3:9f:9a:60:ed:b4:5e:69:62:
5e:8b:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:05 2024 by rpki-client on console-ams.rpki-client.org