Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/L1IzjPcXEmEL4D4EKfyUJjAjCPk.roa
File: L1IzjPcXEmEL4D4EKfyUJjAjCPk.roa (raw, json)
Hash identifier: 0cwacFSLU4udX6OZmUkZm6qQTH51C2Wp1DVe2eUBQmo=
Subject key identifier: 2F:52:33:8C:F7:17:12:61:0B:E0:3E:04:29:FC:94:26:30:23:08:F9
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 17E15DE7
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/L1IzjPcXEmEL4D4EKfyUJjAjCPk.roa
Signing time: Sat 01 Jan 2022 12:55:52 +0000
ROA not before: Sat 01 Jan 2022 12:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35055
IP address blocks: 185.190.64.0/22 maxlen: 24
185.64.120.0/22 maxlen: 24
45.14.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400645607 (0x17e15de7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Jan 1 12:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f52338cf71712610be03e0429fc9426302308f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:1e:d0:29:2f:2c:5d:f8:75:e0:fe:05:d1:
cf:cd:e0:c5:70:a3:96:2f:f1:d9:f0:2e:5b:31:49:
af:9f:41:4b:19:f2:10:73:cd:a9:ec:e3:12:b7:41:
c2:d7:f0:4d:5d:23:f9:40:ad:4c:8b:93:9a:2f:7f:
91:a6:11:76:e2:0c:94:fd:4b:73:6b:24:46:4f:29:
cd:50:9a:a6:95:45:28:32:75:71:a4:fa:e2:8d:01:
5e:34:c1:26:b3:5d:f9:a2:18:91:19:8f:4c:5e:87:
62:7f:79:86:8f:2a:cc:3c:3b:c9:e6:5f:b0:98:1c:
6a:df:38:a7:04:76:bd:d2:06:90:f8:e1:74:4a:92:
4e:76:c8:a5:1f:7f:b0:70:5a:16:b2:6d:c5:c7:a1:
b8:44:68:41:52:6d:bd:ff:61:0a:72:78:69:f1:a9:
ab:6d:e2:84:e4:50:92:18:19:59:31:fd:d3:e3:f5:
ef:a9:c9:d7:65:a8:68:a7:1a:99:c3:8f:57:2c:ed:
58:9f:df:20:0b:09:8a:aa:b7:0c:fe:f3:ce:86:14:
24:f3:ec:93:73:bc:b2:57:e3:ac:e7:9f:37:0c:be:
ab:2b:6c:d0:ba:7f:ad:1a:70:6a:24:ab:06:11:ce:
ad:dc:d5:25:ce:1f:3a:2f:ac:96:c5:ed:d0:2a:ed:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:33:8C:F7:17:12:61:0B:E0:3E:04:29:FC:94:26:30:23:08:F9
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/L1IzjPcXEmEL4D4EKfyUJjAjCPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.240.0/22
185.64.120.0/22
185.190.64.0/22
Signature Algorithm: sha256WithRSAEncryption
78:fb:f0:67:db:6d:e3:2b:e0:52:cc:9d:48:b1:68:d6:90:ef:
12:1f:e6:1f:6d:72:c7:28:f4:36:27:0a:53:45:24:77:05:c1:
21:8d:4d:2f:3b:fc:fe:19:c3:28:89:69:cc:f0:1c:44:58:8b:
32:49:cf:32:4e:56:f3:82:4f:f7:f3:0f:de:01:20:88:69:af:
55:c8:57:41:a8:ff:41:31:50:9c:32:44:ba:aa:3d:ca:38:11:
bd:e5:4f:3f:c9:fa:df:41:9a:9d:16:f2:4b:4a:ec:33:19:1c:
75:08:f7:74:ea:2c:50:03:82:91:af:06:c5:eb:4e:b3:fd:c5:
52:bb:a3:4b:3d:36:df:71:be:d7:cb:42:1c:ed:dc:95:ba:f0:
85:13:f8:e6:43:67:33:4c:fe:f9:f1:8d:01:d0:7b:f9:0d:ea:
fc:6a:29:ba:6a:70:0f:78:05:dd:37:cb:c2:38:a4:cc:ed:3d:
c9:b2:5a:76:04:79:48:5b:80:75:63:6e:2f:9f:0e:77:3c:94:
13:62:6d:42:aa:a0:de:9d:ae:2f:5a:9c:c7:3f:59:35:87:b5:
20:a2:8b:9f:7f:b8:b2:76:09:bd:42:6b:da:1e:25:39:2a:38:
27:83:bc:14:21:cc:70:b3:7b:70:b9:aa:78:79:7b:b8:9b:95:
d5:f5:33:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:19 2025 by rpki-client