Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/LuSgNBQDCEE0m0-x2oYlZux6JMg.roa
File: LuSgNBQDCEE0m0-x2oYlZux6JMg.roa (raw, json)
Hash identifier: mxg1nNRLv2XaSG8GGVv3SE9tMHbdLcG+Iu+Gkgd/VzA=
Subject key identifier: 2E:E4:A0:34:14:03:08:41:34:9B:4F:B1:DA:86:25:66:EC:7A:24:C8
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 1657624B
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/LuSgNBQDCEE0m0-x2oYlZux6JMg.roa
Signing time: Sat 01 Jan 2022 05:05:18 +0000
ROA not before: Sat 01 Jan 2022 05:05:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198335
IP address blocks: 185.194.187.0/24 maxlen: 24
176.241.248.0/21 maxlen: 24
185.194.184.0/22 maxlen: 22
185.194.186.0/24 maxlen: 24
2a00:5a40::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374825547 (0x1657624b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Jan 1 05:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ee4a03414030841349b4fb1da862566ec7a24c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:03:e4:d1:da:07:c8:f8:4f:1e:02:05:9a:
bd:59:89:e2:3e:5c:f9:a3:78:71:ff:a5:79:5e:74:
eb:7f:fb:96:f8:0c:38:38:ed:d7:cd:99:6c:e2:33:
bd:ee:fa:23:59:62:92:49:f5:ac:15:63:80:51:a5:
93:d1:c8:38:ad:f5:9a:49:c5:bd:d8:67:f6:7b:f4:
bf:de:bd:34:4e:fe:25:c9:72:ae:50:3b:a2:6b:53:
e9:53:8b:a9:46:76:ec:c2:86:c7:ed:01:38:8a:7c:
6b:00:ce:65:c7:07:b2:29:49:7a:80:de:ba:33:73:
3a:37:5a:1c:bf:60:dc:52:35:bd:a7:7d:de:78:41:
ac:3a:32:30:66:a2:2a:51:19:64:50:c5:b9:2c:f8:
b5:72:83:e9:ef:77:80:f1:1f:3f:98:4b:4a:5f:15:
04:67:cd:d0:a3:f1:b6:63:01:77:f5:a4:5f:58:65:
96:b3:7c:7f:17:8d:e8:73:fd:21:03:87:80:5e:3e:
db:11:d8:98:4a:41:e4:a2:a6:44:4f:f8:2d:38:e6:
05:81:59:97:7f:41:58:de:68:35:1b:52:69:8a:3b:
2d:a6:f6:73:34:76:72:23:4d:1f:cf:87:0b:bc:90:
e5:78:6b:e7:11:5e:8e:75:37:1d:ea:32:95:60:7d:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E4:A0:34:14:03:08:41:34:9B:4F:B1:DA:86:25:66:EC:7A:24:C8
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/LuSgNBQDCEE0m0-x2oYlZux6JMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.248.0/21
185.194.184.0/22
IPv6:
2a00:5a40::/32
Signature Algorithm: sha256WithRSAEncryption
08:86:8d:31:5b:a6:5a:77:c7:41:10:0f:cb:2a:e0:91:18:b2:
cc:15:5d:65:8a:6f:c8:5e:46:7a:a7:35:39:2b:fd:9a:e5:96:
92:01:54:e2:06:9c:01:fa:e3:a0:b7:52:71:9c:a3:71:63:2c:
5e:38:47:3c:cd:1d:f1:38:60:aa:b5:f8:f5:89:d6:c8:0e:2a:
14:cc:40:bc:c6:c7:87:ad:66:db:c8:a2:b8:7a:17:10:6d:cc:
b7:84:32:8b:cc:cb:6b:42:1f:39:e4:3f:6e:5f:24:aa:df:ae:
14:0f:bc:6e:e4:2b:8a:02:4a:6f:ed:71:37:9d:3e:c1:f8:84:
44:3c:92:46:1b:c1:4a:2d:dd:03:ab:8a:9f:09:4a:e0:8b:99:
e0:29:ba:75:57:7d:57:ba:05:cf:79:63:1d:93:51:b7:ae:31:
0f:de:6f:42:17:02:ce:98:35:02:30:ff:9e:1d:23:9c:c4:d7:
db:93:79:70:f5:35:f7:fd:14:52:03:7d:81:18:ec:e3:a9:f9:
15:61:94:6b:a8:e7:76:76:3e:5e:63:45:cf:d3:27:5e:e7:7c:
d4:f7:bc:a0:9b:39:b5:77:24:5b:b0:e2:96:4d:4f:ad:69:61:
41:ba:da:f1:fb:44:4a:5d:f4:19:88:20:af:ce:89:80:5a:ba:
a3:1b:d3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:37 2023 by rpki-client on console-fra.rpki-client.org