Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/LILKlSh1VCcSASDKtRJrYmfoo74.roa
File: LILKlSh1VCcSASDKtRJrYmfoo74.roa (raw, json)
Hash identifier: sNXM85UtnkDZSswz96Hxn+SpqXWpBIx2PePT/tna7H8=
Subject key identifier: 2C:82:CA:95:28:75:54:27:12:01:20:CA:B5:12:6B:62:67:E8:A3:BE
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 0185ED30735015CD540CEB60A3B831D8CEFA
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/LILKlSh1VCcSASDKtRJrYmfoo74.roa
Signing time: Thu 26 Jan 2023 08:27:33 +0000
ROA not before: Thu 26 Jan 2023 08:27:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29240
IP address blocks: 185.217.236.0/22 maxlen: 22
185.244.244.0/22 maxlen: 22
213.255.160.0/19 maxlen: 19
185.77.244.0/22 maxlen: 22
193.142.16.0/23 maxlen: 23
2a01:18::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:30:73:50:15:cd:54:0c:eb:60:a3:b8:31:d8:ce:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Jan 26 08:27:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c82ca9528755427120120cab5126b6267e8a3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e2:2a:b0:aa:54:11:9f:4f:48:39:95:9a:f2:
44:fe:a3:15:24:dd:85:32:87:fa:ce:10:a4:c7:1f:
c7:26:50:d0:5c:c1:33:1c:d5:b6:71:ba:06:10:25:
39:59:ab:d2:b2:b2:bf:28:7a:22:63:11:fb:74:a0:
e7:53:f0:12:97:63:aa:3c:25:21:d9:f9:76:29:c8:
22:95:4d:a3:c8:1f:aa:18:87:73:b1:80:cf:20:f3:
4f:24:1c:95:a5:8a:ab:73:ff:9b:89:77:3c:12:6d:
20:ec:f6:84:c1:ed:20:27:1f:7e:d0:a3:d2:30:ef:
01:c2:83:b5:dc:c6:fb:a6:2c:02:1f:11:0c:df:31:
61:7c:44:84:16:f3:c9:42:08:fa:be:6e:b4:ed:00:
2a:80:f0:a9:51:0c:d3:4b:fd:42:8f:dd:48:0a:f2:
6b:15:d2:9e:a1:0d:55:7a:0e:01:16:e4:ac:f7:e7:
4b:e9:82:b0:e0:c8:a8:58:7f:ea:61:db:96:16:8c:
4e:08:ae:75:94:ee:9e:0a:c9:e7:6f:5f:40:9c:3f:
4d:66:be:08:0d:c7:a5:07:5c:81:09:e2:0f:52:41:
00:ec:77:ca:0a:1a:a2:7f:fa:39:6b:fa:77:ab:2e:
da:38:ba:9e:04:43:49:f2:db:04:74:23:eb:06:4b:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:82:CA:95:28:75:54:27:12:01:20:CA:B5:12:6B:62:67:E8:A3:BE
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/LILKlSh1VCcSASDKtRJrYmfoo74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.244.0/22
185.217.236.0/22
185.244.244.0/22
193.142.16.0/23
213.255.160.0/19
IPv6:
2a01:18::/32
Signature Algorithm: sha256WithRSAEncryption
67:10:6d:60:90:bb:ce:cf:8f:c7:db:c9:57:aa:6c:da:bc:95:
73:50:87:6b:20:ed:74:be:ed:cd:c8:da:5a:fd:a0:f1:0b:b9:
04:45:2b:8f:7e:a3:6c:7e:37:3b:66:3b:11:28:14:b9:de:84:
53:83:f0:b1:e3:63:60:a5:e8:59:9e:dc:5d:c0:47:65:0b:84:
89:1e:43:25:17:da:d3:9f:77:f8:30:c4:91:e9:f4:6b:b8:18:
9a:b6:8f:8e:4c:f6:23:86:bf:5f:c5:47:cf:15:6d:10:f2:42:
d7:89:db:15:53:ea:ce:3b:a5:29:92:a2:ac:65:97:25:da:77:
27:f2:75:9b:a6:90:5a:ee:09:69:4c:16:e5:da:56:40:fb:ec:
80:66:7a:20:9a:b8:16:15:a8:67:a9:e2:98:40:03:ca:76:75:
6e:c2:5a:53:2a:ce:6a:da:f3:52:2d:45:cb:35:e2:04:2d:06:
3d:47:a1:de:b4:05:38:04:ea:40:e2:30:17:8a:f1:4e:9c:62:
ab:af:92:03:4f:7d:96:34:f1:b4:d0:b6:26:89:f4:10:4d:13:
0e:b7:44:aa:e0:bd:dd:40:9c:1e:29:b5:eb:1f:ce:bc:86:6e:
fa:d7:32:5e:96:39:bf:56:8a:70:32:37:e4:4d:59:1e:4c:29:
65:66:45:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:06 2025 by rpki-client