Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LfmnsghBl976RHLRx9rfI7u42gU.roa
File: LfmnsghBl976RHLRx9rfI7u42gU.roa (raw, json)
Hash identifier: 5/Dv6iLeaykyQq7TFcQXxhzIvBM3YVj4qcygwJGQMHY=
Subject key identifier: 2D:F9:A7:B2:08:41:97:DE:FA:44:72:D1:C7:DA:DF:23:BB:B8:DA:05
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0182C57D3EA1423F095BA4F59197EA67AA4C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LfmnsghBl976RHLRx9rfI7u42gU.roa
Signing time: Mon 22 Aug 2022 12:18:15 +0000
ROA not before: Mon 22 Aug 2022 12:18:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29066
IP address blocks: 185.255.125.0/24 maxlen: 24
185.240.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:7d:3e:a1:42:3f:09:5b:a4:f5:91:97:ea:67:aa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 22 12:18:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2df9a7b2084197defa4472d1c7dadf23bbb8da05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:e5:3e:7d:88:ba:6a:44:7c:4c:05:93:cf:
0f:3c:33:59:20:a7:14:0c:a4:17:3c:22:66:95:1a:
d2:ad:ba:86:d1:6c:a9:38:c0:9a:f9:3b:c1:b1:47:
03:93:91:02:61:8b:4d:f5:ca:f2:1a:0c:27:3a:9f:
60:1a:bd:af:06:7b:25:95:03:84:8e:b0:9e:80:82:
ef:a0:39:f2:99:f7:0e:85:dc:5a:cf:82:55:53:80:
dc:72:9d:2a:75:a1:fb:ad:88:8d:5e:7a:3f:af:09:
09:9f:82:eb:1c:14:e9:02:d4:e4:41:24:29:5f:ea:
61:2c:d4:8f:03:fd:57:85:91:82:c6:e0:c6:6f:1e:
fc:ec:5d:b7:09:a2:2c:3b:00:d4:e8:e0:d2:cb:12:
2c:83:8d:03:0b:fe:fd:2b:dc:c9:6d:7b:6d:9b:77:
45:48:78:d7:e8:5c:25:d9:9b:68:cd:90:fe:da:58:
d6:db:78:74:0e:a6:8f:c4:f0:93:67:83:70:a7:87:
19:80:e7:47:28:6f:80:d8:6d:b6:6a:90:cd:af:ec:
c3:da:7f:8c:b5:ec:b2:2f:f8:84:d5:72:35:14:0e:
9a:21:81:f8:07:0b:f2:cd:5a:41:ed:ce:64:a2:ac:
61:28:e6:f4:87:9f:8a:d7:4f:4e:b4:b5:71:ed:52:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F9:A7:B2:08:41:97:DE:FA:44:72:D1:C7:DA:DF:23:BB:B8:DA:05
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LfmnsghBl976RHLRx9rfI7u42gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.123.0/24
185.255.125.0/24
Signature Algorithm: sha256WithRSAEncryption
58:50:01:19:16:02:c6:aa:d9:ff:f5:08:8c:ba:97:01:78:2b:
72:1f:cd:b6:6b:59:04:63:e5:24:6f:1e:8f:02:d1:f8:a3:8c:
ad:13:5f:03:36:49:5e:b6:8b:ef:8e:0a:39:ba:5a:1e:bd:18:
7a:63:01:64:71:87:d1:d3:e2:8f:82:8f:07:7b:e1:64:9b:83:
19:4b:b9:f0:a8:f8:0f:41:76:ca:8e:94:c4:cc:ec:fe:95:cb:
51:4d:34:4c:dd:a6:94:95:35:1b:c7:bd:b2:86:b0:e1:f2:ef:
02:3a:e4:fc:db:b6:a5:c8:c7:f2:13:2b:63:fa:25:8d:6d:bb:
68:bc:2c:08:d9:4b:99:fa:1c:ea:1d:aa:10:83:e0:99:75:75:
26:92:93:0c:7d:29:3c:25:7a:27:77:96:f4:4f:c0:31:d1:fc:
77:3e:c2:b4:71:93:ad:41:5f:69:65:f0:ec:0d:d9:a8:df:9a:
66:4f:e6:1d:04:12:61:88:8b:26:d0:81:b5:99:6b:fd:db:78:
6b:c7:fc:aa:0c:02:7f:31:00:33:33:7f:a7:a4:89:44:bb:27:
16:48:fc:53:32:d1:f8:8b:db:c7:57:ff:2b:f2:b4:7c:39:4e:
08:03:83:50:a8:04:f1:61:c7:f9:37:fb:1d:e1:0a:a3:d7:4f:
92:59:6f:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYLFfT6hQj8JW6T1kZfqZ6pMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjIwODIyMTIxODE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGY5YTdiMjA4NDE5N2RlZmE0NDcyZDFjN2RhZGYyM2JiYjhkYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi17lPn2IumpEfEwFk88PPDNZIKcU
DKQXPCJmlRrSrbqG0WypOMCa+TvBsUcDk5ECYYtN9cryGgwnOp9gGr2vBnsllQOE
jrCegILvoDnymfcOhdxaz4JVU4Dccp0qdaH7rYiNXno/rwkJn4LrHBTpAtTkQSQp
X+phLNSPA/1XhZGCxuDGbx787F23CaIsOwDU6ODSyxIsg40DC/79K9zJbXttm3dF
SHjX6Fwl2ZtozZD+2ljW23h0DqaPxPCTZ4Nwp4cZgOdHKG+A2G22apDNr+zD2n+M
teyyL/iE1XI1FA6aIYH4BwvyzVpB7c5koqxhKOb0h5+K109OtLVx7VKiLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC35p7IIQZfe+kRy0cfa3yO7uNoFMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvTGZtbnNnaEJsOTc2UkhMUng5cmZJN3U0MmdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAufB7AwQA
uf99MA0GCSqGSIb3DQEBCwUAA4IBAQBYUAEZFgLGqtn/9QiMupcBeCtyH822a1kE
Y+Ukbx6PAtH4o4ytE18DNkletovvjgo5uloevRh6YwFkcYfR0+KPgo8He+Fkm4MZ
S7nwqPgPQXbKjpTEzOz+lctRTTRM3aaUlTUbx72yhrDh8u8COuT827alyMfyEytj
+iWNbbtovCwI2UuZ+hzqHaoQg+CZdXUmkpMMfSk8JXond5b0T8Ax0fx3PsK0cZOt
QV9pZfDsDdmo35pmT+YdBBJhiIsm0IG1mWv923hrx/yqDAJ/MQAzM3+npIlEuycW
SPxTMtH4i9vHV/8r8rR8OU4IA4NQqATxYcf5N/sd4Qqj10+SWW9t
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org