Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/lRgc3iFS_6UlV9XYWt4RZgIo_aA.roa
File: lRgc3iFS_6UlV9XYWt4RZgIo_aA.roa (raw, json)
Hash identifier: 2J0q0EMenf4zmCx9DlJrY4C6cx/3odBwf3VOdzfft3o=
Subject key identifier: 95:18:1C:DE:21:52:FF:A5:25:57:D5:D8:5A:DE:11:66:02:28:FD:A0
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 0AB3F58E
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/lRgc3iFS_6UlV9XYWt4RZgIo_aA.roa
Signing time: Wed 16 Feb 2022 21:57:44 +0000
ROA not before: Wed 16 Feb 2022 21:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 194.145.137.0/24 maxlen: 24
194.145.136.0/24 maxlen: 24
185.237.82.0/24 maxlen: 24
185.237.83.0/24 maxlen: 24
185.205.16.0/24 maxlen: 24
185.86.83.0/24 maxlen: 24
185.86.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179565966 (0xab3f58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Feb 16 21:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95181cde2152ffa52557d5d85ade11660228fda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:6d:94:2e:40:4a:03:d9:31:50:8b:cc:c9:
f3:5f:51:40:85:f5:62:b4:f3:c7:fb:54:af:da:c2:
60:22:9f:90:c6:47:19:a6:ec:29:eb:ec:52:5b:90:
bc:b2:e4:af:ce:44:16:33:db:de:cc:86:31:f2:bd:
75:74:94:76:d6:97:23:3d:e1:c5:73:c7:6f:ec:c7:
81:16:07:a0:0f:8e:e4:12:11:70:df:3e:a8:46:09:
e7:a9:d8:1b:a5:ff:58:ec:9e:99:71:dc:d5:93:0b:
eb:d4:39:6c:97:4b:cd:66:f1:01:ff:68:cb:70:6c:
3c:9e:73:87:a4:dc:42:79:e2:d1:ca:e4:91:74:7e:
00:7f:f4:82:7f:9b:98:39:8d:6c:6e:12:39:b5:c8:
a1:ad:26:2b:f4:66:49:20:b6:ae:37:bf:4f:18:42:
0a:0e:99:06:28:89:e0:c2:01:a2:6c:51:1c:6d:95:
26:1d:74:da:24:90:71:da:45:f8:83:22:a4:33:37:
64:3f:0d:7b:4f:a3:c7:82:3f:47:4b:a8:39:43:88:
28:dc:1d:34:fc:b8:a5:d1:16:9b:6b:31:14:f2:42:
4b:4e:cd:d4:e3:dc:b4:f0:16:77:4c:ae:28:c6:56:
83:ab:69:74:89:33:f5:9c:c0:e1:df:94:96:31:89:
eb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:18:1C:DE:21:52:FF:A5:25:57:D5:D8:5A:DE:11:66:02:28:FD:A0
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/lRgc3iFS_6UlV9XYWt4RZgIo_aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.82.0/23
185.205.16.0/24
185.237.82.0/23
194.145.136.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:e0:69:5b:e7:2c:65:c9:8f:ee:c2:97:18:c3:ba:14:c2:e8:
d5:5f:2d:88:5b:69:46:8d:a9:de:4d:73:68:ef:b7:7e:cd:96:
39:38:33:ef:21:9d:d9:b3:13:c2:e0:48:b1:15:35:e4:15:5b:
57:37:e5:63:4f:83:9d:31:df:24:8b:c6:f6:a4:b0:be:fb:b3:
db:9a:ee:49:92:4e:ea:8a:d8:de:ff:59:c6:96:17:6e:09:b1:
25:13:13:79:1b:18:33:7b:14:fd:3f:ce:ee:7e:1f:3a:cb:45:
6b:a0:e1:8e:80:aa:a6:c1:43:6a:74:7c:36:e2:f2:4e:ec:55:
f7:a6:3f:94:e1:15:f9:ac:4b:cd:2b:f2:9a:e4:a1:5c:27:0e:
44:6c:9c:c7:d4:ae:e9:18:9b:44:b1:ac:89:ec:0b:b0:11:68:
a9:b1:48:4e:56:71:68:b8:e0:40:85:6c:84:d6:1c:4a:a1:64:
70:72:9b:d1:2c:34:a2:99:cc:66:87:e8:ce:10:6a:6f:a4:f8:
61:18:bd:93:28:7a:cb:a2:23:36:00:3a:07:9a:f8:34:3a:fb:
0f:ea:ed:b3:98:a3:36:fe:d1:aa:d6:da:8a:28:4f:9a:52:11:
8d:f4:0f:9b:d6:a4:12:fb:d7:2c:40:03:fc:fb:70:13:a4:cf:
67:24:af:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org