Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LBaZ1tKwSfaS9jendTKuB2uJE98.roa
File: LBaZ1tKwSfaS9jendTKuB2uJE98.roa (raw, json)
Hash identifier: NRA/BjxQOgeaDhTR+E/6IRy1z4z+k75lS85TryCL9sc=
Subject key identifier: 2C:16:99:D6:D2:B0:49:F6:92:F6:37:A7:75:32:AE:07:6B:89:13:DF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188E817D88C391590976E7928E430DE8C48
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LBaZ1tKwSfaS9jendTKuB2uJE98.roa
Signing time: Fri 23 Jun 2023 11:50:56 +0000
ROA not before: Fri 23 Jun 2023 11:50:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.230.52.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e8:17:d8:8c:39:15:90:97:6e:79:28:e4:30:de:8c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 23 11:50:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c1699d6d2b049f692f637a77532ae076b8913df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:6b:8d:68:94:1a:3f:16:11:ea:1f:bb:3b:
12:3f:da:3c:65:c9:1b:29:12:f0:ca:1a:b9:be:92:
c3:a6:27:ca:45:b5:81:d1:70:9b:89:6a:f2:4d:48:
21:d9:3c:fc:19:80:b3:82:45:44:a9:9d:9f:d9:37:
46:98:5b:92:37:3d:c3:44:ac:8f:09:58:92:ac:2f:
92:e5:4c:74:ce:57:39:70:9a:43:72:59:b8:61:30:
a1:99:af:26:3c:34:e9:f4:95:f9:49:a5:bf:b0:60:
ae:6c:3a:b3:b4:45:06:b4:ec:4e:93:b6:bb:40:95:
c1:57:29:d8:ba:b0:ca:e3:50:68:ba:27:17:c7:97:
b9:8a:cc:ef:28:d2:dd:b5:2d:f1:24:1b:b2:2e:ae:
4b:c1:e2:f1:a2:5f:2a:d1:43:6b:98:7b:07:2d:62:
ab:27:79:1c:89:1d:ef:25:56:e0:3d:4d:ac:2e:04:
37:f5:1f:60:03:3d:aa:bf:c4:fc:0e:bb:ab:f2:9a:
9a:69:33:39:3e:fa:0c:7f:15:ce:19:9b:71:80:b2:
70:62:61:37:91:60:d2:ec:ee:e6:c2:91:43:dd:df:
99:e0:0c:2e:9c:3f:da:af:eb:bf:f0:ed:a5:bf:6b:
77:1e:f8:5c:d4:bb:80:b3:dd:b9:0c:2b:9e:7b:f5:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:16:99:D6:D2:B0:49:F6:92:F6:37:A7:75:32:AE:07:6B:89:13:DF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LBaZ1tKwSfaS9jendTKuB2uJE98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.52.0/24
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
77:08:f2:5a:5f:99:4d:7f:fc:a8:6e:62:8d:f0:a3:3c:f6:78:
c8:b8:3f:ee:fd:1b:4f:39:6b:3d:0b:8c:1b:89:0b:35:f2:dc:
76:36:47:b3:5e:c3:21:40:1b:2f:04:31:bd:60:31:c3:ee:4b:
c9:be:a0:6a:26:cf:3a:3b:fe:68:0a:79:ea:6b:8a:a0:35:1a:
c0:11:35:56:91:9d:d5:74:d0:e9:bb:2b:d1:c8:51:66:45:e6:
60:f7:ce:a5:ff:9b:29:5c:86:75:4f:70:10:d4:54:74:7f:58:
2b:ef:af:ff:d0:3e:2b:f3:98:06:0a:94:6b:8f:7b:a8:0c:c3:
c5:ac:9f:0b:94:8b:66:0a:9d:77:4f:a3:ac:71:06:95:44:e2:
30:24:03:89:72:55:ec:30:1e:48:7e:a1:20:57:22:a1:f2:6f:
a9:4a:87:fc:5d:fc:90:4c:16:4e:42:2d:b0:49:ae:39:ff:50:
7d:5f:28:f7:fa:5f:50:bf:e6:e1:b1:5d:80:26:5c:76:9b:0b:
3a:20:10:c8:d9:a2:52:42:8f:05:df:c1:27:ec:67:84:b3:63:
21:fb:49:4b:63:37:c3:8a:16:93:e3:6a:c8:b9:db:a6:e5:d3:
ce:1f:88:75:c0:c7:1c:78:de:0b:26:91:d6:df:61:a3:f2:ef:
51:69:bd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:31:41 2025 by rpki-client